WSO2 WSO2 Identity Server as Key Manager

• CVE-2024-7097 Medium 4.3 Incorrect Authorization in Multiple WSO2 Products via SOAP Admin Service Allowing Unauthorized User Signup 0.7%
• CVE-2024-7096 Medium 4.2 Privilege Escalation in Multiple WSO2 Products via SOAP Admin Service Due to Business Logic Flaw 0.7%
• CVE-2024-6914 Critical 9.8 Incorrect Authorization in Multiple WSO2 Products via Account Recovery SOAP Admin Service Leading to Account Takeover 0.8%
• CVE-2023-6837 High 8.5 Incorrect Authorization in Multiple WSO2 Products via Federated Authentication with JIT Provisioning Leading to User Impersonation 0.5%