2171 lines
91 KiB
JSON
2171 lines
91 KiB
JSON
{
|
|
"dataType": "CVE_RECORD",
|
|
"dataVersion": "5.2",
|
|
"cveMetadata": {
|
|
"cveId": "CVE-2025-13394",
|
|
"assignerOrgId": "ed10eef1-636d-4fbe-9993-6890dfa878f8",
|
|
"state": "PUBLISHED",
|
|
"assignerShortName": "WSO2",
|
|
"dateReserved": "2025-11-19T06:17:35.259Z",
|
|
"datePublished": "2026-08-06T07:33:17.645Z",
|
|
"dateUpdated": "2026-08-06T12:32:29.065Z"
|
|
},
|
|
"containers": {
|
|
"cna": {
|
|
"affected": [
|
|
{
|
|
"defaultStatus": "unaffected",
|
|
"product": "WSO2 Identity Server",
|
|
"vendor": "WSO2",
|
|
"versions": [
|
|
{
|
|
"lessThan": "5.10.0",
|
|
"status": "unknown",
|
|
"version": "0",
|
|
"versionType": "custom"
|
|
},
|
|
{
|
|
"lessThan": "5.10.0.381",
|
|
"status": "affected",
|
|
"version": "5.10.0",
|
|
"versionType": "custom"
|
|
},
|
|
{
|
|
"lessThan": "5.11.0.428",
|
|
"status": "affected",
|
|
"version": "5.11.0",
|
|
"versionType": "custom"
|
|
},
|
|
{
|
|
"lessThan": "6.0.0.255",
|
|
"status": "affected",
|
|
"version": "6.0.0",
|
|
"versionType": "custom"
|
|
},
|
|
{
|
|
"lessThan": "6.1.0.256",
|
|
"status": "affected",
|
|
"version": "6.1.0",
|
|
"versionType": "custom"
|
|
},
|
|
{
|
|
"lessThan": "7.0.0.133",
|
|
"status": "affected",
|
|
"version": "7.0.0",
|
|
"versionType": "custom"
|
|
},
|
|
{
|
|
"lessThan": "7.1.0.41",
|
|
"status": "affected",
|
|
"version": "7.1.0",
|
|
"versionType": "custom"
|
|
},
|
|
{
|
|
"lessThan": "7.2.0.3",
|
|
"status": "affected",
|
|
"version": "7.2.0",
|
|
"versionType": "custom"
|
|
}
|
|
]
|
|
},
|
|
{
|
|
"defaultStatus": "unaffected",
|
|
"product": "WSO2 API Manager",
|
|
"vendor": "WSO2",
|
|
"versions": [
|
|
{
|
|
"lessThan": "3.1.0",
|
|
"status": "unknown",
|
|
"version": "0",
|
|
"versionType": "custom"
|
|
},
|
|
{
|
|
"lessThan": "3.1.0.352",
|
|
"status": "affected",
|
|
"version": "3.1.0",
|
|
"versionType": "custom"
|
|
},
|
|
{
|
|
"lessThan": "3.2.0.456",
|
|
"status": "affected",
|
|
"version": "3.2.0",
|
|
"versionType": "custom"
|
|
},
|
|
{
|
|
"lessThan": "3.2.1.75",
|
|
"status": "affected",
|
|
"version": "3.2.1",
|
|
"versionType": "custom"
|
|
},
|
|
{
|
|
"lessThan": "4.0.0.376",
|
|
"status": "affected",
|
|
"version": "4.0.0",
|
|
"versionType": "custom"
|
|
},
|
|
{
|
|
"lessThan": "4.1.0.239",
|
|
"status": "affected",
|
|
"version": "4.1.0",
|
|
"versionType": "custom"
|
|
},
|
|
{
|
|
"lessThan": "4.2.0.179",
|
|
"status": "affected",
|
|
"version": "4.2.0",
|
|
"versionType": "custom"
|
|
},
|
|
{
|
|
"lessThan": "4.3.0.91",
|
|
"status": "affected",
|
|
"version": "4.3.0",
|
|
"versionType": "custom"
|
|
},
|
|
{
|
|
"lessThan": "4.4.0.55",
|
|
"status": "affected",
|
|
"version": "4.4.0",
|
|
"versionType": "custom"
|
|
},
|
|
{
|
|
"lessThan": "4.5.0.38",
|
|
"status": "affected",
|
|
"version": "4.5.0",
|
|
"versionType": "custom"
|
|
},
|
|
{
|
|
"lessThan": "4.6.0.3",
|
|
"status": "affected",
|
|
"version": "4.6.0",
|
|
"versionType": "custom"
|
|
}
|
|
]
|
|
},
|
|
{
|
|
"defaultStatus": "unaffected",
|
|
"product": "WSO2 Open Banking IAM",
|
|
"vendor": "WSO2",
|
|
"versions": [
|
|
{
|
|
"lessThan": "2.0.0",
|
|
"status": "unknown",
|
|
"version": "0",
|
|
"versionType": "custom"
|
|
},
|
|
{
|
|
"lessThan": "2.0.0.421",
|
|
"status": "affected",
|
|
"version": "2.0.0",
|
|
"versionType": "custom"
|
|
}
|
|
]
|
|
},
|
|
{
|
|
"defaultStatus": "unaffected",
|
|
"product": "WSO2 Open Banking AM",
|
|
"vendor": "WSO2",
|
|
"versions": [
|
|
{
|
|
"lessThan": "2.0.0",
|
|
"status": "unknown",
|
|
"version": "0",
|
|
"versionType": "custom"
|
|
},
|
|
{
|
|
"lessThan": "2.0.0.401",
|
|
"status": "affected",
|
|
"version": "2.0.0",
|
|
"versionType": "custom"
|
|
}
|
|
]
|
|
},
|
|
{
|
|
"defaultStatus": "unaffected",
|
|
"product": "WSO2 Identity Server as Key Manager",
|
|
"vendor": "WSO2",
|
|
"versions": [
|
|
{
|
|
"lessThan": "5.10.0",
|
|
"status": "unknown",
|
|
"version": "0",
|
|
"versionType": "custom"
|
|
},
|
|
{
|
|
"lessThan": "5.10.0.372",
|
|
"status": "affected",
|
|
"version": "5.10.0",
|
|
"versionType": "custom"
|
|
}
|
|
]
|
|
},
|
|
{
|
|
"defaultStatus": "unaffected",
|
|
"product": "WSO2 API Control Plane",
|
|
"vendor": "WSO2",
|
|
"versions": [
|
|
{
|
|
"lessThan": "4.5.0",
|
|
"status": "unknown",
|
|
"version": "0",
|
|
"versionType": "custom"
|
|
},
|
|
{
|
|
"lessThan": "4.5.0.39",
|
|
"status": "affected",
|
|
"version": "4.5.0",
|
|
"versionType": "custom"
|
|
},
|
|
{
|
|
"lessThan": "4.6.0.3",
|
|
"status": "affected",
|
|
"version": "4.6.0",
|
|
"versionType": "custom"
|
|
}
|
|
]
|
|
},
|
|
{
|
|
"defaultStatus": "unaffected",
|
|
"product": "WSO2 Universal Gateway",
|
|
"vendor": "WSO2",
|
|
"versions": [
|
|
{
|
|
"lessThan": "4.5.0",
|
|
"status": "unknown",
|
|
"version": "0",
|
|
"versionType": "custom"
|
|
},
|
|
{
|
|
"lessThan": "4.5.0.37",
|
|
"status": "affected",
|
|
"version": "4.5.0",
|
|
"versionType": "custom"
|
|
},
|
|
{
|
|
"lessThan": "4.6.0.3",
|
|
"status": "affected",
|
|
"version": "4.6.0",
|
|
"versionType": "custom"
|
|
}
|
|
]
|
|
},
|
|
{
|
|
"defaultStatus": "unaffected",
|
|
"product": "WSO2 Traffic Manager",
|
|
"vendor": "WSO2",
|
|
"versions": [
|
|
{
|
|
"lessThan": "4.5.0",
|
|
"status": "unknown",
|
|
"version": "0",
|
|
"versionType": "custom"
|
|
},
|
|
{
|
|
"lessThan": "4.5.0.37",
|
|
"status": "affected",
|
|
"version": "4.5.0",
|
|
"versionType": "custom"
|
|
},
|
|
{
|
|
"lessThan": "4.6.0.3",
|
|
"status": "affected",
|
|
"version": "4.6.0",
|
|
"versionType": "custom"
|
|
}
|
|
]
|
|
},
|
|
{
|
|
"defaultStatus": "unaffected",
|
|
"product": "WSO2 Enterprise Integrator",
|
|
"vendor": "WSO2",
|
|
"versions": [
|
|
{
|
|
"lessThan": "6.6.0",
|
|
"status": "unknown",
|
|
"version": "0",
|
|
"versionType": "custom"
|
|
},
|
|
{
|
|
"lessThan": "6.6.0.227",
|
|
"status": "affected",
|
|
"version": "6.6.0",
|
|
"versionType": "custom"
|
|
}
|
|
]
|
|
},
|
|
{
|
|
"defaultStatus": "unknown",
|
|
"packageName": "org.wso2.carbon.identity.framework:org.wso2.carbon.identity.entitlement.ui",
|
|
"product": "WSO2 Carbon Identity Entitlement UI",
|
|
"vendor": "WSO2",
|
|
"versions": [
|
|
{
|
|
"lessThan": "5.17.5.331",
|
|
"status": "affected",
|
|
"version": "5.17.5",
|
|
"versionType": "custom"
|
|
},
|
|
{
|
|
"lessThan": "5.18.187.329",
|
|
"status": "affected",
|
|
"version": "5.18.187",
|
|
"versionType": "custom"
|
|
},
|
|
{
|
|
"lessThan": "5.23.8.210",
|
|
"status": "affected",
|
|
"version": "5.23.8",
|
|
"versionType": "custom"
|
|
},
|
|
{
|
|
"lessThan": "5.25.92.166",
|
|
"status": "affected",
|
|
"version": "5.25.92",
|
|
"versionType": "custom"
|
|
},
|
|
{
|
|
"lessThan": "7.0.78.157",
|
|
"status": "affected",
|
|
"version": "7.0.78",
|
|
"versionType": "custom"
|
|
},
|
|
{
|
|
"lessThanOrEqual": "*",
|
|
"status": "unaffected",
|
|
"version": "x",
|
|
"versionType": "custom"
|
|
}
|
|
]
|
|
},
|
|
{
|
|
"defaultStatus": "unknown",
|
|
"packageName": "org.wso2.carbon.identity.framework:org.wso2.carbon.identity.mgt.ui",
|
|
"product": "WSO2 Carbon Identity Management UI1",
|
|
"vendor": "WSO2",
|
|
"versions": [
|
|
{
|
|
"lessThan": "5.17.5.330",
|
|
"status": "affected",
|
|
"version": "5.17.5",
|
|
"versionType": "custom"
|
|
},
|
|
{
|
|
"lessThan": "5.17.5.331",
|
|
"status": "affected",
|
|
"version": "5.17.5",
|
|
"versionType": "custom"
|
|
},
|
|
{
|
|
"lessThan": "5.17.118.22",
|
|
"status": "affected",
|
|
"version": "5.17.118",
|
|
"versionType": "custom"
|
|
},
|
|
{
|
|
"lessThan": "5.18.187.328",
|
|
"status": "affected",
|
|
"version": "5.18.187",
|
|
"versionType": "custom"
|
|
},
|
|
{
|
|
"lessThan": "5.18.187.329",
|
|
"status": "affected",
|
|
"version": "5.18.187",
|
|
"versionType": "custom"
|
|
},
|
|
{
|
|
"lessThan": "5.18.248.31",
|
|
"status": "affected",
|
|
"version": "5.18.248",
|
|
"versionType": "custom"
|
|
},
|
|
{
|
|
"lessThan": "5.23.8.210",
|
|
"status": "affected",
|
|
"version": "5.23.8",
|
|
"versionType": "custom"
|
|
},
|
|
{
|
|
"lessThan": "5.24.8.26",
|
|
"status": "affected",
|
|
"version": "5.24.8",
|
|
"versionType": "custom"
|
|
},
|
|
{
|
|
"lessThan": "5.25.92.166",
|
|
"status": "affected",
|
|
"version": "5.25.92",
|
|
"versionType": "custom"
|
|
},
|
|
{
|
|
"lessThan": "5.25.705.21",
|
|
"status": "affected",
|
|
"version": "5.25.705",
|
|
"versionType": "custom"
|
|
},
|
|
{
|
|
"lessThan": "5.25.713.10",
|
|
"status": "affected",
|
|
"version": "5.25.713",
|
|
"versionType": "custom"
|
|
},
|
|
{
|
|
"lessThan": "5.25.724.5",
|
|
"status": "affected",
|
|
"version": "5.25.724",
|
|
"versionType": "custom"
|
|
},
|
|
{
|
|
"lessThan": "5.25.736.1",
|
|
"status": "affected",
|
|
"version": "5.25.736",
|
|
"versionType": "custom"
|
|
},
|
|
{
|
|
"lessThan": "7.0.78.157",
|
|
"status": "affected",
|
|
"version": "7.0.78",
|
|
"versionType": "custom"
|
|
},
|
|
{
|
|
"lessThan": "7.8.23.67",
|
|
"status": "affected",
|
|
"version": "7.8.23",
|
|
"versionType": "custom"
|
|
},
|
|
{
|
|
"lessThan": "7.8.586.7",
|
|
"status": "affected",
|
|
"version": "7.8.586",
|
|
"versionType": "custom"
|
|
},
|
|
{
|
|
"lessThanOrEqual": "*",
|
|
"status": "unaffected",
|
|
"version": "x",
|
|
"versionType": "custom"
|
|
}
|
|
]
|
|
},
|
|
{
|
|
"defaultStatus": "unknown",
|
|
"packageName": "org.wso2.carbon.identity.framework:org.wso2.carbon.identity.user.store.configuration.ui",
|
|
"product": "WSO2 Carbon Identity User Store Configuration UI",
|
|
"vendor": "WSO2",
|
|
"versions": [
|
|
{
|
|
"lessThan": "5.14.127.13",
|
|
"status": "affected",
|
|
"version": "5.14.127",
|
|
"versionType": "custom"
|
|
},
|
|
{
|
|
"lessThan": "5.17.5.330",
|
|
"status": "affected",
|
|
"version": "5.17.5",
|
|
"versionType": "custom"
|
|
},
|
|
{
|
|
"lessThan": "5.17.5.331",
|
|
"status": "affected",
|
|
"version": "5.17.5",
|
|
"versionType": "custom"
|
|
},
|
|
{
|
|
"lessThan": "5.17.118.22",
|
|
"status": "affected",
|
|
"version": "5.17.118",
|
|
"versionType": "custom"
|
|
},
|
|
{
|
|
"lessThan": "5.18.187.328",
|
|
"status": "affected",
|
|
"version": "5.18.187",
|
|
"versionType": "custom"
|
|
},
|
|
{
|
|
"lessThan": "5.18.187.329",
|
|
"status": "affected",
|
|
"version": "5.18.187",
|
|
"versionType": "custom"
|
|
},
|
|
{
|
|
"lessThan": "5.18.248.31",
|
|
"status": "affected",
|
|
"version": "5.18.248",
|
|
"versionType": "custom"
|
|
},
|
|
{
|
|
"lessThan": "5.23.8.210",
|
|
"status": "affected",
|
|
"version": "5.23.8",
|
|
"versionType": "custom"
|
|
},
|
|
{
|
|
"lessThan": "5.24.8.26",
|
|
"status": "affected",
|
|
"version": "5.24.8",
|
|
"versionType": "custom"
|
|
},
|
|
{
|
|
"lessThan": "5.25.92.166",
|
|
"status": "affected",
|
|
"version": "5.25.92",
|
|
"versionType": "custom"
|
|
},
|
|
{
|
|
"lessThan": "5.25.705.21",
|
|
"status": "affected",
|
|
"version": "5.25.705",
|
|
"versionType": "custom"
|
|
},
|
|
{
|
|
"lessThan": "5.25.713.10",
|
|
"status": "affected",
|
|
"version": "5.25.713",
|
|
"versionType": "custom"
|
|
},
|
|
{
|
|
"lessThan": "5.25.724.5",
|
|
"status": "affected",
|
|
"version": "5.25.724",
|
|
"versionType": "custom"
|
|
},
|
|
{
|
|
"lessThan": "5.25.736.1",
|
|
"status": "affected",
|
|
"version": "5.25.736",
|
|
"versionType": "custom"
|
|
},
|
|
{
|
|
"lessThan": "7.0.78.157",
|
|
"status": "affected",
|
|
"version": "7.0.78",
|
|
"versionType": "custom"
|
|
},
|
|
{
|
|
"lessThan": "7.8.23.67",
|
|
"status": "affected",
|
|
"version": "7.8.23",
|
|
"versionType": "custom"
|
|
},
|
|
{
|
|
"lessThan": "7.8.586.7",
|
|
"status": "affected",
|
|
"version": "7.8.586",
|
|
"versionType": "custom"
|
|
},
|
|
{
|
|
"lessThanOrEqual": "*",
|
|
"status": "unaffected",
|
|
"version": "x",
|
|
"versionType": "custom"
|
|
}
|
|
]
|
|
},
|
|
{
|
|
"defaultStatus": "unknown",
|
|
"packageName": "org.wso2.carbon:org.wso2.carbon.registry.profiles.ui",
|
|
"product": "WSO2 Carbon Registry Profiles UI",
|
|
"vendor": "WSO2",
|
|
"versions": [
|
|
{
|
|
"lessThan": "4.7.32.18",
|
|
"status": "affected",
|
|
"version": "4.7.32",
|
|
"versionType": "custom"
|
|
},
|
|
{
|
|
"lessThan": "4.7.33.16",
|
|
"status": "affected",
|
|
"version": "4.7.33",
|
|
"versionType": "custom"
|
|
},
|
|
{
|
|
"lessThan": "4.8.9.16",
|
|
"status": "affected",
|
|
"version": "4.8.9",
|
|
"versionType": "custom"
|
|
},
|
|
{
|
|
"lessThan": "4.8.12.8",
|
|
"status": "affected",
|
|
"version": "4.8.12",
|
|
"versionType": "custom"
|
|
},
|
|
{
|
|
"lessThan": "4.8.24.6",
|
|
"status": "affected",
|
|
"version": "4.8.24",
|
|
"versionType": "custom"
|
|
},
|
|
{
|
|
"lessThan": "4.8.43.4",
|
|
"status": "affected",
|
|
"version": "4.8.43",
|
|
"versionType": "custom"
|
|
},
|
|
{
|
|
"lessThan": "4.8.50.3",
|
|
"status": "affected",
|
|
"version": "4.8.50",
|
|
"versionType": "custom"
|
|
},
|
|
{
|
|
"lessThanOrEqual": "*",
|
|
"status": "unaffected",
|
|
"version": "x",
|
|
"versionType": "custom"
|
|
}
|
|
]
|
|
},
|
|
{
|
|
"defaultStatus": "unknown",
|
|
"packageName": "org.wso2.carbon:org.wso2.carbon.registry.properties.ui",
|
|
"product": "WSO2 Carbon Registry Properties UI",
|
|
"vendor": "WSO2",
|
|
"versions": [
|
|
{
|
|
"lessThan": "4.7.24.11",
|
|
"status": "affected",
|
|
"version": "4.7.24",
|
|
"versionType": "custom"
|
|
},
|
|
{
|
|
"lessThan": "4.7.32.16",
|
|
"status": "affected",
|
|
"version": "4.7.32",
|
|
"versionType": "custom"
|
|
},
|
|
{
|
|
"lessThan": "4.7.32.18",
|
|
"status": "affected",
|
|
"version": "4.7.32",
|
|
"versionType": "custom"
|
|
},
|
|
{
|
|
"lessThan": "4.7.33.16",
|
|
"status": "affected",
|
|
"version": "4.7.33",
|
|
"versionType": "custom"
|
|
},
|
|
{
|
|
"lessThan": "4.7.35.15",
|
|
"status": "affected",
|
|
"version": "4.7.35",
|
|
"versionType": "custom"
|
|
},
|
|
{
|
|
"lessThan": "4.7.39.12",
|
|
"status": "affected",
|
|
"version": "4.7.39",
|
|
"versionType": "custom"
|
|
},
|
|
{
|
|
"lessThan": "4.7.51.8",
|
|
"status": "affected",
|
|
"version": "4.7.51",
|
|
"versionType": "custom"
|
|
},
|
|
{
|
|
"lessThan": "4.8.3.10",
|
|
"status": "affected",
|
|
"version": "4.8.3",
|
|
"versionType": "custom"
|
|
},
|
|
{
|
|
"lessThan": "4.8.9.16",
|
|
"status": "affected",
|
|
"version": "4.8.9",
|
|
"versionType": "custom"
|
|
},
|
|
{
|
|
"lessThan": "4.8.12.8",
|
|
"status": "affected",
|
|
"version": "4.8.12",
|
|
"versionType": "custom"
|
|
},
|
|
{
|
|
"lessThan": "4.8.13.9",
|
|
"status": "affected",
|
|
"version": "4.8.13",
|
|
"versionType": "custom"
|
|
},
|
|
{
|
|
"lessThan": "4.8.24.6",
|
|
"status": "affected",
|
|
"version": "4.8.24",
|
|
"versionType": "custom"
|
|
},
|
|
{
|
|
"lessThan": "4.8.32.4",
|
|
"status": "affected",
|
|
"version": "4.8.32",
|
|
"versionType": "custom"
|
|
},
|
|
{
|
|
"lessThan": "4.8.36.2",
|
|
"status": "affected",
|
|
"version": "4.8.36",
|
|
"versionType": "custom"
|
|
},
|
|
{
|
|
"lessThan": "4.8.43.2",
|
|
"status": "affected",
|
|
"version": "4.8.43",
|
|
"versionType": "custom"
|
|
},
|
|
{
|
|
"lessThan": "4.8.43.4",
|
|
"status": "affected",
|
|
"version": "4.8.43",
|
|
"versionType": "custom"
|
|
},
|
|
{
|
|
"lessThan": "4.8.50.1",
|
|
"status": "affected",
|
|
"version": "4.8.50",
|
|
"versionType": "custom"
|
|
},
|
|
{
|
|
"lessThan": "4.8.50.3",
|
|
"status": "affected",
|
|
"version": "4.8.50",
|
|
"versionType": "custom"
|
|
},
|
|
{
|
|
"lessThanOrEqual": "*",
|
|
"status": "unaffected",
|
|
"version": "x",
|
|
"versionType": "custom"
|
|
}
|
|
]
|
|
},
|
|
{
|
|
"defaultStatus": "unknown",
|
|
"packageName": "org.wso2.carbon:org.wso2.carbon.registry.resource.ui",
|
|
"product": "WSO2 Carbon Registry Resources UI",
|
|
"vendor": "WSO2",
|
|
"versions": [
|
|
{
|
|
"lessThan": "4.7.24.11",
|
|
"status": "affected",
|
|
"version": "4.7.24",
|
|
"versionType": "custom"
|
|
},
|
|
{
|
|
"lessThan": "4.7.32.16",
|
|
"status": "affected",
|
|
"version": "4.7.32",
|
|
"versionType": "custom"
|
|
},
|
|
{
|
|
"lessThan": "4.7.32.18",
|
|
"status": "affected",
|
|
"version": "4.7.32",
|
|
"versionType": "custom"
|
|
},
|
|
{
|
|
"lessThan": "4.7.33.16",
|
|
"status": "affected",
|
|
"version": "4.7.33",
|
|
"versionType": "custom"
|
|
},
|
|
{
|
|
"lessThan": "4.7.35.15",
|
|
"status": "affected",
|
|
"version": "4.7.35",
|
|
"versionType": "custom"
|
|
},
|
|
{
|
|
"lessThan": "4.7.39.12",
|
|
"status": "affected",
|
|
"version": "4.7.39",
|
|
"versionType": "custom"
|
|
},
|
|
{
|
|
"lessThan": "4.7.51.8",
|
|
"status": "affected",
|
|
"version": "4.7.51",
|
|
"versionType": "custom"
|
|
},
|
|
{
|
|
"lessThan": "4.8.3.10",
|
|
"status": "affected",
|
|
"version": "4.8.3",
|
|
"versionType": "custom"
|
|
},
|
|
{
|
|
"lessThan": "4.8.9.16",
|
|
"status": "affected",
|
|
"version": "4.8.9",
|
|
"versionType": "custom"
|
|
},
|
|
{
|
|
"lessThan": "4.8.12.8",
|
|
"status": "affected",
|
|
"version": "4.8.12",
|
|
"versionType": "custom"
|
|
},
|
|
{
|
|
"lessThan": "4.8.13.9",
|
|
"status": "affected",
|
|
"version": "4.8.13",
|
|
"versionType": "custom"
|
|
},
|
|
{
|
|
"lessThan": "4.8.24.6",
|
|
"status": "affected",
|
|
"version": "4.8.24",
|
|
"versionType": "custom"
|
|
},
|
|
{
|
|
"lessThan": "4.8.32.4",
|
|
"status": "affected",
|
|
"version": "4.8.32",
|
|
"versionType": "custom"
|
|
},
|
|
{
|
|
"lessThan": "4.8.36.2",
|
|
"status": "affected",
|
|
"version": "4.8.36",
|
|
"versionType": "custom"
|
|
},
|
|
{
|
|
"lessThan": "4.8.43.2",
|
|
"status": "affected",
|
|
"version": "4.8.43",
|
|
"versionType": "custom"
|
|
},
|
|
{
|
|
"lessThan": "4.8.43.4",
|
|
"status": "affected",
|
|
"version": "4.8.43",
|
|
"versionType": "custom"
|
|
},
|
|
{
|
|
"lessThan": "4.8.50.1",
|
|
"status": "affected",
|
|
"version": "4.8.50",
|
|
"versionType": "custom"
|
|
},
|
|
{
|
|
"lessThan": "4.8.50.3",
|
|
"status": "affected",
|
|
"version": "4.8.50",
|
|
"versionType": "custom"
|
|
},
|
|
{
|
|
"lessThanOrEqual": "*",
|
|
"status": "unaffected",
|
|
"version": "x",
|
|
"versionType": "custom"
|
|
}
|
|
]
|
|
},
|
|
{
|
|
"defaultStatus": "unknown",
|
|
"packageName": "org.wso2.carbon:org.wso2.carbon.registry.search.ui",
|
|
"product": "WSO2 Carbon Registry Search UI",
|
|
"vendor": "WSO2",
|
|
"versions": [
|
|
{
|
|
"lessThan": "4.7.24.11",
|
|
"status": "affected",
|
|
"version": "4.7.24",
|
|
"versionType": "custom"
|
|
},
|
|
{
|
|
"lessThan": "4.7.32.16",
|
|
"status": "affected",
|
|
"version": "4.7.32",
|
|
"versionType": "custom"
|
|
},
|
|
{
|
|
"lessThan": "4.7.32.18",
|
|
"status": "affected",
|
|
"version": "4.7.32",
|
|
"versionType": "custom"
|
|
},
|
|
{
|
|
"lessThan": "4.7.33.16",
|
|
"status": "affected",
|
|
"version": "4.7.33",
|
|
"versionType": "custom"
|
|
},
|
|
{
|
|
"lessThan": "4.7.35.15",
|
|
"status": "affected",
|
|
"version": "4.7.35",
|
|
"versionType": "custom"
|
|
},
|
|
{
|
|
"lessThan": "4.7.39.12",
|
|
"status": "affected",
|
|
"version": "4.7.39",
|
|
"versionType": "custom"
|
|
},
|
|
{
|
|
"lessThan": "4.7.51.8",
|
|
"status": "affected",
|
|
"version": "4.7.51",
|
|
"versionType": "custom"
|
|
},
|
|
{
|
|
"lessThan": "4.8.3.10",
|
|
"status": "affected",
|
|
"version": "4.8.3",
|
|
"versionType": "custom"
|
|
},
|
|
{
|
|
"lessThan": "4.8.9.16",
|
|
"status": "affected",
|
|
"version": "4.8.9",
|
|
"versionType": "custom"
|
|
},
|
|
{
|
|
"lessThan": "4.8.12.8",
|
|
"status": "affected",
|
|
"version": "4.8.12",
|
|
"versionType": "custom"
|
|
},
|
|
{
|
|
"lessThan": "4.8.13.9",
|
|
"status": "affected",
|
|
"version": "4.8.13",
|
|
"versionType": "custom"
|
|
},
|
|
{
|
|
"lessThan": "4.8.24.6",
|
|
"status": "affected",
|
|
"version": "4.8.24",
|
|
"versionType": "custom"
|
|
},
|
|
{
|
|
"lessThanOrEqual": "*",
|
|
"status": "unaffected",
|
|
"version": "x",
|
|
"versionType": "custom"
|
|
}
|
|
]
|
|
},
|
|
{
|
|
"defaultStatus": "unknown",
|
|
"packageName": "org.wso2.carbon:org.wso2.carbon.tenant.mgt.ui",
|
|
"product": "WSO2 Stratos User Interface For Tenant CRUD Operations",
|
|
"vendor": "WSO2",
|
|
"versions": [
|
|
{
|
|
"lessThan": "4.8.1.6",
|
|
"status": "affected",
|
|
"version": "4.8.1",
|
|
"versionType": "custom"
|
|
},
|
|
{
|
|
"lessThan": "4.8.7.3",
|
|
"status": "affected",
|
|
"version": "4.8.7",
|
|
"versionType": "custom"
|
|
},
|
|
{
|
|
"lessThan": "4.9.8.7",
|
|
"status": "affected",
|
|
"version": "4.9.8",
|
|
"versionType": "custom"
|
|
},
|
|
{
|
|
"lessThan": "4.9.10.7",
|
|
"status": "affected",
|
|
"version": "4.9.10",
|
|
"versionType": "custom"
|
|
},
|
|
{
|
|
"lessThan": "4.9.10.8",
|
|
"status": "affected",
|
|
"version": "4.9.10",
|
|
"versionType": "custom"
|
|
},
|
|
{
|
|
"lessThan": "4.9.20.5",
|
|
"status": "affected",
|
|
"version": "4.9.20",
|
|
"versionType": "custom"
|
|
},
|
|
{
|
|
"lessThan": "4.9.27.1",
|
|
"status": "affected",
|
|
"version": "4.9.27",
|
|
"versionType": "custom"
|
|
},
|
|
{
|
|
"lessThan": "4.9.31.1",
|
|
"status": "affected",
|
|
"version": "4.9.31",
|
|
"versionType": "custom"
|
|
},
|
|
{
|
|
"lessThan": "4.9.34.1",
|
|
"status": "affected",
|
|
"version": "4.9.34",
|
|
"versionType": "custom"
|
|
},
|
|
{
|
|
"lessThan": "4.9.42.1",
|
|
"status": "affected",
|
|
"version": "4.9.42",
|
|
"versionType": "custom"
|
|
},
|
|
{
|
|
"lessThan": "4.11.0.7",
|
|
"status": "affected",
|
|
"version": "4.11.0",
|
|
"versionType": "custom"
|
|
},
|
|
{
|
|
"lessThan": "4.11.19.4",
|
|
"status": "affected",
|
|
"version": "4.11.19",
|
|
"versionType": "custom"
|
|
},
|
|
{
|
|
"lessThan": "4.11.34.3",
|
|
"status": "affected",
|
|
"version": "4.11.34",
|
|
"versionType": "custom"
|
|
},
|
|
{
|
|
"lessThan": "4.11.45.1",
|
|
"status": "affected",
|
|
"version": "4.11.45",
|
|
"versionType": "custom"
|
|
},
|
|
{
|
|
"lessThanOrEqual": "*",
|
|
"status": "unaffected",
|
|
"version": "x",
|
|
"versionType": "custom"
|
|
}
|
|
]
|
|
},
|
|
{
|
|
"defaultStatus": "unknown",
|
|
"packageName": "org.wso2.carbon.multitenancy:org.wso2.carbon.tenant.sso.redirector.ui",
|
|
"product": "WSO2 Stratos SSO Redirector UI Component",
|
|
"vendor": "WSO2",
|
|
"versions": [
|
|
{
|
|
"lessThan": "4.8.1.6",
|
|
"status": "affected",
|
|
"version": "4.8.1",
|
|
"versionType": "custom"
|
|
},
|
|
{
|
|
"lessThanOrEqual": "*",
|
|
"status": "unaffected",
|
|
"version": "x",
|
|
"versionType": "custom"
|
|
}
|
|
]
|
|
},
|
|
{
|
|
"defaultStatus": "unknown",
|
|
"packageName": "org.wso2.carbon:org.wso2.carbon.email.verification.ui",
|
|
"product": "WSO2 Carbon Email Verification UI",
|
|
"vendor": "WSO2",
|
|
"versions": [
|
|
{
|
|
"lessThan": "4.7.19.14",
|
|
"status": "affected",
|
|
"version": "4.7.19",
|
|
"versionType": "custom"
|
|
},
|
|
{
|
|
"lessThanOrEqual": "*",
|
|
"status": "unaffected",
|
|
"version": "x",
|
|
"versionType": "custom"
|
|
}
|
|
]
|
|
},
|
|
{
|
|
"defaultStatus": "unknown",
|
|
"packageName": "org.wso2.carbon:org.wso2.carbon.event.simulator.ui",
|
|
"product": "WSO2 Carbon Event Simulator UI",
|
|
"vendor": "WSO2",
|
|
"versions": [
|
|
{
|
|
"lessThan": "2.2.11.1",
|
|
"status": "affected",
|
|
"version": "2.2.11",
|
|
"versionType": "custom"
|
|
},
|
|
{
|
|
"lessThan": "2.2.14.11",
|
|
"status": "affected",
|
|
"version": "2.2.14",
|
|
"versionType": "custom"
|
|
},
|
|
{
|
|
"lessThan": "2.2.14.12",
|
|
"status": "affected",
|
|
"version": "2.2.14",
|
|
"versionType": "custom"
|
|
},
|
|
{
|
|
"lessThan": "2.2.17.5",
|
|
"status": "affected",
|
|
"version": "2.2.17",
|
|
"versionType": "custom"
|
|
},
|
|
{
|
|
"lessThan": "2.3.1.4",
|
|
"status": "affected",
|
|
"version": "2.3.1",
|
|
"versionType": "custom"
|
|
},
|
|
{
|
|
"lessThan": "2.3.5.6",
|
|
"status": "affected",
|
|
"version": "2.3.5",
|
|
"versionType": "custom"
|
|
},
|
|
{
|
|
"lessThanOrEqual": "*",
|
|
"status": "unaffected",
|
|
"version": "x",
|
|
"versionType": "custom"
|
|
}
|
|
]
|
|
},
|
|
{
|
|
"defaultStatus": "unknown",
|
|
"packageName": "org.wso2.carbon.analytics-common:org.wso2.carbon.event.template.manager.ui",
|
|
"product": "WSO2 Carbon Execution Manager UI",
|
|
"vendor": "WSO2",
|
|
"versions": [
|
|
{
|
|
"lessThan": "5.2.24.10",
|
|
"status": "affected",
|
|
"version": "5.2.24",
|
|
"versionType": "custom"
|
|
},
|
|
{
|
|
"lessThan": "5.2.26.22",
|
|
"status": "affected",
|
|
"version": "5.2.26",
|
|
"versionType": "custom"
|
|
},
|
|
{
|
|
"lessThan": "5.2.34.12",
|
|
"status": "affected",
|
|
"version": "5.2.34",
|
|
"versionType": "custom"
|
|
},
|
|
{
|
|
"lessThan": "5.2.41.7",
|
|
"status": "affected",
|
|
"version": "5.2.41",
|
|
"versionType": "custom"
|
|
},
|
|
{
|
|
"lessThan": "5.2.57.10",
|
|
"status": "affected",
|
|
"version": "5.2.57",
|
|
"versionType": "custom"
|
|
},
|
|
{
|
|
"lessThan": "5.3.5.9",
|
|
"status": "affected",
|
|
"version": "5.3.5",
|
|
"versionType": "custom"
|
|
},
|
|
{
|
|
"lessThanOrEqual": "*",
|
|
"status": "unaffected",
|
|
"version": "x",
|
|
"versionType": "custom"
|
|
}
|
|
]
|
|
},
|
|
{
|
|
"defaultStatus": "unknown",
|
|
"packageName": "org.wso2.carbon.governance:org.wso2.carbon.governance.custom.lifecycles.checklist.ui",
|
|
"product": "WSO2 Carbon Governance Custom Lifecycle Checklist UI",
|
|
"vendor": "WSO2",
|
|
"versions": [
|
|
{
|
|
"lessThan": "4.8.14.4",
|
|
"status": "affected",
|
|
"version": "4.8.14",
|
|
"versionType": "custom"
|
|
},
|
|
{
|
|
"lessThan": "4.8.19.8",
|
|
"status": "affected",
|
|
"version": "4.8.19",
|
|
"versionType": "custom"
|
|
},
|
|
{
|
|
"lessThan": "4.8.21.10",
|
|
"status": "affected",
|
|
"version": "4.8.21",
|
|
"versionType": "custom"
|
|
},
|
|
{
|
|
"lessThan": "4.8.28.4",
|
|
"status": "affected",
|
|
"version": "4.8.28",
|
|
"versionType": "custom"
|
|
},
|
|
{
|
|
"lessThan": "4.8.30.6",
|
|
"status": "affected",
|
|
"version": "4.8.30",
|
|
"versionType": "custom"
|
|
},
|
|
{
|
|
"lessThan": "4.8.32.4",
|
|
"status": "affected",
|
|
"version": "4.8.32",
|
|
"versionType": "custom"
|
|
},
|
|
{
|
|
"lessThanOrEqual": "*",
|
|
"status": "unaffected",
|
|
"version": "x",
|
|
"versionType": "custom"
|
|
}
|
|
]
|
|
},
|
|
{
|
|
"defaultStatus": "unknown",
|
|
"packageName": "org.wso2.carbon.governance:org.wso2.carbon.governance.generic.ui",
|
|
"product": "WSO2 Carbon Governance Generic Artifact User Interface",
|
|
"vendor": "WSO2",
|
|
"versions": [
|
|
{
|
|
"lessThan": "4.8.14.4",
|
|
"status": "affected",
|
|
"version": "4.8.14",
|
|
"versionType": "custom"
|
|
},
|
|
{
|
|
"lessThan": "4.8.19.8",
|
|
"status": "affected",
|
|
"version": "4.8.19",
|
|
"versionType": "custom"
|
|
},
|
|
{
|
|
"lessThan": "4.8.21.10",
|
|
"status": "affected",
|
|
"version": "4.8.21",
|
|
"versionType": "custom"
|
|
},
|
|
{
|
|
"lessThan": "4.8.28.4",
|
|
"status": "affected",
|
|
"version": "4.8.28",
|
|
"versionType": "custom"
|
|
},
|
|
{
|
|
"lessThan": "4.8.30.6",
|
|
"status": "affected",
|
|
"version": "4.8.30",
|
|
"versionType": "custom"
|
|
},
|
|
{
|
|
"lessThan": "4.8.32.4",
|
|
"status": "affected",
|
|
"version": "4.8.32",
|
|
"versionType": "custom"
|
|
},
|
|
{
|
|
"lessThan": "4.8.33.4",
|
|
"status": "affected",
|
|
"version": "4.8.33",
|
|
"versionType": "custom"
|
|
},
|
|
{
|
|
"lessThan": "4.8.34.5",
|
|
"status": "affected",
|
|
"version": "4.8.34",
|
|
"versionType": "custom"
|
|
},
|
|
{
|
|
"lessThan": "4.8.37.4",
|
|
"status": "affected",
|
|
"version": "4.8.37",
|
|
"versionType": "custom"
|
|
},
|
|
{
|
|
"lessThanOrEqual": "*",
|
|
"status": "unaffected",
|
|
"version": "x",
|
|
"versionType": "custom"
|
|
}
|
|
]
|
|
},
|
|
{
|
|
"defaultStatus": "unknown",
|
|
"packageName": "org.wso2.carbon.governance:org.wso2.carbon.governance.lcm.ui",
|
|
"product": "WSO2 Carbon Governance Life Cycles User Interface",
|
|
"vendor": "WSO2",
|
|
"versions": [
|
|
{
|
|
"lessThan": "4.8.14.4",
|
|
"status": "affected",
|
|
"version": "4.8.14",
|
|
"versionType": "custom"
|
|
},
|
|
{
|
|
"lessThan": "4.8.19.8",
|
|
"status": "affected",
|
|
"version": "4.8.19",
|
|
"versionType": "custom"
|
|
},
|
|
{
|
|
"lessThan": "4.8.21.10",
|
|
"status": "affected",
|
|
"version": "4.8.21",
|
|
"versionType": "custom"
|
|
},
|
|
{
|
|
"lessThan": "4.8.28.4",
|
|
"status": "affected",
|
|
"version": "4.8.28",
|
|
"versionType": "custom"
|
|
},
|
|
{
|
|
"lessThan": "4.8.30.6",
|
|
"status": "affected",
|
|
"version": "4.8.30",
|
|
"versionType": "custom"
|
|
},
|
|
{
|
|
"lessThan": "4.8.32.4",
|
|
"status": "affected",
|
|
"version": "4.8.32",
|
|
"versionType": "custom"
|
|
},
|
|
{
|
|
"lessThanOrEqual": "*",
|
|
"status": "unaffected",
|
|
"version": "x",
|
|
"versionType": "custom"
|
|
}
|
|
]
|
|
},
|
|
{
|
|
"defaultStatus": "unknown",
|
|
"packageName": "org.wso2.carbon:org.wso2.carbon.governance.wsdltool.ui",
|
|
"product": "WSO2 Carbon Governance WSDL Tool UI",
|
|
"vendor": "WSO2",
|
|
"versions": [
|
|
{
|
|
"lessThan": "4.8.14.4",
|
|
"status": "affected",
|
|
"version": "4.8.14",
|
|
"versionType": "custom"
|
|
},
|
|
{
|
|
"lessThan": "4.8.19.8",
|
|
"status": "affected",
|
|
"version": "4.8.19",
|
|
"versionType": "custom"
|
|
},
|
|
{
|
|
"lessThan": "4.8.21.10",
|
|
"status": "affected",
|
|
"version": "4.8.21",
|
|
"versionType": "custom"
|
|
},
|
|
{
|
|
"lessThan": "4.8.28.4",
|
|
"status": "affected",
|
|
"version": "4.8.28",
|
|
"versionType": "custom"
|
|
},
|
|
{
|
|
"lessThan": "4.8.30.6",
|
|
"status": "affected",
|
|
"version": "4.8.30",
|
|
"versionType": "custom"
|
|
},
|
|
{
|
|
"lessThan": "4.8.32.4",
|
|
"status": "affected",
|
|
"version": "4.8.32",
|
|
"versionType": "custom"
|
|
},
|
|
{
|
|
"lessThan": "4.8.33.4",
|
|
"status": "affected",
|
|
"version": "4.8.33",
|
|
"versionType": "custom"
|
|
},
|
|
{
|
|
"lessThan": "4.8.34.5",
|
|
"status": "affected",
|
|
"version": "4.8.34",
|
|
"versionType": "custom"
|
|
},
|
|
{
|
|
"lessThan": "4.8.37.4",
|
|
"status": "affected",
|
|
"version": "4.8.37",
|
|
"versionType": "custom"
|
|
},
|
|
{
|
|
"lessThanOrEqual": "*",
|
|
"status": "unaffected",
|
|
"version": "x",
|
|
"versionType": "custom"
|
|
}
|
|
]
|
|
},
|
|
{
|
|
"defaultStatus": "unknown",
|
|
"packageName": "org.wso2.carbon.commons:org.wso2.carbon.ndatasource.ui",
|
|
"product": "WSO2 Carbon New Data Sources UI",
|
|
"vendor": "WSO2",
|
|
"versions": [
|
|
{
|
|
"lessThan": "4.7.19.13",
|
|
"status": "affected",
|
|
"version": "4.7.19",
|
|
"versionType": "custom"
|
|
},
|
|
{
|
|
"lessThan": "4.7.24.5",
|
|
"status": "affected",
|
|
"version": "4.7.24",
|
|
"versionType": "custom"
|
|
},
|
|
{
|
|
"lessThan": "4.7.32.10",
|
|
"status": "affected",
|
|
"version": "4.7.32",
|
|
"versionType": "custom"
|
|
},
|
|
{
|
|
"lessThan": "4.7.35.13",
|
|
"status": "affected",
|
|
"version": "4.7.35",
|
|
"versionType": "custom"
|
|
},
|
|
{
|
|
"lessThan": "4.7.49.7",
|
|
"status": "affected",
|
|
"version": "4.7.49",
|
|
"versionType": "custom"
|
|
},
|
|
{
|
|
"lessThan": "4.7.52.5",
|
|
"status": "affected",
|
|
"version": "4.7.52",
|
|
"versionType": "custom"
|
|
},
|
|
{
|
|
"lessThan": "4.9.2.8",
|
|
"status": "affected",
|
|
"version": "4.9.2",
|
|
"versionType": "custom"
|
|
},
|
|
{
|
|
"lessThan": "4.9.11.2",
|
|
"status": "affected",
|
|
"version": "4.9.11",
|
|
"versionType": "custom"
|
|
},
|
|
{
|
|
"lessThan": "4.9.18.1",
|
|
"status": "affected",
|
|
"version": "4.9.18",
|
|
"versionType": "custom"
|
|
},
|
|
{
|
|
"lessThanOrEqual": "*",
|
|
"status": "unaffected",
|
|
"version": "x",
|
|
"versionType": "custom"
|
|
}
|
|
]
|
|
},
|
|
{
|
|
"defaultStatus": "unknown",
|
|
"packageName": "org.wso2.carbon:org.wso2.carbon.registry.info.ui",
|
|
"product": "WSO2 Carbon Registry Info UI2",
|
|
"vendor": "WSO2",
|
|
"versions": [
|
|
{
|
|
"lessThan": "4.7.32.16",
|
|
"status": "affected",
|
|
"version": "4.7.32",
|
|
"versionType": "custom"
|
|
},
|
|
{
|
|
"lessThan": "4.7.35.15",
|
|
"status": "affected",
|
|
"version": "4.7.35",
|
|
"versionType": "custom"
|
|
},
|
|
{
|
|
"lessThan": "4.7.39.12",
|
|
"status": "affected",
|
|
"version": "4.7.39",
|
|
"versionType": "custom"
|
|
},
|
|
{
|
|
"lessThan": "4.7.51.8",
|
|
"status": "affected",
|
|
"version": "4.7.51",
|
|
"versionType": "custom"
|
|
},
|
|
{
|
|
"lessThan": "4.8.3.10",
|
|
"status": "affected",
|
|
"version": "4.8.3",
|
|
"versionType": "custom"
|
|
},
|
|
{
|
|
"lessThan": "4.8.13.9",
|
|
"status": "affected",
|
|
"version": "4.8.13",
|
|
"versionType": "custom"
|
|
},
|
|
{
|
|
"lessThan": "4.8.32.4",
|
|
"status": "affected",
|
|
"version": "4.8.32",
|
|
"versionType": "custom"
|
|
},
|
|
{
|
|
"lessThan": "4.8.36.2",
|
|
"status": "affected",
|
|
"version": "4.8.36",
|
|
"versionType": "custom"
|
|
},
|
|
{
|
|
"lessThan": "4.8.43.2",
|
|
"status": "affected",
|
|
"version": "4.8.43",
|
|
"versionType": "custom"
|
|
},
|
|
{
|
|
"lessThan": "4.8.50.1",
|
|
"status": "affected",
|
|
"version": "4.8.50",
|
|
"versionType": "custom"
|
|
},
|
|
{
|
|
"lessThanOrEqual": "*",
|
|
"status": "unaffected",
|
|
"version": "x",
|
|
"versionType": "custom"
|
|
}
|
|
]
|
|
},
|
|
{
|
|
"defaultStatus": "unknown",
|
|
"packageName": "org.wso2.carbon:org.wso2.carbon.registry.relations.ui",
|
|
"product": "WSO2 Carbon Registry Relations UI",
|
|
"vendor": "WSO2",
|
|
"versions": [
|
|
{
|
|
"lessThan": "4.7.24.11",
|
|
"status": "affected",
|
|
"version": "4.7.24",
|
|
"versionType": "custom"
|
|
},
|
|
{
|
|
"lessThan": "4.7.32.16",
|
|
"status": "affected",
|
|
"version": "4.7.32",
|
|
"versionType": "custom"
|
|
},
|
|
{
|
|
"lessThan": "4.7.35.15",
|
|
"status": "affected",
|
|
"version": "4.7.35",
|
|
"versionType": "custom"
|
|
},
|
|
{
|
|
"lessThan": "4.7.39.12",
|
|
"status": "affected",
|
|
"version": "4.7.39",
|
|
"versionType": "custom"
|
|
},
|
|
{
|
|
"lessThan": "4.7.51.8",
|
|
"status": "affected",
|
|
"version": "4.7.51",
|
|
"versionType": "custom"
|
|
},
|
|
{
|
|
"lessThan": "4.8.3.10",
|
|
"status": "affected",
|
|
"version": "4.8.3",
|
|
"versionType": "custom"
|
|
},
|
|
{
|
|
"lessThan": "4.8.13.9",
|
|
"status": "affected",
|
|
"version": "4.8.13",
|
|
"versionType": "custom"
|
|
},
|
|
{
|
|
"lessThan": "4.8.32.4",
|
|
"status": "affected",
|
|
"version": "4.8.32",
|
|
"versionType": "custom"
|
|
},
|
|
{
|
|
"lessThan": "4.8.36.2",
|
|
"status": "affected",
|
|
"version": "4.8.36",
|
|
"versionType": "custom"
|
|
},
|
|
{
|
|
"lessThan": "4.8.43.2",
|
|
"status": "affected",
|
|
"version": "4.8.43",
|
|
"versionType": "custom"
|
|
},
|
|
{
|
|
"lessThan": "4.8.50.1",
|
|
"status": "affected",
|
|
"version": "4.8.50",
|
|
"versionType": "custom"
|
|
},
|
|
{
|
|
"lessThanOrEqual": "*",
|
|
"status": "unaffected",
|
|
"version": "x",
|
|
"versionType": "custom"
|
|
}
|
|
]
|
|
},
|
|
{
|
|
"defaultStatus": "unknown",
|
|
"packageName": "org.wso2.carbon.registry:org.wso2.carbon.registry.indexing",
|
|
"product": "WSO2 Carbon Registry Indexing",
|
|
"vendor": "WSO2",
|
|
"versions": [
|
|
{
|
|
"lessThan": "4.7.24",
|
|
"status": "affected",
|
|
"version": "4.7",
|
|
"versionType": "custom"
|
|
},
|
|
{
|
|
"lessThanOrEqual": "*",
|
|
"status": "unaffected",
|
|
"version": "x",
|
|
"versionType": "custom"
|
|
}
|
|
]
|
|
},
|
|
{
|
|
"defaultStatus": "unknown",
|
|
"packageName": "org.wso2.carbon:org.wso2.carbon.security.mgt.ui",
|
|
"product": "WSO2 Carbon Security UI",
|
|
"vendor": "WSO2",
|
|
"versions": [
|
|
{
|
|
"lessThan": "5.14.127",
|
|
"status": "affected",
|
|
"version": "5.14",
|
|
"versionType": "custom"
|
|
},
|
|
{
|
|
"lessThanOrEqual": "*",
|
|
"status": "unaffected",
|
|
"version": "x",
|
|
"versionType": "custom"
|
|
}
|
|
]
|
|
},
|
|
{
|
|
"defaultStatus": "unknown",
|
|
"packageName": "org.wso2.carbon.messaging:org.wso2.carbon.andes.event.ui",
|
|
"product": "WSO2 Carbon Component Andes Event UI",
|
|
"vendor": "WSO2",
|
|
"versions": [
|
|
{
|
|
"lessThan": "3.3.12.3",
|
|
"status": "affected",
|
|
"version": "3.3.12",
|
|
"versionType": "custom"
|
|
},
|
|
{
|
|
"lessThanOrEqual": "*",
|
|
"status": "unaffected",
|
|
"version": "x",
|
|
"versionType": "custom"
|
|
}
|
|
]
|
|
},
|
|
{
|
|
"defaultStatus": "unknown",
|
|
"packageName": "org.wso2.carbon.messaging:org.wso2.carbon.andes.ui",
|
|
"product": "WSO2 Carbon Component Andes UI1",
|
|
"vendor": "WSO2",
|
|
"versions": [
|
|
{
|
|
"lessThan": "3.3.12.3",
|
|
"status": "affected",
|
|
"version": "3.3.12",
|
|
"versionType": "custom"
|
|
},
|
|
{
|
|
"lessThanOrEqual": "*",
|
|
"status": "unaffected",
|
|
"version": "x",
|
|
"versionType": "custom"
|
|
}
|
|
]
|
|
},
|
|
{
|
|
"defaultStatus": "unknown",
|
|
"packageName": "org.wso2.carbon.mediation:org.wso2.carbon.business.messaging.hl7.store.ui",
|
|
"product": "WSO2 Carbon HL7 Business Messaging Store UI",
|
|
"vendor": "WSO2",
|
|
"versions": [
|
|
{
|
|
"lessThan": "4.7.30.53",
|
|
"status": "affected",
|
|
"version": "4.7.30",
|
|
"versionType": "custom"
|
|
},
|
|
{
|
|
"lessThanOrEqual": "*",
|
|
"status": "unaffected",
|
|
"version": "x",
|
|
"versionType": "custom"
|
|
}
|
|
]
|
|
},
|
|
{
|
|
"defaultStatus": "unknown",
|
|
"packageName": "org.wso2.carbonorg.wso2.carbon.endpoint.ui",
|
|
"product": "WSO2 Carbon Endpoint Editor UI",
|
|
"vendor": "WSO2",
|
|
"versions": [
|
|
{
|
|
"lessThan": "4.7.30.53",
|
|
"status": "affected",
|
|
"version": "4.7.30",
|
|
"versionType": "custom"
|
|
},
|
|
{
|
|
"lessThanOrEqual": "*",
|
|
"status": "unaffected",
|
|
"version": "x",
|
|
"versionType": "custom"
|
|
}
|
|
]
|
|
},
|
|
{
|
|
"defaultStatus": "unknown",
|
|
"packageName": "org.wso2.carbon.mediationorg.wso2.carbon.event.sink.config.ui",
|
|
"product": "WSO2 Carbon Publish Event Mediator Configuration UI",
|
|
"vendor": "WSO2",
|
|
"versions": [
|
|
{
|
|
"lessThan": "4.7.30.53",
|
|
"status": "affected",
|
|
"version": "4.7.30",
|
|
"versionType": "custom"
|
|
},
|
|
{
|
|
"lessThanOrEqual": "*",
|
|
"status": "unaffected",
|
|
"version": "x",
|
|
"versionType": "custom"
|
|
}
|
|
]
|
|
},
|
|
{
|
|
"defaultStatus": "unknown",
|
|
"packageName": "org.wso2.carbon.commons:org.wso2.carbon.event.ui",
|
|
"product": "WSO2 Carbon Eventing UI",
|
|
"vendor": "WSO2",
|
|
"versions": [
|
|
{
|
|
"lessThan": "4.7.19.13",
|
|
"status": "affected",
|
|
"version": "4.7.19",
|
|
"versionType": "custom"
|
|
},
|
|
{
|
|
"lessThanOrEqual": "*",
|
|
"status": "unaffected",
|
|
"version": "x",
|
|
"versionType": "custom"
|
|
}
|
|
]
|
|
},
|
|
{
|
|
"defaultStatus": "unknown",
|
|
"packageName": "org.wso2.carbon.business-process:org.wso2.carbon.humantask.ui",
|
|
"product": "WSO2 Carbon HumanTask UI",
|
|
"vendor": "WSO2",
|
|
"versions": [
|
|
{
|
|
"lessThan": "4.5.27.10",
|
|
"status": "affected",
|
|
"version": "4.5.27",
|
|
"versionType": "custom"
|
|
},
|
|
{
|
|
"lessThanOrEqual": "*",
|
|
"status": "unaffected",
|
|
"version": "x",
|
|
"versionType": "custom"
|
|
}
|
|
]
|
|
},
|
|
{
|
|
"defaultStatus": "unknown",
|
|
"packageName": "org.wso2.carbon:org.wso2.carbon.logging.admin.ui",
|
|
"product": "WSO2 Carbon Logging UI",
|
|
"vendor": "WSO2",
|
|
"versions": [
|
|
{
|
|
"lessThan": "4.7.19.13",
|
|
"status": "affected",
|
|
"version": "4.7.19",
|
|
"versionType": "custom"
|
|
},
|
|
{
|
|
"lessThan": "4.7.24.5",
|
|
"status": "affected",
|
|
"version": "4.7.24",
|
|
"versionType": "custom"
|
|
},
|
|
{
|
|
"lessThan": "4.7.32.10",
|
|
"status": "affected",
|
|
"version": "4.7.32",
|
|
"versionType": "custom"
|
|
},
|
|
{
|
|
"lessThan": "4.7.52.5",
|
|
"status": "affected",
|
|
"version": "4.7.52",
|
|
"versionType": "custom"
|
|
},
|
|
{
|
|
"lessThanOrEqual": "*",
|
|
"status": "unaffected",
|
|
"version": "x",
|
|
"versionType": "custom"
|
|
}
|
|
]
|
|
},
|
|
{
|
|
"defaultStatus": "unknown",
|
|
"packageName": "org.wso2.carbon.mediation:org.wso2.carbon.mediation.templates.ui",
|
|
"product": "WSO2 Carbon Template Editor UI",
|
|
"vendor": "WSO2",
|
|
"versions": [
|
|
{
|
|
"lessThan": "4.7.30.53",
|
|
"status": "affected",
|
|
"version": "4.7.30",
|
|
"versionType": "custom"
|
|
},
|
|
{
|
|
"lessThanOrEqual": "*",
|
|
"status": "unaffected",
|
|
"version": "x",
|
|
"versionType": "custom"
|
|
}
|
|
]
|
|
},
|
|
{
|
|
"defaultStatus": "unknown",
|
|
"packageName": "org.wso2.carbon:org.wso2.carbon.mediator.command.ui",
|
|
"product": "WSO2 Carbon Command Mediator UI",
|
|
"vendor": "WSO2",
|
|
"versions": [
|
|
{
|
|
"lessThan": "4.7.30.53",
|
|
"status": "affected",
|
|
"version": "4.7.30",
|
|
"versionType": "custom"
|
|
},
|
|
{
|
|
"lessThanOrEqual": "*",
|
|
"status": "unaffected",
|
|
"version": "x",
|
|
"versionType": "custom"
|
|
}
|
|
]
|
|
},
|
|
{
|
|
"defaultStatus": "unknown",
|
|
"packageName": "org.wso2.carbon:org.wso2.carbon.mediator.rule.ui",
|
|
"product": "WSO2 Carbon Rule Mediator UI",
|
|
"vendor": "WSO2",
|
|
"versions": [
|
|
{
|
|
"lessThan": "4.7.30.53",
|
|
"status": "affected",
|
|
"version": "4.7.30",
|
|
"versionType": "custom"
|
|
},
|
|
{
|
|
"lessThanOrEqual": "*",
|
|
"status": "unaffected",
|
|
"version": "x",
|
|
"versionType": "custom"
|
|
}
|
|
]
|
|
},
|
|
{
|
|
"defaultStatus": "unknown",
|
|
"packageName": "org.wso2.carbon:org.wso2.carbon.mediator.throttle.ui",
|
|
"product": "WSO2 Carbon Throttle Mediator UI",
|
|
"vendor": "WSO2",
|
|
"versions": [
|
|
{
|
|
"lessThan": "4.7.30.53",
|
|
"status": "affected",
|
|
"version": "4.7.30",
|
|
"versionType": "custom"
|
|
},
|
|
{
|
|
"lessThanOrEqual": "*",
|
|
"status": "unaffected",
|
|
"version": "x",
|
|
"versionType": "custom"
|
|
}
|
|
]
|
|
},
|
|
{
|
|
"defaultStatus": "unknown",
|
|
"packageName": "org.wso2.carbon:org.wso2.carbon.ntask.core",
|
|
"product": "WSO2 Carbon Tasks Core",
|
|
"vendor": "WSO2",
|
|
"versions": [
|
|
{
|
|
"lessThan": "4.7.19.13",
|
|
"status": "affected",
|
|
"version": "4.7.19",
|
|
"versionType": "custom"
|
|
},
|
|
{
|
|
"lessThanOrEqual": "*",
|
|
"status": "unaffected",
|
|
"version": "x",
|
|
"versionType": "custom"
|
|
}
|
|
]
|
|
},
|
|
{
|
|
"defaultStatus": "unknown",
|
|
"packageName": "org.wso2.carbon:org.wso2.carbon.rest.api.ui",
|
|
"product": "WSO2 Carbon Rest API Admin UI",
|
|
"vendor": "WSO2",
|
|
"versions": [
|
|
{
|
|
"lessThan": "4.7.30.53",
|
|
"status": "affected",
|
|
"version": "4.7.30",
|
|
"versionType": "custom"
|
|
},
|
|
{
|
|
"lessThanOrEqual": "*",
|
|
"status": "unaffected",
|
|
"version": "x",
|
|
"versionType": "custom"
|
|
}
|
|
]
|
|
},
|
|
{
|
|
"defaultStatus": "unknown",
|
|
"packageName": "org.wso2.carbon:org.wso2.carbon.sequences.ui",
|
|
"product": "WSO2 Carbon Sequence Editor UI",
|
|
"vendor": "WSO2",
|
|
"versions": [
|
|
{
|
|
"lessThan": "4.7.30.53",
|
|
"status": "affected",
|
|
"version": "4.7.30",
|
|
"versionType": "custom"
|
|
},
|
|
{
|
|
"lessThanOrEqual": "*",
|
|
"status": "unaffected",
|
|
"version": "x",
|
|
"versionType": "custom"
|
|
}
|
|
]
|
|
},
|
|
{
|
|
"defaultStatus": "unknown",
|
|
"packageName": "org.wso2.carbon:org.wso2.carbon.task.ui",
|
|
"product": "WSO2 Carbon Task UI",
|
|
"vendor": "WSO2",
|
|
"versions": [
|
|
{
|
|
"lessThan": "4.7.30.53",
|
|
"status": "affected",
|
|
"version": "4.7.30",
|
|
"versionType": "custom"
|
|
},
|
|
{
|
|
"lessThanOrEqual": "*",
|
|
"status": "unaffected",
|
|
"version": "x",
|
|
"versionType": "custom"
|
|
}
|
|
]
|
|
},
|
|
{
|
|
"defaultStatus": "unknown",
|
|
"packageName": "org.wso2.carbon.governance:org.wso2.carbon.governance.api",
|
|
"product": "WSO2 Carbon Governance",
|
|
"vendor": "WSO2",
|
|
"versions": [
|
|
{
|
|
"lessThan": "4.8.37.4",
|
|
"status": "affected",
|
|
"version": "4.8.37",
|
|
"versionType": "custom"
|
|
},
|
|
{
|
|
"lessThanOrEqual": "*",
|
|
"status": "unaffected",
|
|
"version": "x",
|
|
"versionType": "custom"
|
|
}
|
|
]
|
|
}
|
|
],
|
|
"descriptions": [
|
|
{
|
|
"lang": "en",
|
|
"supportingMedia": [
|
|
{
|
|
"base64": false,
|
|
"type": "text/html",
|
|
"value": "The Ajax processor within the Carbon console fails to adequately protect state-changing operations from Cross-Site Request Forgery (CSRF) attacks. Specifically, it utilizes the HTTP GET method for these operations, and while the SameSite=Lax cookie attribute is employed for mitigation, this mechanism is bypassed as it permits cookies to be sent with cross-origin top-level navigation requests, including GET requests. This allows an attacker to trick an authenticated user's browser into unknowingly executing unintended actions.\n\nAn attacker can exploit this vulnerability to perform unauthorized state-altering requests on behalf of authenticated users. This could lead to consequences such as data modification, account changes, or other actions that could result in data compromise or loss of user control over their account. However, this attack is only feasible if the Carbon console and related services are exposed to the public internet, which is not recommended according to WSO2's security guidelines."
|
|
}
|
|
],
|
|
"value": "The Ajax processor within the Carbon console fails to adequately protect state-changing operations from Cross-Site Request Forgery (CSRF) attacks. Specifically, it utilizes the HTTP GET method for these operations, and while the SameSite=Lax cookie attribute is employed for mitigation, this mechanism is bypassed as it permits cookies to be sent with cross-origin top-level navigation requests, including GET requests. This allows an attacker to trick an authenticated user's browser into unknowingly executing unintended actions.\n\nAn attacker can exploit this vulnerability to perform unauthorized state-altering requests on behalf of authenticated users. This could lead to consequences such as data modification, account changes, or other actions that could result in data compromise or loss of user control over their account. However, this attack is only feasible if the Carbon console and related services are exposed to the public internet, which is not recommended according to WSO2's security guidelines."
|
|
}
|
|
],
|
|
"metrics": [
|
|
{
|
|
"cvssV3_1": {
|
|
"version": "3.1",
|
|
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L",
|
|
"attackVector": "NETWORK",
|
|
"attackComplexity": "LOW",
|
|
"privilegesRequired": "NONE",
|
|
"userInteraction": "REQUIRED",
|
|
"scope": "UNCHANGED",
|
|
"confidentialityImpact": "NONE",
|
|
"integrityImpact": "LOW",
|
|
"availabilityImpact": "LOW",
|
|
"baseScore": 5.4,
|
|
"baseSeverity": "MEDIUM"
|
|
},
|
|
"format": "CVSS"
|
|
}
|
|
],
|
|
"problemTypes": [
|
|
{
|
|
"descriptions": [
|
|
{
|
|
"cweId": "CWE-352",
|
|
"description": "CWE-352: Cross-Site Request Forgery (CSRF)",
|
|
"lang": "en",
|
|
"type": "CWE"
|
|
}
|
|
]
|
|
}
|
|
],
|
|
"providerMetadata": {
|
|
"orgId": "ed10eef1-636d-4fbe-9993-6890dfa878f8",
|
|
"shortName": "WSO2",
|
|
"dateUpdated": "2026-08-06T07:33:17.645Z"
|
|
},
|
|
"references": [
|
|
{
|
|
"tags": [
|
|
"vendor-advisory"
|
|
],
|
|
"url": "https://security.docs.wso2.com/en/latest/security-announcements/security-advisories/2026/WSO2-2025-4800/"
|
|
}
|
|
],
|
|
"solutions": [
|
|
{
|
|
"lang": "en",
|
|
"supportingMedia": [
|
|
{
|
|
"base64": false,
|
|
"type": "text/html",
|
|
"value": "<span style=\"background-color: transparent;\">Follow the instructions given on </span><a target=\"_blank\" rel=\"nofollow\" href=\"https://security.docs.wso2.com/en/latest/security-announcements/security-advisories/2026/WSO2-2025-4800/#solution\"><span style=\"background-color: transparent;\">https://security.docs.wso2.com/en/latest/security-announcements/security-advisories/2026/WSO2-2025-4800/#solution</span></a> <br>"
|
|
}
|
|
],
|
|
"value": "Follow the instructions given on https://security.docs.wso2.com/en/latest/security-announcements/security-advisories/2026/WSO2-2025-4800/#solution"
|
|
}
|
|
],
|
|
"source": {
|
|
"advisory": "WSO2-2025-4800",
|
|
"discovery": "INTERNAL"
|
|
},
|
|
"title": "Cross-Site Request Forgery via Ajax Processor Endpoints in Multiple WSO2 Products Enables Unauthorized Actions",
|
|
"x_generator": {
|
|
"engine": "Vulnogram 0.2.0"
|
|
},
|
|
"impacts": [
|
|
{
|
|
"capecId": "CAPEC-234",
|
|
"descriptions": [
|
|
{
|
|
"lang": "en",
|
|
"value": "CAPEC-234 CAPEC-234: Cross-Site Request Forgery"
|
|
}
|
|
]
|
|
}
|
|
]
|
|
},
|
|
"adp": [
|
|
{
|
|
"metrics": [
|
|
{
|
|
"other": {
|
|
"type": "ssvc",
|
|
"content": {
|
|
"timestamp": "2026-08-06T12:32:20.578575Z",
|
|
"id": "CVE-2025-13394",
|
|
"options": [
|
|
{
|
|
"Exploitation": "none"
|
|
},
|
|
{
|
|
"Automatable": "no"
|
|
},
|
|
{
|
|
"Technical Impact": "partial"
|
|
}
|
|
],
|
|
"role": "CISA Coordinator",
|
|
"version": "2.0.3"
|
|
}
|
|
}
|
|
}
|
|
],
|
|
"title": "CISA ADP Vulnrichment",
|
|
"providerMetadata": {
|
|
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
|
|
"shortName": "CISA-ADP",
|
|
"dateUpdated": "2026-08-06T12:32:29.065Z"
|
|
}
|
|
}
|
|
]
|
|
}
|
|
} |