CVE-2024-7487

5.8 mediumEPSS 0.3%

Medium (5.8) in wso2 identity server. EPSS 0.3% chance of exploitation in the next 30 days.

An improper authentication vulnerability exists in WSO2 Identity Server 7.0.0 due to an implementation flaw that allows app-native authentication to be bypassed when an invalid object is passed. Exploitation of this vulnerability could enable malicious actors to circumvent the client verification mechanism, compromising the integrity of the authentication process.

Severity

CVSS 3.1

5.8 medium

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:L/A:N

EPSS: 0.3% chance of exploitation in the next 30 days; higher than 26% of CVEs (scores of 2026-10-31)
CWE: CWE-287
Published: 2025-05-22
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

wso2:identity_server

References

https://security.docs.wso2.com/en/latest/security-announcements/security-advisories/2024/WSO2-2024-3348/

Check your stack JSON