WSO2 org.wso2.carbon.identity.inbound.auth.oauth2:org.wso2.carbon.identity.oauth.ui

1 published vulnerability names this product.

As the CNAs write it in their CVE records (vendor and product); the versions are theirs.

CVE	Vulnerable versions	Title	Severity	Published	EPSS	Exploitation
CVE-2025-10853		Reflected Cross-Site Scripting (XSS) in Management Console of Multiple WSO2 Products Due to Improper Output Encoding	MEDIUM 6.1	2025-11-05	0.2 %