CVE-2025-9804

{"id": "CVE-2025-9804", "cveTags": [], "metrics": {"ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2025-9804", "role": "CISA Coordinator", "options": [{"exploitation": "none"}, {"automatable": "no"}, {"technicalImpact": "total"}], "version": "2.0.3", "timestamp": "2025-10-16T13:20:20.582589Z"}}], "cvssMetricV31": [{"type": "Secondary", "source": "ed10eef1-636d-4fbe-9993-6890dfa878f8", "cvssData": {"scope": "CHANGED", "version": "3.1", "baseScore": 9.6, "attackVector": "ADJACENT_NETWORK", "baseSeverity": "CRITICAL", "vectorString": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "NONE", "confidentialityImpact": "HIGH"}, "impactScore": 6.0, "exploitabilityScore": 2.8}, {"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 6.5, "attackVector": "NETWORK", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "LOW", "confidentialityImpact": "HIGH"}, "impactScore": 3.6, "exploitabilityScore": 2.8}]}, "affected": [{"source": "ed10eef1-636d-4fbe-9993-6890dfa878f8", "affectedData": [{"vendor": "WSO2", "product": "WSO2 Identity Server as Key Manager", "versions": [{"status": "unknown", "version": "0", "lessThan": "5.3.0", "versionType": "custom"}, {"status": "affected", "version": "5.3.0", "lessThan": "5.3.0.41", "versionType": "custom"}, {"status": "affected", "version": "5.5.0", "lessThan": "5.5.0.53", "versionType": "custom"}, {"status": "affected", "version": "5.6.0", "lessThan": "5.6.0.75", "versionType": "custom"}, {"status": "affected", "version": "5.7.0", "lessThan": "5.7.0.125", "versionType": "custom"}, {"status": "affected", "version": "5.9.0", "lessThan": "5.9.0.176", "versionType": "custom"}, {"status": "affected", "version": "5.10.0", "lessThan": "5.10.0.359", "versionType": "custom"}], "defaultStatus": "unaffected"}, {"vendor": "WSO2", "product": "WSO2 Identity Server", "versions": [{"status": "unknown", "version": "0", "lessThan": "5.2.0", "versionType": "custom"}, {"status": "affected", "version": "5.2.0", "lessThan": "5.2.0.34", "versionType": "custom"}, {"status": "affected", "version": "5.3.0", "lessThan": "5.3.0.36", "versionType": "custom"}, {"status": "affected", "version": "5.4.0", "lessThan": "5.4.0.34", "versionType": "custom"}, {"status": "affected", "version": "5.4.1", "lessThan": "5.4.1.38", "versionType": "custom"}, {"status": "affected", "version": "5.5.0", "lessThan": "5.5.0.52", "versionType": "custom"}, {"status": "affected", "version": "5.6.0", "lessThan": "5.6.0.60", "versionType": "custom"}, {"status": "affected", "version": "5.7.0", "lessThan": "5.7.0.126", "versionType": "custom"}, {"status": "affected", "version": "5.8.0", "lessThan": "5.8.0.110", "versionType": "custom"}, {"status": "affected", "version": "5.9.0", "lessThan": "5.9.0.169", "versionType": "custom"}, {"status": "affected", "version": "5.10.0", "lessThan": "5.10.0.369", "versionType": "custom"}, {"status": "affected", "version": "5.11.0", "lessThan": "5.11.0.413", "versionType": "custom"}, {"status": "affected", "version": "6.0.0", "lessThan": "6.0.0.244", "versionType": "custom"}, {"status": "affected", "version": "6.1.0", "lessThan": "6.1.0.243", "versionType": "custom"}, {"status": "affected", "version": "7.0.0", "lessThan": "7.0.0.118", "versionType": "custom"}, {"status": "affected", "version": "7.1.0", "lessThan": "7.1.0.25", "versionType": "custom"}], "defaultStatus": "unaffected"}, {"vendor": "WSO2", "product": "WSO2 Open Banking KM", "versions": [{"status": "unknown", "version": "0", "lessThan": "1.4.0", "versionType": "custom"}, {"status": "affected", "version": "1.4.0", "lessThan": "1.4.0.133", "versionType": "custom"}, {"status": "affected", "version": "1.5.0", "lessThan": "1.5.0.123", "versionType": "custom"}], "defaultStatus": "unaffected"}, {"vendor": "WSO2", "product": "WSO2 Open Banking IAM", "versions": [{"status": "unknown", "version": "0", "lessThan": "2.0.0", "versionType": "custom"}, {"status": "affected", "version": "2.0.0", "lessThan": "2.0.0.409", "versionType": "custom"}], "defaultStatus": "unaffected"}, {"vendor": "WSO2", "product": "WSO2 Open Banking AM", "versions": [{"status": "unknown", "version": "0", "lessThan": "1.4.0", "versionType": "custom"}, {"status": "affected", "version": "1.4.0", "lessThan": "1.4.0.139", "versionType": "custom"}, {"status": "affected", "version": "1.5.0", "lessThan": "1.5.0.140", "versionType": "custom"}, {"status": "affected", "version": "2.0.0", "lessThan": "2.0.0.389", "versionType": "custom"}], "defaultStatus": "unaffected"}, {"vendor": "WSO2", "product": "WSO2 API Manager", "versions": [{"status": "unknown", "version": "0", "lessThan": "2.0.0", "versionType": "custom"}, {"status": "affected", "version": "2.0.0", "lessThan": "2.0.0.31", "versionType": "custom"}, {"status": "affected", "version": "2.1.0", "lessThan": "2.1.0.40", "versionType": "custom"}, {"status": "affected", "version": "2.2.0", "lessThan": "2.2.0.59", "versionType": "custom"}, {"status": "affected", "version": "2.5.0", "lessThan": "2.5.0.85", "versionType": "custom"}, {"status": "affected", "version": "2.6.0", "lessThan": "2.6.0.146", "versionType": "custom"}, {"status": "affected", "version": "3.0.0", "lessThan": "3.0.0.176", "versionType": "custom"}, {"status": "affected", "version": "3.1.0", "lessThan": "3.1.0.340", "versionType": "custom"}, {"status": "affected", "version": "3.2.0", "lessThan": "3.2.0.441", "versionType": "custom"}, {"status": "affected", "version": "3.2.1", "lessThan": "3.2.1.61", "versionType": "custom"}, {"status": "affected", "version": "4.0.0", "lessThan": "4.0.0.361", "versionType": "custom"}, {"status": "affected", "version": "4.1.0", "lessThan": "4.1.0.224", "versionType": "custom"}, {"status": "affected", "version": "4.2.0", "lessThan": "4.2.0.162", "versionType": "custom"}, {"status": "affected", "version": "4.3.0", "lessThan": "4.3.0.75", "versionType": "custom"}, {"status": "affected", "version": "4.4.0", "lessThan": "4.4.0.39", "versionType": "custom"}, {"status": "affected", "version": "4.5.0", "lessThan": "4.5.0.23", "versionType": "custom"}], "defaultStatus": "unaffected"}, {"vendor": "WSO2", "product": "WSO2 Identity Server Analytics", "versions": [{"status": "unknown", "version": "0", "lessThan": "5.2.0", "versionType": "custom"}, {"status": "affected", "version": "5.2.0", "lessThan": "5.2.0.19", "versionType": "custom"}, {"status": "affected", "version": "5.3.0", "lessThan": "5.3.0.17", "versionType": "custom"}, {"status": "affected", "version": "5.5.0", "lessThan": "5.5.0.31", "versionType": "custom"}, {"status": "affected", "version": "5.6.0", "lessThan": "5.6.0.38", "versionType": "custom"}], "defaultStatus": "unaffected"}, {"vendor": "WSO2", "product": "API Manager Analytics", "versions": [{"status": "unknown", "version": "0", "lessThan": "2.0.0", "versionType": "custom"}, {"status": "affected", "version": "2.0.0", "lessThan": "2.0.0.14", "versionType": "custom"}, {"status": "affected", "version": "2.1.0", "lessThan": "2.1.0.19", "versionType": "custom"}, {"status": "affected", "version": "2.2.0", "lessThan": "2.2.0.30", "versionType": "custom"}, {"status": "affected", "version": "2.5.0", "lessThan": "2.5.0.39", "versionType": "custom"}], "defaultStatus": "unaffected"}, {"vendor": "WSO2", "product": "WSO2 Enterprise Integrator", "versions": [{"status": "unknown", "version": "0", "lessThan": "6.2.0", "versionType": "custom"}, {"status": "affected", "version": "6.2.0", "lessThan": "6.2.0.62", "versionType": "custom"}, {"status": "affected", "version": "6.3.0", "lessThan": "6.3.0.70", "versionType": "custom"}], "defaultStatus": "unaffected"}, {"vendor": "WSO2", "product": "WSO2 Enterprise Service Bus Analytics", "versions": [{"status": "unknown", "version": "0", "lessThan": "5.0.0", "versionType": "custom"}, {"status": "affected", "version": "5.0.0", "lessThan": "5.0.0.13", "versionType": "custom"}], "defaultStatus": "unaffected"}, {"vendor": "WSO2", "product": "WSO2 Data Analytics Server", "versions": [{"status": "unknown", "version": "0", "lessThan": "3.1.0", "versionType": "custom"}, {"status": "affected", "version": "3.1.0", "lessThan": "3.1.0.20", "versionType": "custom"}, {"status": "affected", "version": "3.2.0", "lessThan": "3.2.0.33", "versionType": "custom"}], "defaultStatus": "unaffected"}, {"vendor": "WSO2", "product": "WSO2 Enterprise Mobility Manager", "versions": [{"status": "unknown", "version": "0", "lessThan": "2.2.0", "versionType": "custom"}, {"status": "affected", "version": "2.2.0", "lessThan": "2.2.0.28", "versionType": "custom"}], "defaultStatus": "unaffected"}, {"vendor": "WSO2", "product": "WSO2 Universal Gateway", "versions": [{"status": "affected", "version": "4.5.0", "lessThan": "4.5.0.22", "versionType": "custom"}], "defaultStatus": "unaffected"}, {"vendor": "WSO2", "product": "WSO2 API Control Plane", "versions": [{"status": "affected", "version": "4.5.0", "lessThan": "4.5.0.24", "versionType": "custom"}], "defaultStatus": "unaffected"}, {"vendor": "WSO2", "product": "WSO2 Traffic Manager", "versions": [{"status": "affected", "version": "4.5.0", "lessThan": "4.5.0.22", "versionType": "custom"}], "defaultStatus": "unaffected"}, {"vendor": "WSO2", "product": "org.wso2.carbon.extension.identity.authenticator.outbound.totp:org.wso2.carbon.extension.identity.authenticator.totp.connector", "versions": [{"status": "affected", "version": "2.0.10", "lessThan": "2.0.10.1", "versionType": "custom"}, {"status": "affected", "version": "2.0.15", "lessThan": "2.0.15.1", "versionType": "custom"}, {"status": "affected", "version": "2.0.21", "lessThan": "2.0.21.1", "versionType": "custom"}, {"status": "affected", "version": "2.0.22", "lessThan": "2.0.22.1", "versionType": "custom"}, {"status": "affected", "version": "2.1.12", "lessThan": "2.1.12.1", "versionType": "custom"}, {"status": "affected", "version": "2.1", "lessThan": "2.1.1972", "versionType": "custom"}, {"status": "affected", "version": "2.2", "lessThan": "2.2.24", "versionType": "custom"}, {"status": "affected", "version": "2.2", "lessThan": "2.2.25", "versionType": "custom"}, {"status": "affected", "version": "3.1.0", "lessThan": "3.1.0.74", "versionType": "custom"}, {"status": "affected", "version": "3.3.6", "lessThan": "3.3.6.7", "versionType": "custom"}, {"status": "affected", "version": "3.3.26", "lessThan": "3.3.26.2", "versionType": "custom"}, {"status": "affected", "version": "3.3.35", "lessThan": "3.3.35.1", "versionType": "custom"}, {"status": "unaffected", "version": "3.3.41", "versionType": "custom", "lessThanOrEqual": "*"}], "packageName": "org.wso2.carbon.extension.identity.authenticator.outbound.totp:org.wso2.carbon.extension.identity.authenticator.totp.connector", "defaultStatus": "unknown"}, {"vendor": "WSO2", "product": "org.wso2.carbon.apimgt:org.wso2.carbon.apimgt.rest.api.util", "versions": [{"status": "affected", "version": "6.7.206", "lessThan": "6.7.206.567", "versionType": "custom"}, {"status": "affected", "version": "6.7.210", "lessThan": "6.7.210.63", "versionType": "custom"}, {"status": "affected", "version": "9.0.174", "lessThan": "9.0.174.522", "versionType": "custom"}, {"status": "affected", "version": "9.20.74", "lessThan": "9.20.74.379", "versionType": "custom"}, {"status": "affected", "version": "9.28.116", "lessThan": "9.28.116.360", "versionType": "custom"}, {"status": "affected", "version": "9.29.120", "lessThan": "9.29.120.184", "versionType": "custom"}, {"status": "affected", "version": "9.30.67", "lessThan": "9.30.67.109", "versionType": "custom"}, {"status": "affected", "version": "9.31.86", "lessThan": "9.31.86.71", "versionType": "custom"}, {"status": "unaffected", "version": "9.32.133", "versionType": "custom", "lessThanOrEqual": "*"}], "packageName": "org.wso2.carbon.apimgt:org.wso2.carbon.apimgt.rest.api.util", "defaultStatus": "unknown"}, {"vendor": "WSO2", "product": "org.wso2.carbon:org.wso2.carbon.base", "versions": [{"status": "affected", "version": "4.4.7", "lessThan": "4.4.7.6", "versionType": "custom"}, {"status": "affected", "version": "4.4.9", "lessThan": "4.4.9.11", "versionType": "custom"}, {"status": "affected", "version": "4.4.11", "lessThan": "4.4.11.9", "versionType": "custom"}, {"status": "affected", "version": "4.4.26", "lessThan": "4.4.26.12", "versionType": "custom"}, {"status": "affected", "version": "4.4.35", "lessThan": "4.4.35.44", "versionType": "custom"}, {"status": "affected", "version": "4.5.1", "lessThan": "4.5.1.43", "versionType": "custom"}, {"status": "affected", "version": "4.6.0", "lessThan": "4.6.0.1990", "versionType": "custom"}, {"status": "affected", "version": "4.6.1", "lessThan": "4.6.1.149", "versionType": "custom"}, {"status": "affected", "version": "4.6.2", "lessThan": "4.6.2.667", "versionType": "custom"}, {"status": "affected", "version": "4.6.3", "lessThan": "4.6.3.36", "versionType": "custom"}, {"status": "affected", "version": "4.6.4", "lessThan": "4.6.4.14", "versionType": "custom"}, {"status": "affected", "version": "4.7.1", "lessThan": "4.7.1.68", "versionType": "custom"}, {"status": "affected", "version": "4.8.1", "lessThan": "4.8.1.39", "versionType": "custom"}, {"status": "affected", "version": "4.9.0", "lessThan": "4.9.0.99", "versionType": "custom"}, {"status": "affected", "version": "4.9.26", "lessThan": "4.9.26.25", "versionType": "custom"}, {"status": "affected", "version": "4.9.27", "lessThan": "4.9.27.10", "versionType": "custom"}, {"status": "affected", "version": "4.9.28", "lessThan": "4.9.28.11", "versionType": "custom"}, {"status": "affected", "version": "4.10.9", "lessThan": "4.10.9.66", "versionType": "custom"}, {"status": "affected", "version": "4.10.42", "lessThan": "4.10.42.9", "versionType": "custom"}, {"status": "affected", "version": "4.9", "lessThan": "4.9.29", "versionType": "custom"}, {"status": "affected", "version": "4.10", "lessThan": "4.10.94", "versionType": "custom"}], "packageName": "org.wso2.carbon:org.wso2.carbon.base", "defaultStatus": "unknown"}, {"vendor": "WSO2", "product": "org.wso2.carbon.identity.framework:org.wso2.carbon.identity.application.mgt", "versions": [{"status": "affected", "version": "5.2.0", "lessThan": "5.2.0.4", "versionType": "custom"}, {"status": "affected", "version": "5.2.2", "lessThan": "5.2.2.21", "versionType": "custom"}, {"status": "affected", "version": "5.7.5", "lessThan": "5.7.5.18", "versionType": "custom"}, {"status": "affected", "version": "5.11.148", "lessThan": "5.11.148.19", "versionType": "custom"}, {"status": "affected", "version": "5.11.256", "lessThan": "5.11.256.21", "versionType": "custom"}, {"status": "affected", "version": "5.12.153", "lessThan": "5.12.153.63", "versionType": "custom"}, {"status": "affected", "version": "5.12.387", "lessThan": "5.12.387.46", "versionType": "custom"}, {"status": "affected", "version": "5.14.97", "lessThan": "5.14.97.89", "versionType": "custom"}, {"status": "affected", "version": "5.17.5", "lessThan": "5.17.5.317", "versionType": "custom"}, {"status": "affected", "version": "5.17.118", "lessThan": "5.17.118.17", "versionType": "custom"}, {"status": "affected", "version": "5.18.187", "lessThan": "5.18.187.309", "versionType": "custom"}, {"status": "affected", "version": "5.18.248", "lessThan": "5.18.248.30", "versionType": "custom"}, {"status": "affected", "version": "5.23.8", "lessThan": "5.23.8.207", "versionType": "custom"}, {"status": "affected", "version": "5.24.8", "lessThan": "5.24.8.23", "versionType": "custom"}, {"status": "affected", "version": "5.25.92", "lessThan": "5.25.92.152", "versionType": "custom"}, {"status": "affected", "version": "5.25.705", "lessThan": "5.25.705.19", "versionType": "custom"}, {"status": "affected", "version": "5.25.713", "lessThan": "5.25.713.9", "versionType": "custom"}, {"status": "affected", "version": "5.25.724", "lessThan": "5.25.724.3", "versionType": "custom"}, {"status": "affected", "version": "7.0.78", "lessThan": "7.0.78.133", "versionType": "custom"}, {"status": "affected", "version": "7.8.23", "lessThan": "7.8.23.47", "versionType": "custom"}, {"status": "affected", "version": "5.25", "lessThan": "5.25.734", "versionType": "custom"}, {"status": "unaffected", "version": "7.8.489", "versionType": "custom", "lessThanOrEqual": "*"}], "packageName": "org.wso2.carbon.identity.framework:org.wso2.carbon.identity.application.mgt", "defaultStatus": "unknown"}, {"vendor": "WSO2", "product": "org.wso2.carbon:org.wso2.carbon.server.admin", "versions": [{"status": "affected", "version": "4.4.7", "lessThan": "4.4.7.6", "versionType": "custom"}, {"status": "affected", "version": "4.4.9", "lessThan": "4.4.9.11", "versionType": "custom"}, {"status": "affected", "version": "4.4.11", "lessThan": "4.4.11.9", "versionType": "custom"}, {"status": "affected", "version": "4.4.26", "lessThan": "4.4.26.12", "versionType": "custom"}, {"status": "affected", "version": "4.4.32", "lessThan": "4.4.32.16", "versionType": "custom"}, {"status": "affected", "version": "4.4.35", "lessThan": "4.4.35.44", "versionType": "custom"}, {"status": "affected", "version": "4.5.1", "lessThan": "4.5.1.43", "versionType": "custom"}, {"status": "affected", "version": "4.6.0", "lessThan": "4.6.0.1990", "versionType": "custom"}, {"status": "affected", "version": "4.6.1", "lessThan": "4.6.1.149", "versionType": "custom"}, {"status": "affected", "version": "4.6.2", "lessThan": "4.6.2.667", "versionType": "custom"}, {"status": "affected", "version": "4.6.3", "lessThan": "4.6.3.36", "versionType": "custom"}, {"status": "affected", "version": "4.6.4", "lessThan": "4.6.4.14", "versionType": "custom"}, {"status": "affected", "version": "4.7.1", "lessThan": "4.7.1.68", "versionType": "custom"}, {"status": "affected", "version": "4.8.1", "lessThan": "4.8.1.39", "versionType": "custom"}, {"status": "affected", "version": "4.9.0", "lessThan": "4.9.0.99", "versionType": "custom"}, {"status": "affected", "version": "4.9.26", "lessThan": "4.9.26.25", "versionType": "custom"}, {"status": "affected", "version": "4.9.27", "lessThan": "4.9.27.10", "versionType": "custom"}, {"status": "affected", "version": "4.9.28", "lessThan": "4.9.28.11", "versionType": "custom"}, {"status": "affected", "version": "4.10.9", "lessThan": "4.10.9.66", "versionType": "custom"}, {"status": "affected", "version": "4.10.42", "lessThan": "4.10.42.9", "versionType": "custom"}, {"status": "affected", "version": "4.9", "lessThan": "4.9.29", "versionType": "custom"}, {"status": "affected", "version": "4.10", "lessThan": "4.10.94", "versionType": "custom"}], "packageName": "org.wso2.carbon:org.wso2.carbon.server.admin", "defaultStatus": "unknown"}, {"vendor": "WSO2", "product": "org.wso2.carbon.identity.workflow.user:org.wso2.carbon.user.mgt.workflow", "versions": [{"status": "affected", "version": "5.1.1", "lessThan": "5.1.1.1", "versionType": "custom"}, {"status": "affected", "version": "5.1.2", "lessThan": "5.1.2.1", "versionType": "custom"}, {"status": "affected", "version": "5.1.5", "lessThan": "5.1.5.1", "versionType": "custom"}, {"status": "affected", "version": "5.3.3", "lessThan": "5.3.3.1", "versionType": "custom"}, {"status": "affected", "version": "5.4.0", "lessThan": "5.4.0.4", "versionType": "custom"}, {"status": "affected", "version": "5.4.1", "lessThan": "5.4.1.5", "versionType": "custom"}, {"status": "affected", "version": "5.6.0", "lessThan": "5.6.0.1", "versionType": "custom"}, {"status": "unaffected", "version": "5.6.21", "versionType": "custom", "lessThanOrEqual": "*"}], "packageName": "org.wso2.carbon.identity.workflow.user:org.wso2.carbon.user.mgt.workflow", "defaultStatus": "unknown"}]}], "published": "2025-10-16T13:15:42.130", "references": [{"url": "https://security.docs.wso2.com/en/latest/security-announcements/security-advisories/2025/WSO2-2025-4503/", "tags": ["Vendor Advisory"], "source": "ed10eef1-636d-4fbe-9993-6890dfa878f8"}], "vulnStatus": "Analyzed", "weaknesses": [{"type": "Secondary", "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "description": [{"lang": "en", "value": "CWE-284"}]}], "descriptions": [{"lang": "en", "value": "An improper access control vulnerability exists in multiple WSO2 products due to insufficient permission enforcement in certain internal SOAP Admin Services and System REST APIs. A low-privileged user may exploit this flaw to perform unauthorized operations, including accessing server-level information.\n\nThis vulnerability affects only internal administrative interfaces. APIs exposed through the WSO2 API Manager's API Gateway remain unaffected."}, {"lang": "es", "value": "Una vulnerabilidad de control de acceso inadecuado existe en m\u00faltiples productos WSO2 debido a una aplicaci\u00f3n de permisos insuficiente en ciertos servicios SOAP Admin internos y API REST del sistema. Un usuario con bajos privilegios puede explotar esta falla para realizar operaciones no autorizadas, incluyendo el acceso a informaci\u00f3n a nivel de servidor.\n\nEsta vulnerabilidad afecta solo a las interfaces administrativas internas. Las API expuestas a trav\u00e9s del API Gateway de WSO2 API Manager permanecen inafectadas."}], "lastModified": "2026-09-26T00:10:00.127", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:wso2:api_control_plane:4.5.0:-:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "DEEA7DB5-BBF7-44A4-9FB6-0D235A44C680"}, {"criteria": "cpe:2.3:a:wso2:api_manager:2.0.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "C6D7E912-B0C4-4AD2-90CF-6355BA9DEEB0"}, {"criteria": "cpe:2.3:a:wso2:api_manager:2.1.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "245D4EB1-F69D-4FAF-94DB-F4B3D3C20539"}, {"criteria": "cpe:2.3:a:wso2:api_manager:2.2.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "6819491F-C6C3-41C1-B27A-0D0B62224977"}, {"criteria": "cpe:2.3:a:wso2:api_manager:2.5.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "0D57C8CF-084D-4142-9AF1-7C9F1261A3BD"}, {"criteria": "cpe:2.3:a:wso2:api_manager:2.6.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "BC168B6A-B15A-4C3B-A38D-C0B65F24F333"}, {"criteria": "cpe:2.3:a:wso2:api_manager:3.0.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "8FF14774-8935-4FC9-B5C8-9771B3D6EBFD"}, {"criteria": "cpe:2.3:a:wso2:api_manager:3.1.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "1344FB79-0796-445C-A8F3-C03E995925D1"}, {"criteria": "cpe:2.3:a:wso2:api_manager:3.2.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "E31E32CD-497E-4EF5-B3FC-8718EE06EDAD"}, {"criteria": "cpe:2.3:a:wso2:api_manager:3.2.1:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "B58251E8-606B-47C8-8E50-9F9FC8C179BD"}, {"criteria": "cpe:2.3:a:wso2:api_manager:4.0.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "E21D7ABF-C328-425D-B914-618C7628220B"}, {"criteria": "cpe:2.3:a:wso2:api_manager:4.1.0:-:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "51465410-6B7C-40FD-A1AB-A14F650A6AC8"}, {"criteria": "cpe:2.3:a:wso2:api_manager:4.2.0:-:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "851470CC-22AB-43E4-9CC6-5E22D49B3572"}, {"criteria": "cpe:2.3:a:wso2:api_manager:4.3.0:-:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "9EBAB99E-6F0F-4CE9-A954-E8878826304C"}, {"criteria": "cpe:2.3:a:wso2:api_manager:4.4.0:-:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "0B3E6207-B2CF-487C-9CB8-906248B665C9"}, {"criteria": "cpe:2.3:a:wso2:api_manager:4.5.0:-:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "D47B760D-5418-4FB0-88F0-3F78BAFF63E1"}, {"criteria": "cpe:2.3:a:wso2:api_manager_analytics:2.0.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "2318B757-4BE3-4A45-9337-12281210964E"}, {"criteria": "cpe:2.3:a:wso2:api_manager_analytics:2.1.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "2D5DF76F-1578-4C10-AB38-A01979302B3B"}, {"criteria": "cpe:2.3:a:wso2:api_manager_analytics:2.2.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "ADEAF56C-4583-40A6-826F-01AC86191AD7"}, {"criteria": "cpe:2.3:a:wso2:api_manager_analytics:2.5.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "04A2A50A-872E-4CC7-BBB7-3E0956176AAC"}, {"criteria": "cpe:2.3:a:wso2:data_analytics_server:3.1.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "941D83A5-1978-49AE-890D-E31980E2D6AA"}, {"criteria": "cpe:2.3:a:wso2:data_analytics_server:3.2.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "5CCDDFAB-C8FC-41C4-9872-667C442F119B"}, {"criteria": "cpe:2.3:a:wso2:enterprise_integrator:6.2.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "66292C25-B0B9-4FCE-9382-57B8F6BB814A"}, {"criteria": "cpe:2.3:a:wso2:enterprise_integrator:6.3.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "709DC7EA-18A6-4B83-84CB-F2499BEB5D2F"}, {"criteria": "cpe:2.3:a:wso2:enterprise_mobility_manager:2.2.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "A9D6FCEF-7685-42DD-B322-AD87B5F37574"}, {"criteria": "cpe:2.3:a:wso2:enterprise_service_bus:5.0.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "236C44E3-FAB5-41F2-9884-D17944EBB468"}, {"criteria": "cpe:2.3:a:wso2:identity_server:5.2.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "2689AF3E-01AA-4B79-BA55-6BB3D81E16CF"}, {"criteria": "cpe:2.3:a:wso2:identity_server:5.3.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "0375C318-ECD2-4657-A0D7-4A0708266FBE"}, {"criteria": "cpe:2.3:a:wso2:identity_server:5.4.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "B9E7D773-A7CE-4AB8-828B-C2E7DC2799AD"}, {"criteria": "cpe:2.3:a:wso2:identity_server:5.4.1:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "CEA63B98-D4B4-4FCD-A869-FE64BC21A1B6"}, {"criteria": "cpe:2.3:a:wso2:identity_server:5.5.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "8DA0050E-D5DD-45E5-9F61-DC1BB060EFF0"}, {"criteria": "cpe:2.3:a:wso2:identity_server:5.6.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "26542F95-73F3-4906-838E-A66F5DC9DFA5"}, {"criteria": "cpe:2.3:a:wso2:identity_server:5.7.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "60781FE4-38A3-4FEA-9D8B-CADE4B535974"}, {"criteria": "cpe:2.3:a:wso2:identity_server:5.8.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "2B169832-A746-49A6-8E92-06624AA9B13A"}, {"criteria": "cpe:2.3:a:wso2:identity_server:5.9.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "981D701D-E381-484A-9614-CD0EF0331071"}, {"criteria": "cpe:2.3:a:wso2:identity_server:5.10.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "F4F126CA-A2F9-44F4-968B-DF71765869E5"}, {"criteria": "cpe:2.3:a:wso2:identity_server:5.11.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "2153AECE-020A-4C01-B2A6-F9F5D98E7EBE"}, {"criteria": "cpe:2.3:a:wso2:identity_server:6.0.0:-:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "32CE7893-AD1A-49E5-BD1A-5E9C2DEB8764"}, {"criteria": "cpe:2.3:a:wso2:identity_server:6.1.0:-:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "EA76533A-5BED-4BDC-B348-EB3D3FDFB110"}, {"criteria": "cpe:2.3:a:wso2:identity_server:7.0.0:-:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "C1EFBD0F-9664-4EF3-9908-C72B1318F68F"}, {"criteria": "cpe:2.3:a:wso2:identity_server:7.1.0:-:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "A5358E6E-8C01-408D-8692-B1A326DC630F"}, {"criteria": "cpe:2.3:a:wso2:identity_server_analytics:5.2.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "A1116722-BC4A-4127-9BF5-DB62760BD026"}, {"criteria": "cpe:2.3:a:wso2:identity_server_analytics:5.3.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "D1AB6D32-5BD3-47F0-BDA8-3AEC1C24543F"}, {"criteria": "cpe:2.3:a:wso2:identity_server_analytics:5.5.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "42BFE7A0-A168-4C1E-8725-41DD500C837E"}, {"criteria": "cpe:2.3:a:wso2:identity_server_analytics:5.6.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "5508EC5E-BEEA-49A7-BA2E-AEF40ECCB5C8"}, {"criteria": "cpe:2.3:a:wso2:identity_server_as_key_manager:5.3.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "104DBA04-538E-4CC5-9B6C-CFEDB40375AA"}, {"criteria": "cpe:2.3:a:wso2:identity_server_as_key_manager:5.5.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "E4F0F121-700C-4D30-BAFC-960DCC56F08B"}, {"criteria": "cpe:2.3:a:wso2:identity_server_as_key_manager:5.6.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "2E5761F7-C287-4EC4-A899-C54FB4E80A35"}, {"criteria": "cpe:2.3:a:wso2:identity_server_as_key_manager:5.7.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "3B184BFC-8E1A-4971-B6D2-C594742AB8CE"}, {"criteria": "cpe:2.3:a:wso2:identity_server_as_key_manager:5.9.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "EA51AC1B-0BF6-44F6-B034-CAD4F623DD76"}, {"criteria": "cpe:2.3:a:wso2:identity_server_as_key_manager:5.10.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "6BB34405-A2F1-461A-B51B-E103BB3680A1"}, {"criteria": "cpe:2.3:a:wso2:open_banking_am:1.4.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "8CFB56F4-91D1-4FBF-842A-04BB117CAF85"}, {"criteria": "cpe:2.3:a:wso2:open_banking_am:1.5.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "035BF3B3-1AB9-43BC-BB37-68843818EDEA"}, {"criteria": "cpe:2.3:a:wso2:open_banking_am:2.0.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "94347800-04D2-48C4-ACF0-078A5ACBB063"}, {"criteria": "cpe:2.3:a:wso2:open_banking_iam:2.0.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "D7C241A3-8EA0-41E4-ABF3-21B9D8E7A5BE"}, {"criteria": "cpe:2.3:a:wso2:open_banking_km:1.4.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "E53783F4-60C7-4A92-8951-F8FD51170670"}, {"criteria": "cpe:2.3:a:wso2:open_banking_km:1.5.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "535EFD44-F81C-43B2-B595-81429468637F"}, {"criteria": "cpe:2.3:a:wso2:traffic_manager:4.5.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "C7413107-D7B2-49AE-AC46-52E7BFCD6ED8"}, {"criteria": "cpe:2.3:a:wso2:universal_gateway:4.5.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "61636553-C25E-44DF-93D7-EB3E1056D1DC"}], "operator": "OR"}]}], "sourceIdentifier": "ed10eef1-636d-4fbe-9993-6890dfa878f8"}