https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 09 Oct 2026 09:24:49 +0000 https://cve.radiocsirt.org/vuln/cve-2025-1396 <p><strong>Affected:</strong> WSO2 Identity Server, WSO2 Open Banking IAM, WSO2 Identity Server as Key Manager</p> <p>A username enumeration vulnerability exists in multiple WSO2 products when Multi-Attribute Login is enabled. In this configuration, the system returns a distinct &#34;User does not exist&#34; error message to the login form, regardless of the validate_username setting. This behavior allows malicious actors to determine which usernames exist in the system based on observable discrepancies in the application&#39;s responses.</p> <p>Exploitation of this vulnerability could aid in brute-force attacks, targeted phishing campaigns, or other social engineering techniques by confirming the validity of user identifiers within the system.</p> <p><strong>Affected:</strong> WSO2 Identity Server, WSO2 Open Banking IAM, WSO2 Identity Server as Key Manager</p> <p>A username enumeration vulnerability exists in multiple WSO2 products when Multi-Attribute Login is enabled. In this configuration, the system returns a distinct &#34;User does not exist&#34; error message to the login form, regardless of the validate_username setting. This behavior allows malicious actors to determine which usernames exist in the system based on observable discrepancies in the application&#39;s responses.</p> <p>Exploitation of this vulnerability could aid in brute-force attacks, targeted phishing campaigns, or other social engineering techniques by confirming the validity of user identifiers within the system.</p> https://cve.radiocsirt.org/vuln/cve-2025-1396