WSO2 Forgerock Key Manager Component

1 published vulnerability names this product.

As the CNAs write it in their CVE records (vendor and product); the versions are theirs.

CVEVulnerable versionsTitleSeverityPublishedEPSSExploitation
CVE-2025-70431.0.0 – < 1.0.0.3 ; 1.0.0 – < 1.0.0.4 ; 1.1.0 – < 1.1.0.2 ; …Refresh Token Misuse via Validation Flaw in Multiple WSO2 Products Enables Unauthorized Resource ConsumptionMEDIUM 5.40.2 %