diff --git a/components/org.wso2.carbon.identity.api.user.totp/org.wso2.carbon.identity.api.user.totp.common/pom.xml b/components/org.wso2.carbon.identity.api.user.totp/org.wso2.carbon.identity.api.user.totp.common/pom.xml
index 364b7480c..df89c76ce 100644
--- a/components/org.wso2.carbon.identity.api.user.totp/org.wso2.carbon.identity.api.user.totp.common/pom.xml
+++ b/components/org.wso2.carbon.identity.api.user.totp/org.wso2.carbon.identity.api.user.totp.common/pom.xml
@@ -123,6 +123,12 @@
             <groupId>org.wso2.carbon.extension.identity.authenticator.outbound.totp</groupId>
             <artifactId>org.wso2.carbon.extension.identity.authenticator.totp.connector</artifactId>
             <scope>provided</scope>
+            <exclusions>
+                <exclusion>
+                    <groupId>commons-collections</groupId>
+                    <artifactId>commons-collections</artifactId>
+                </exclusion>
+            </exclusions>
         </dependency>
     </dependencies>
 
diff --git a/components/org.wso2.carbon.identity.api.user.totp/org.wso2.carbon.identity.api.user.totp.v1/pom.xml b/components/org.wso2.carbon.identity.api.user.totp/org.wso2.carbon.identity.api.user.totp.v1/pom.xml
index 094858094..607702184 100644
--- a/components/org.wso2.carbon.identity.api.user.totp/org.wso2.carbon.identity.api.user.totp.v1/pom.xml
+++ b/components/org.wso2.carbon.identity.api.user.totp/org.wso2.carbon.identity.api.user.totp.v1/pom.xml
@@ -136,6 +136,12 @@
             <groupId>org.wso2.carbon.extension.identity.authenticator.outbound.totp</groupId>
             <artifactId>org.wso2.carbon.extension.identity.authenticator.totp.connector</artifactId>
             <scope>provided</scope>
+            <exclusions>
+                <exclusion>
+                    <groupId>commons-collections</groupId>
+                    <artifactId>commons-collections</artifactId>
+                </exclusion>
+            </exclusions>
         </dependency>
         <dependency>
             <groupId>org.wso2.carbon.identity.user.api</groupId>