CVE-2024-2323 | WSO2 API Manager Password History Validation Feature excessive authentication

October 20, 2026 Yanac

A vulnerability has been found in WSO2 API Manager, Carbon User Manager Kernel, Enterprise Integrator, Identity Server, Identity Server as Key Manager, Open Banking AM and Open Banking IAM and classified as problematic. Impacted is an unknown function of the component Password History Validation Feature. Performing a manipulation results in improper restriction of excessive authentication attempts.

This vulnerability is identified as CVE-2024-2323. The attack can be initiated remotely. There is not any exploit available.VulDB Recent EntriesRead More