{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2025-13394", "assignerOrgId": "ed10eef1-636d-4fbe-9993-6890dfa878f8", "state": "PUBLISHED", "assignerShortName": "WSO2", "dateReserved": "2025-11-19T06:17:35.259Z", "datePublished": "2026-08-06T07:33:17.645Z", "dateUpdated": "2026-08-06T12:32:29.065Z"}, "containers": {"cna": {"affected": [{"defaultStatus": "unaffected", "product": "WSO2 Identity Server", "vendor": "WSO2", "versions": [{"lessThan": "5.10.0", "status": "unknown", "version": "0", "versionType": "custom"}, {"lessThan": "5.10.0.381", "status": "affected", "version": "5.10.0", "versionType": "custom"}, {"lessThan": "5.11.0.428", "status": "affected", "version": "5.11.0", "versionType": "custom"}, {"lessThan": "6.0.0.255", "status": "affected", "version": "6.0.0", "versionType": "custom"}, {"lessThan": "6.1.0.256", "status": "affected", "version": "6.1.0", "versionType": "custom"}, {"lessThan": "7.0.0.133", "status": "affected", "version": "7.0.0", "versionType": "custom"}, {"lessThan": "7.1.0.41", "status": "affected", "version": "7.1.0", "versionType": "custom"}, {"lessThan": "7.2.0.3", "status": "affected", "version": "7.2.0", "versionType": "custom"}]}, {"defaultStatus": "unaffected", "product": "WSO2 API Manager", "vendor": "WSO2", "versions": [{"lessThan": "3.1.0", "status": "unknown", "version": "0", "versionType": "custom"}, {"lessThan": "3.1.0.352", "status": "affected", "version": "3.1.0", "versionType": "custom"}, {"lessThan": "3.2.0.456", "status": "affected", "version": "3.2.0", "versionType": "custom"}, {"lessThan": "3.2.1.75", "status": "affected", "version": "3.2.1", "versionType": "custom"}, {"lessThan": "4.0.0.376", "status": "affected", "version": "4.0.0", "versionType": "custom"}, {"lessThan": "4.1.0.239", "status": "affected", "version": "4.1.0", "versionType": "custom"}, {"lessThan": "4.2.0.179", "status": "affected", "version": "4.2.0", "versionType": "custom"}, {"lessThan": "4.3.0.91", "status": "affected", "version": "4.3.0", "versionType": "custom"}, {"lessThan": "4.4.0.55", "status": "affected", "version": "4.4.0", "versionType": "custom"}, {"lessThan": "4.5.0.38", "status": "affected", "version": "4.5.0", "versionType": "custom"}, {"lessThan": "4.6.0.3", "status": "affected", "version": "4.6.0", "versionType": "custom"}]}, {"defaultStatus": "unaffected", "product": "WSO2 Open Banking IAM", "vendor": "WSO2", "versions": [{"lessThan": "2.0.0", "status": "unknown", "version": "0", "versionType": "custom"}, {"lessThan": "2.0.0.421", "status": "affected", "version": "2.0.0", "versionType": "custom"}]}, {"defaultStatus": "unaffected", "product": "WSO2 Open Banking AM", "vendor": "WSO2", "versions": [{"lessThan": "2.0.0", "status": "unknown", "version": "0", "versionType": "custom"}, {"lessThan": "2.0.0.401", "status": "affected", "version": "2.0.0", "versionType": "custom"}]}, {"defaultStatus": "unaffected", "product": "WSO2 Identity Server as Key Manager", "vendor": "WSO2", "versions": [{"lessThan": "5.10.0", "status": "unknown", "version": "0", "versionType": "custom"}, {"lessThan": "5.10.0.372", "status": "affected", "version": "5.10.0", "versionType": "custom"}]}, {"defaultStatus": "unaffected", "product": "WSO2 API Control Plane", "vendor": "WSO2", "versions": [{"lessThan": "4.5.0", "status": "unknown", "version": "0", "versionType": "custom"}, {"lessThan": "4.5.0.39", "status": "affected", "version": "4.5.0", "versionType": "custom"}, {"lessThan": "4.6.0.3", "status": "affected", "version": "4.6.0", "versionType": "custom"}]}, {"defaultStatus": "unaffected", "product": "WSO2 Universal Gateway", "vendor": "WSO2", "versions": [{"lessThan": "4.5.0", "status": "unknown", "version": "0", "versionType": "custom"}, {"lessThan": "4.5.0.37", "status": "affected", "version": "4.5.0", "versionType": "custom"}, {"lessThan": "4.6.0.3", "status": "affected", "version": "4.6.0", "versionType": "custom"}]}, {"defaultStatus": "unaffected", "product": "WSO2 Traffic Manager", "vendor": "WSO2", "versions": [{"lessThan": "4.5.0", "status": "unknown", "version": "0", "versionType": "custom"}, {"lessThan": "4.5.0.37", "status": "affected", "version": "4.5.0", "versionType": "custom"}, {"lessThan": "4.6.0.3", "status": "affected", "version": "4.6.0", "versionType": "custom"}]}, {"defaultStatus": "unaffected", "product": "WSO2 Enterprise Integrator", "vendor": "WSO2", "versions": [{"lessThan": "6.6.0", "status": "unknown", "version": "0", "versionType": "custom"}, {"lessThan": "6.6.0.227", "status": "affected", "version": "6.6.0", "versionType": "custom"}]}, {"defaultStatus": "unknown", "packageName": "org.wso2.carbon.identity.framework:org.wso2.carbon.identity.entitlement.ui", "product": "WSO2 Carbon Identity Entitlement UI", "vendor": "WSO2", "versions": [{"lessThan": "5.17.5.331", "status": "affected", "version": "5.17.5", "versionType": "custom"}, {"lessThan": "5.18.187.329", "status": "affected", "version": "5.18.187", "versionType": "custom"}, {"lessThan": "5.23.8.210", "status": "affected", "version": "5.23.8", "versionType": "custom"}, {"lessThan": "5.25.92.166", "status": "affected", "version": "5.25.92", "versionType": "custom"}, {"lessThan": "7.0.78.157", "status": "affected", "version": "7.0.78", "versionType": "custom"}, {"lessThanOrEqual": "*", "status": "unaffected", "version": "x", "versionType": "custom"}]}, {"defaultStatus": "unknown", "packageName": "org.wso2.carbon.identity.framework:org.wso2.carbon.identity.mgt.ui", "product": "WSO2 Carbon Identity Management UI1", "vendor": "WSO2", "versions": [{"lessThan": "5.17.5.330", "status": "affected", "version": "5.17.5", "versionType": "custom"}, {"lessThan": "5.17.5.331", "status": "affected", "version": "5.17.5", "versionType": "custom"}, {"lessThan": "5.17.118.22", "status": "affected", "version": "5.17.118", "versionType": "custom"}, {"lessThan": "5.18.187.328", "status": "affected", "version": "5.18.187", "versionType": "custom"}, {"lessThan": "5.18.187.329", "status": "affected", "version": "5.18.187", "versionType": "custom"}, {"lessThan": "5.18.248.31", "status": "affected", "version": "5.18.248", "versionType": "custom"}, {"lessThan": "5.23.8.210", "status": "affected", "version": "5.23.8", "versionType": "custom"}, {"lessThan": "5.24.8.26", "status": "affected", "version": "5.24.8", "versionType": "custom"}, {"lessThan": "5.25.92.166", "status": "affected", "version": "5.25.92", "versionType": "custom"}, {"lessThan": "5.25.705.21", "status": "affected", "version": "5.25.705", "versionType": "custom"}, {"lessThan": "5.25.713.10", "status": "affected", "version": "5.25.713", "versionType": "custom"}, {"lessThan": "5.25.724.5", "status": "affected", "version": "5.25.724", "versionType": "custom"}, {"lessThan": "5.25.736.1", "status": "affected", "version": "5.25.736", "versionType": "custom"}, {"lessThan": "7.0.78.157", "status": "affected", "version": "7.0.78", "versionType": "custom"}, {"lessThan": "7.8.23.67", "status": "affected", "version": "7.8.23", "versionType": "custom"}, {"lessThan": "7.8.586.7", "status": "affected", "version": "7.8.586", "versionType": "custom"}, {"lessThanOrEqual": "*", "status": "unaffected", "version": "x", "versionType": "custom"}]}, {"defaultStatus": "unknown", "packageName": "org.wso2.carbon.identity.framework:org.wso2.carbon.identity.user.store.configuration.ui", "product": "WSO2 Carbon Identity User Store Configuration UI", "vendor": "WSO2", "versions": [{"lessThan": "5.14.127.13", "status": "affected", "version": "5.14.127", "versionType": "custom"}, {"lessThan": "5.17.5.330", "status": "affected", "version": "5.17.5", "versionType": "custom"}, {"lessThan": "5.17.5.331", "status": "affected", "version": "5.17.5", "versionType": "custom"}, {"lessThan": "5.17.118.22", "status": "affected", "version": "5.17.118", "versionType": "custom"}, {"lessThan": "5.18.187.328", "status": "affected", "version": "5.18.187", "versionType": "custom"}, {"lessThan": "5.18.187.329", "status": "affected", "version": "5.18.187", "versionType": "custom"}, {"lessThan": "5.18.248.31", "status": "affected", "version": "5.18.248", "versionType": "custom"}, {"lessThan": "5.23.8.210", "status": "affected", "version": "5.23.8", "versionType": "custom"}, {"lessThan": "5.24.8.26", "status": "affected", "version": "5.24.8", "versionType": "custom"}, {"lessThan": "5.25.92.166", "status": "affected", "version": "5.25.92", "versionType": "custom"}, {"lessThan": "5.25.705.21", "status": "affected", "version": "5.25.705", "versionType": "custom"}, {"lessThan": "5.25.713.10", "status": "affected", "version": "5.25.713", "versionType": "custom"}, {"lessThan": "5.25.724.5", "status": "affected", "version": "5.25.724", "versionType": "custom"}, {"lessThan": "5.25.736.1", "status": "affected", "version": "5.25.736", "versionType": "custom"}, {"lessThan": "7.0.78.157", "status": "affected", "version": "7.0.78", "versionType": "custom"}, {"lessThan": "7.8.23.67", "status": "affected", "version": "7.8.23", "versionType": "custom"}, {"lessThan": "7.8.586.7", "status": "affected", "version": "7.8.586", "versionType": "custom"}, {"lessThanOrEqual": "*", "status": "unaffected", "version": "x", "versionType": "custom"}]}, {"defaultStatus": "unknown", "packageName": "org.wso2.carbon:org.wso2.carbon.registry.profiles.ui", "product": "WSO2 Carbon Registry Profiles UI", "vendor": "WSO2", "versions": [{"lessThan": "4.7.32.18", "status": "affected", "version": "4.7.32", "versionType": "custom"}, {"lessThan": "4.7.33.16", "status": "affected", "version": "4.7.33", "versionType": "custom"}, {"lessThan": "4.8.9.16", "status": "affected", "version": "4.8.9", "versionType": "custom"}, {"lessThan": "4.8.12.8", "status": "affected", "version": "4.8.12", "versionType": "custom"}, {"lessThan": "4.8.24.6", "status": "affected", "version": "4.8.24", "versionType": "custom"}, {"lessThan": "4.8.43.4", "status": "affected", "version": "4.8.43", "versionType": "custom"}, {"lessThan": "4.8.50.3", "status": "affected", "version": "4.8.50", "versionType": "custom"}, {"lessThanOrEqual": "*", "status": "unaffected", "version": "x", "versionType": "custom"}]}, {"defaultStatus": "unknown", "packageName": "org.wso2.carbon:org.wso2.carbon.registry.properties.ui", "product": "WSO2 Carbon Registry Properties UI", "vendor": "WSO2", "versions": [{"lessThan": "4.7.24.11", "status": "affected", "version": "4.7.24", "versionType": "custom"}, {"lessThan": "4.7.32.16", "status": "affected", "version": "4.7.32", "versionType": "custom"}, {"lessThan": "4.7.32.18", "status": "affected", "version": "4.7.32", "versionType": "custom"}, {"lessThan": "4.7.33.16", "status": "affected", "version": "4.7.33", "versionType": "custom"}, {"lessThan": "4.7.35.15", "status": "affected", "version": "4.7.35", "versionType": "custom"}, {"lessThan": "4.7.39.12", "status": "affected", "version": "4.7.39", "versionType": "custom"}, {"lessThan": "4.7.51.8", "status": "affected", "version": "4.7.51", "versionType": "custom"}, {"lessThan": "4.8.3.10", "status": "affected", "version": "4.8.3", "versionType": "custom"}, {"lessThan": "4.8.9.16", "status": "affected", "version": "4.8.9", "versionType": "custom"}, {"lessThan": "4.8.12.8", "status": "affected", "version": "4.8.12", "versionType": "custom"}, {"lessThan": "4.8.13.9", "status": "affected", "version": "4.8.13", "versionType": "custom"}, {"lessThan": "4.8.24.6", "status": "affected", "version": "4.8.24", "versionType": "custom"}, {"lessThan": "4.8.32.4", "status": "affected", "version": "4.8.32", "versionType": "custom"}, {"lessThan": "4.8.36.2", "status": "affected", "version": "4.8.36", "versionType": "custom"}, {"lessThan": "4.8.43.2", "status": "affected", "version": "4.8.43", "versionType": "custom"}, {"lessThan": "4.8.43.4", "status": "affected", "version": "4.8.43", "versionType": "custom"}, {"lessThan": "4.8.50.1", "status": "affected", "version": "4.8.50", "versionType": "custom"}, {"lessThan": "4.8.50.3", "status": "affected", "version": "4.8.50", "versionType": "custom"}, {"lessThanOrEqual": "*", "status": "unaffected", "version": "x", "versionType": "custom"}]}, {"defaultStatus": "unknown", "packageName": "org.wso2.carbon:org.wso2.carbon.registry.resource.ui", "product": "WSO2 Carbon Registry Resources UI", "vendor": "WSO2", "versions": [{"lessThan": "4.7.24.11", "status": "affected", "version": "4.7.24", "versionType": "custom"}, {"lessThan": "4.7.32.16", "status": "affected", "version": "4.7.32", "versionType": "custom"}, {"lessThan": "4.7.32.18", "status": "affected", "version": "4.7.32", "versionType": "custom"}, {"lessThan": "4.7.33.16", "status": "affected", "version": "4.7.33", "versionType": "custom"}, {"lessThan": "4.7.35.15", "status": "affected", "version": "4.7.35", "versionType": "custom"}, {"lessThan": "4.7.39.12", "status": "affected", "version": "4.7.39", "versionType": "custom"}, {"lessThan": "4.7.51.8", "status": "affected", "version": "4.7.51", "versionType": "custom"}, {"lessThan": "4.8.3.10", "status": "affected", "version": "4.8.3", "versionType": "custom"}, {"lessThan": "4.8.9.16", "status": "affected", "version": "4.8.9", "versionType": "custom"}, {"lessThan": "4.8.12.8", "status": "affected", "version": "4.8.12", "versionType": "custom"}, {"lessThan": "4.8.13.9", "status": "affected", "version": "4.8.13", "versionType": "custom"}, {"lessThan": "4.8.24.6", "status": "affected", "version": "4.8.24", "versionType": "custom"}, {"lessThan": "4.8.32.4", "status": "affected", "version": "4.8.32", "versionType": "custom"}, {"lessThan": "4.8.36.2", "status": "affected", "version": "4.8.36", "versionType": "custom"}, {"lessThan": "4.8.43.2", "status": "affected", "version": "4.8.43", "versionType": "custom"}, {"lessThan": "4.8.43.4", "status": "affected", "version": "4.8.43", "versionType": "custom"}, {"lessThan": "4.8.50.1", "status": "affected", "version": "4.8.50", "versionType": "custom"}, {"lessThan": "4.8.50.3", "status": "affected", "version": "4.8.50", "versionType": "custom"}, {"lessThanOrEqual": "*", "status": "unaffected", "version": "x", "versionType": "custom"}]}, {"defaultStatus": "unknown", "packageName": "org.wso2.carbon:org.wso2.carbon.registry.search.ui", "product": "WSO2 Carbon Registry Search UI", "vendor": "WSO2", "versions": [{"lessThan": "4.7.24.11", "status": "affected", "version": "4.7.24", "versionType": "custom"}, {"lessThan": "4.7.32.16", "status": "affected", "version": "4.7.32", "versionType": "custom"}, {"lessThan": "4.7.32.18", "status": "affected", "version": "4.7.32", "versionType": "custom"}, {"lessThan": "4.7.33.16", "status": "affected", "version": "4.7.33", "versionType": "custom"}, {"lessThan": "4.7.35.15", "status": "affected", "version": "4.7.35", "versionType": "custom"}, {"lessThan": "4.7.39.12", "status": "affected", "version": "4.7.39", "versionType": "custom"}, {"lessThan": "4.7.51.8", "status": "affected", "version": "4.7.51", "versionType": "custom"}, {"lessThan": "4.8.3.10", "status": "affected", "version": "4.8.3", "versionType": "custom"}, {"lessThan": "4.8.9.16", "status": "affected", "version": "4.8.9", "versionType": "custom"}, {"lessThan": "4.8.12.8", "status": "affected", "version": "4.8.12", "versionType": "custom"}, {"lessThan": "4.8.13.9", "status": "affected", "version": "4.8.13", "versionType": "custom"}, {"lessThan": "4.8.24.6", "status": "affected", "version": "4.8.24", "versionType": "custom"}, {"lessThanOrEqual": "*", "status": "unaffected", "version": "x", "versionType": "custom"}]}, {"defaultStatus": "unknown", "packageName": "org.wso2.carbon:org.wso2.carbon.tenant.mgt.ui", "product": "WSO2 Stratos User Interface For Tenant CRUD Operations", "vendor": "WSO2", "versions": [{"lessThan": "4.8.1.6", "status": "affected", "version": "4.8.1", "versionType": "custom"}, {"lessThan": "4.8.7.3", "status": "affected", "version": "4.8.7", "versionType": "custom"}, {"lessThan": "4.9.8.7", "status": "affected", "version": "4.9.8", "versionType": "custom"}, {"lessThan": "4.9.10.7", "status": "affected", "version": "4.9.10", "versionType": "custom"}, {"lessThan": "4.9.10.8", "status": "affected", "version": "4.9.10", "versionType": "custom"}, {"lessThan": "4.9.20.5", "status": "affected", "version": "4.9.20", "versionType": "custom"}, {"lessThan": "4.9.27.1", "status": "affected", "version": "4.9.27", "versionType": "custom"}, {"lessThan": "4.9.31.1", "status": "affected", "version": "4.9.31", "versionType": "custom"}, {"lessThan": "4.9.34.1", "status": "affected", "version": "4.9.34", "versionType": "custom"}, {"lessThan": "4.9.42.1", "status": "affected", "version": "4.9.42", "versionType": "custom"}, {"lessThan": "4.11.0.7", "status": "affected", "version": "4.11.0", "versionType": "custom"}, {"lessThan": "4.11.19.4", "status": "affected", "version": "4.11.19", "versionType": "custom"}, {"lessThan": "4.11.34.3", "status": "affected", "version": "4.11.34", "versionType": "custom"}, {"lessThan": "4.11.45.1", "status": "affected", "version": "4.11.45", "versionType": "custom"}, {"lessThanOrEqual": "*", "status": "unaffected", "version": "x", "versionType": "custom"}]}, {"defaultStatus": "unknown", "packageName": "org.wso2.carbon.multitenancy:org.wso2.carbon.tenant.sso.redirector.ui", "product": "WSO2 Stratos SSO Redirector UI Component", "vendor": "WSO2", "versions": [{"lessThan": "4.8.1.6", "status": "affected", "version": "4.8.1", "versionType": "custom"}, {"lessThanOrEqual": "*", "status": "unaffected", "version": "x", "versionType": "custom"}]}, {"defaultStatus": "unknown", "packageName": "org.wso2.carbon:org.wso2.carbon.email.verification.ui", "product": "WSO2 Carbon Email Verification UI", "vendor": "WSO2", "versions": [{"lessThan": "4.7.19.14", "status": "affected", "version": "4.7.19", "versionType": "custom"}, {"lessThanOrEqual": "*", "status": "unaffected", "version": "x", "versionType": "custom"}]}, {"defaultStatus": "unknown", "packageName": "org.wso2.carbon:org.wso2.carbon.event.simulator.ui", "product": "WSO2 Carbon Event Simulator UI", "vendor": "WSO2", "versions": [{"lessThan": "2.2.11.1", "status": "affected", "version": "2.2.11", "versionType": "custom"}, {"lessThan": "2.2.14.11", "status": "affected", "version": "2.2.14", "versionType": "custom"}, {"lessThan": "2.2.14.12", "status": "affected", "version": "2.2.14", "versionType": "custom"}, {"lessThan": "2.2.17.5", "status": "affected", "version": "2.2.17", "versionType": "custom"}, {"lessThan": "2.3.1.4", "status": "affected", "version": "2.3.1", "versionType": "custom"}, {"lessThan": "2.3.5.6", "status": "affected", "version": "2.3.5", "versionType": "custom"}, {"lessThanOrEqual": "*", "status": "unaffected", "version": "x", "versionType": "custom"}]}, {"defaultStatus": "unknown", "packageName": "org.wso2.carbon.analytics-common:org.wso2.carbon.event.template.manager.ui", "product": "WSO2 Carbon Execution Manager UI", "vendor": "WSO2", "versions": [{"lessThan": "5.2.24.10", "status": "affected", "version": "5.2.24", "versionType": "custom"}, {"lessThan": "5.2.26.22", "status": "affected", "version": "5.2.26", "versionType": "custom"}, {"lessThan": "5.2.34.12", "status": "affected", "version": "5.2.34", "versionType": "custom"}, {"lessThan": "5.2.41.7", "status": "affected", "version": "5.2.41", "versionType": "custom"}, {"lessThan": "5.2.57.10", "status": "affected", "version": "5.2.57", "versionType": "custom"}, {"lessThan": "5.3.5.9", "status": "affected", "version": "5.3.5", "versionType": "custom"}, {"lessThanOrEqual": "*", "status": "unaffected", "version": "x", "versionType": "custom"}]}, {"defaultStatus": "unknown", "packageName": "org.wso2.carbon.governance:org.wso2.carbon.governance.custom.lifecycles.checklist.ui", "product": "WSO2 Carbon Governance Custom Lifecycle Checklist UI", "vendor": "WSO2", "versions": [{"lessThan": "4.8.14.4", "status": "affected", "version": "4.8.14", "versionType": "custom"}, {"lessThan": "4.8.19.8", "status": "affected", "version": "4.8.19", "versionType": "custom"}, {"lessThan": "4.8.21.10", "status": "affected", "version": "4.8.21", "versionType": "custom"}, {"lessThan": "4.8.28.4", "status": "affected", "version": "4.8.28", "versionType": "custom"}, {"lessThan": "4.8.30.6", "status": "affected", "version": "4.8.30", "versionType": "custom"}, {"lessThan": "4.8.32.4", "status": "affected", "version": "4.8.32", "versionType": "custom"}, {"lessThanOrEqual": "*", "status": "unaffected", "version": "x", "versionType": "custom"}]}, {"defaultStatus": "unknown", "packageName": "org.wso2.carbon.governance:org.wso2.carbon.governance.generic.ui", "product": "WSO2 Carbon Governance Generic Artifact User Interface", "vendor": "WSO2", "versions": [{"lessThan": "4.8.14.4", "status": "affected", "version": "4.8.14", "versionType": "custom"}, {"lessThan": "4.8.19.8", "status": "affected", "version": "4.8.19", "versionType": "custom"}, {"lessThan": "4.8.21.10", "status": "affected", "version": "4.8.21", "versionType": "custom"}, {"lessThan": "4.8.28.4", "status": "affected", "version": "4.8.28", "versionType": "custom"}, {"lessThan": "4.8.30.6", "status": "affected", "version": "4.8.30", "versionType": "custom"}, {"lessThan": "4.8.32.4", "status": "affected", "version": "4.8.32", "versionType": "custom"}, {"lessThan": "4.8.33.4", "status": "affected", "version": "4.8.33", "versionType": "custom"}, {"lessThan": "4.8.34.5", "status": "affected", "version": "4.8.34", "versionType": "custom"}, {"lessThan": "4.8.37.4", "status": "affected", "version": "4.8.37", "versionType": "custom"}, {"lessThanOrEqual": "*", "status": "unaffected", "version": "x", "versionType": "custom"}]}, {"defaultStatus": "unknown", "packageName": "org.wso2.carbon.governance:org.wso2.carbon.governance.lcm.ui", "product": "WSO2 Carbon Governance Life Cycles User Interface", "vendor": "WSO2", "versions": [{"lessThan": "4.8.14.4", "status": "affected", "version": "4.8.14", "versionType": "custom"}, {"lessThan": "4.8.19.8", "status": "affected", "version": "4.8.19", "versionType": "custom"}, {"lessThan": "4.8.21.10", "status": "affected", "version": "4.8.21", "versionType": "custom"}, {"lessThan": "4.8.28.4", "status": "affected", "version": "4.8.28", "versionType": "custom"}, {"lessThan": "4.8.30.6", "status": "affected", "version": "4.8.30", "versionType": "custom"}, {"lessThan": "4.8.32.4", "status": "affected", "version": "4.8.32", "versionType": "custom"}, {"lessThanOrEqual": "*", "status": "unaffected", "version": "x", "versionType": "custom"}]}, {"defaultStatus": "unknown", "packageName": "org.wso2.carbon:org.wso2.carbon.governance.wsdltool.ui", "product": "WSO2 Carbon Governance WSDL Tool UI", "vendor": "WSO2", "versions": [{"lessThan": "4.8.14.4", "status": "affected", "version": "4.8.14", "versionType": "custom"}, {"lessThan": "4.8.19.8", "status": "affected", "version": "4.8.19", "versionType": "custom"}, {"lessThan": "4.8.21.10", "status": "affected", "version": "4.8.21", "versionType": "custom"}, {"lessThan": "4.8.28.4", "status": "affected", "version": "4.8.28", "versionType": "custom"}, {"lessThan": "4.8.30.6", "status": "affected", "version": "4.8.30", "versionType": "custom"}, {"lessThan": "4.8.32.4", "status": "affected", "version": "4.8.32", "versionType": "custom"}, {"lessThan": "4.8.33.4", "status": "affected", "version": "4.8.33", "versionType": "custom"}, {"lessThan": "4.8.34.5", "status": "affected", "version": "4.8.34", "versionType": "custom"}, {"lessThan": "4.8.37.4", "status": "affected", "version": "4.8.37", "versionType": "custom"}, {"lessThanOrEqual": "*", "status": "unaffected", "version": "x", "versionType": "custom"}]}, {"defaultStatus": "unknown", "packageName": "org.wso2.carbon.commons:org.wso2.carbon.ndatasource.ui", "product": "WSO2 Carbon New Data Sources UI", "vendor": "WSO2", "versions": [{"lessThan": "4.7.19.13", "status": "affected", "version": "4.7.19", "versionType": "custom"}, {"lessThan": "4.7.24.5", "status": "affected", "version": "4.7.24", "versionType": "custom"}, {"lessThan": "4.7.32.10", "status": "affected", "version": "4.7.32", "versionType": "custom"}, {"lessThan": "4.7.35.13", "status": "affected", "version": "4.7.35", "versionType": "custom"}, {"lessThan": "4.7.49.7", "status": "affected", "version": "4.7.49", "versionType": "custom"}, {"lessThan": "4.7.52.5", "status": "affected", "version": "4.7.52", "versionType": "custom"}, {"lessThan": "4.9.2.8", "status": "affected", "version": "4.9.2", "versionType": "custom"}, {"lessThan": "4.9.11.2", "status": "affected", "version": "4.9.11", "versionType": "custom"}, {"lessThan": "4.9.18.1", "status": "affected", "version": "4.9.18", "versionType": "custom"}, {"lessThanOrEqual": "*", "status": "unaffected", "version": "x", "versionType": "custom"}]}, {"defaultStatus": "unknown", "packageName": "org.wso2.carbon:org.wso2.carbon.registry.info.ui", "product": "WSO2 Carbon Registry Info UI2", "vendor": "WSO2", "versions": [{"lessThan": "4.7.32.16", "status": "affected", "version": "4.7.32", "versionType": "custom"}, {"lessThan": "4.7.35.15", "status": "affected", "version": "4.7.35", "versionType": "custom"}, {"lessThan": "4.7.39.12", "status": "affected", "version": "4.7.39", "versionType": "custom"}, {"lessThan": "4.7.51.8", "status": "affected", "version": "4.7.51", "versionType": "custom"}, {"lessThan": "4.8.3.10", "status": "affected", "version": "4.8.3", "versionType": "custom"}, {"lessThan": "4.8.13.9", "status": "affected", "version": "4.8.13", "versionType": "custom"}, {"lessThan": "4.8.32.4", "status": "affected", "version": "4.8.32", "versionType": "custom"}, {"lessThan": "4.8.36.2", "status": "affected", "version": "4.8.36", "versionType": "custom"}, {"lessThan": "4.8.43.2", "status": "affected", "version": "4.8.43", "versionType": "custom"}, {"lessThan": "4.8.50.1", "status": "affected", "version": "4.8.50", "versionType": "custom"}, {"lessThanOrEqual": "*", "status": "unaffected", "version": "x", "versionType": "custom"}]}, {"defaultStatus": "unknown", "packageName": "org.wso2.carbon:org.wso2.carbon.registry.relations.ui", "product": "WSO2 Carbon Registry Relations UI", "vendor": "WSO2", "versions": [{"lessThan": "4.7.24.11", "status": "affected", "version": "4.7.24", "versionType": "custom"}, {"lessThan": "4.7.32.16", "status": "affected", "version": "4.7.32", "versionType": "custom"}, {"lessThan": "4.7.35.15", "status": "affected", "version": "4.7.35", "versionType": "custom"}, {"lessThan": "4.7.39.12", "status": "affected", "version": "4.7.39", "versionType": "custom"}, {"lessThan": "4.7.51.8", "status": "affected", "version": "4.7.51", "versionType": "custom"}, {"lessThan": "4.8.3.10", "status": "affected", "version": "4.8.3", "versionType": "custom"}, {"lessThan": "4.8.13.9", "status": "affected", "version": "4.8.13", "versionType": "custom"}, {"lessThan": "4.8.32.4", "status": "affected", "version": "4.8.32", "versionType": "custom"}, {"lessThan": "4.8.36.2", "status": "affected", "version": "4.8.36", "versionType": "custom"}, {"lessThan": "4.8.43.2", "status": "affected", "version": "4.8.43", "versionType": "custom"}, {"lessThan": "4.8.50.1", "status": "affected", "version": "4.8.50", "versionType": "custom"}, {"lessThanOrEqual": "*", "status": "unaffected", "version": "x", "versionType": "custom"}]}, {"defaultStatus": "unknown", "packageName": "org.wso2.carbon.registry:org.wso2.carbon.registry.indexing", "product": "WSO2 Carbon Registry Indexing", "vendor": "WSO2", "versions": [{"lessThan": "4.7.24", "status": "affected", "version": "4.7", "versionType": "custom"}, {"lessThanOrEqual": "*", "status": "unaffected", "version": "x", "versionType": "custom"}]}, {"defaultStatus": "unknown", "packageName": "org.wso2.carbon:org.wso2.carbon.security.mgt.ui", "product": "WSO2 Carbon Security UI", "vendor": "WSO2", "versions": [{"lessThan": "5.14.127", "status": "affected", "version": "5.14", "versionType": "custom"}, {"lessThanOrEqual": "*", "status": "unaffected", "version": "x", "versionType": "custom"}]}, {"defaultStatus": "unknown", "packageName": "org.wso2.carbon.messaging:org.wso2.carbon.andes.event.ui", "product": "WSO2 Carbon Component Andes Event UI", "vendor": "WSO2", "versions": [{"lessThan": "3.3.12.3", "status": "affected", "version": "3.3.12", "versionType": "custom"}, {"lessThanOrEqual": "*", "status": "unaffected", "version": "x", "versionType": "custom"}]}, {"defaultStatus": "unknown", "packageName": "org.wso2.carbon.messaging:org.wso2.carbon.andes.ui", "product": "WSO2 Carbon Component Andes UI1", "vendor": "WSO2", "versions": [{"lessThan": "3.3.12.3", "status": "affected", "version": "3.3.12", "versionType": "custom"}, {"lessThanOrEqual": "*", "status": "unaffected", "version": "x", "versionType": "custom"}]}, {"defaultStatus": "unknown", "packageName": "org.wso2.carbon.mediation:org.wso2.carbon.business.messaging.hl7.store.ui", "product": "WSO2 Carbon HL7 Business Messaging Store UI", "vendor": "WSO2", "versions": [{"lessThan": "4.7.30.53", "status": "affected", "version": "4.7.30", "versionType": "custom"}, {"lessThanOrEqual": "*", "status": "unaffected", "version": "x", "versionType": "custom"}]}, {"defaultStatus": "unknown", "packageName": "org.wso2.carbonorg.wso2.carbon.endpoint.ui", "product": "WSO2 Carbon Endpoint Editor UI", "vendor": "WSO2", "versions": [{"lessThan": "4.7.30.53", "status": "affected", "version": "4.7.30", "versionType": "custom"}, {"lessThanOrEqual": "*", "status": "unaffected", "version": "x", "versionType": "custom"}]}, {"defaultStatus": "unknown", "packageName": "org.wso2.carbon.mediationorg.wso2.carbon.event.sink.config.ui", "product": "WSO2 Carbon Publish Event Mediator Configuration UI", "vendor": "WSO2", "versions": [{"lessThan": "4.7.30.53", "status": "affected", "version": "4.7.30", "versionType": "custom"}, {"lessThanOrEqual": "*", "status": "unaffected", "version": "x", "versionType": "custom"}]}, {"defaultStatus": "unknown", "packageName": "org.wso2.carbon.commons:org.wso2.carbon.event.ui", "product": "WSO2 Carbon Eventing UI", "vendor": "WSO2", "versions": [{"lessThan": "4.7.19.13", "status": "affected", "version": "4.7.19", "versionType": "custom"}, {"lessThanOrEqual": "*", "status": "unaffected", "version": "x", "versionType": "custom"}]}, {"defaultStatus": "unknown", "packageName": "org.wso2.carbon.business-process:org.wso2.carbon.humantask.ui", "product": "WSO2 Carbon HumanTask UI", "vendor": "WSO2", "versions": [{"lessThan": "4.5.27.10", "status": "affected", "version": "4.5.27", "versionType": "custom"}, {"lessThanOrEqual": "*", "status": "unaffected", "version": "x", "versionType": "custom"}]}, {"defaultStatus": "unknown", "packageName": "org.wso2.carbon:org.wso2.carbon.logging.admin.ui", "product": "WSO2 Carbon Logging UI", "vendor": "WSO2", "versions": [{"lessThan": "4.7.19.13", "status": "affected", "version": "4.7.19", "versionType": "custom"}, {"lessThan": "4.7.24.5", "status": "affected", "version": "4.7.24", "versionType": "custom"}, {"lessThan": "4.7.32.10", "status": "affected", "version": "4.7.32", "versionType": "custom"}, {"lessThan": "4.7.52.5", "status": "affected", "version": "4.7.52", "versionType": "custom"}, {"lessThanOrEqual": "*", "status": "unaffected", "version": "x", "versionType": "custom"}]}, {"defaultStatus": "unknown", "packageName": "org.wso2.carbon.mediation:org.wso2.carbon.mediation.templates.ui", "product": "WSO2 Carbon Template Editor UI", "vendor": "WSO2", "versions": [{"lessThan": "4.7.30.53", "status": "affected", "version": "4.7.30", "versionType": "custom"}, {"lessThanOrEqual": "*", "status": "unaffected", "version": "x", "versionType": "custom"}]}, {"defaultStatus": "unknown", "packageName": "org.wso2.carbon:org.wso2.carbon.mediator.command.ui", "product": "WSO2 Carbon Command Mediator UI", "vendor": "WSO2", "versions": [{"lessThan": "4.7.30.53", "status": "affected", "version": "4.7.30", "versionType": "custom"}, {"lessThanOrEqual": "*", "status": "unaffected", "version": "x", "versionType": "custom"}]}, {"defaultStatus": "unknown", "packageName": "org.wso2.carbon:org.wso2.carbon.mediator.rule.ui", "product": "WSO2 Carbon Rule Mediator UI", "vendor": "WSO2", "versions": [{"lessThan": "4.7.30.53", "status": "affected", "version": "4.7.30", "versionType": "custom"}, {"lessThanOrEqual": "*", "status": "unaffected", "version": "x", "versionType": "custom"}]}, {"defaultStatus": "unknown", "packageName": "org.wso2.carbon:org.wso2.carbon.mediator.throttle.ui", "product": "WSO2 Carbon Throttle Mediator UI", "vendor": "WSO2", "versions": [{"lessThan": "4.7.30.53", "status": "affected", "version": "4.7.30", "versionType": "custom"}, {"lessThanOrEqual": "*", "status": "unaffected", "version": "x", "versionType": "custom"}]}, {"defaultStatus": "unknown", "packageName": "org.wso2.carbon:org.wso2.carbon.ntask.core", "product": "WSO2 Carbon Tasks Core", "vendor": "WSO2", "versions": [{"lessThan": "4.7.19.13", "status": "affected", "version": "4.7.19", "versionType": "custom"}, {"lessThanOrEqual": "*", "status": "unaffected", "version": "x", "versionType": "custom"}]}, {"defaultStatus": "unknown", "packageName": "org.wso2.carbon:org.wso2.carbon.rest.api.ui", "product": "WSO2 Carbon Rest API Admin UI", "vendor": "WSO2", "versions": [{"lessThan": "4.7.30.53", "status": "affected", "version": "4.7.30", "versionType": "custom"}, {"lessThanOrEqual": "*", "status": "unaffected", "version": "x", "versionType": "custom"}]}, {"defaultStatus": "unknown", "packageName": "org.wso2.carbon:org.wso2.carbon.sequences.ui", "product": "WSO2 Carbon Sequence Editor UI", "vendor": "WSO2", "versions": [{"lessThan": "4.7.30.53", "status": "affected", "version": "4.7.30", "versionType": "custom"}, {"lessThanOrEqual": "*", "status": "unaffected", "version": "x", "versionType": "custom"}]}, {"defaultStatus": "unknown", "packageName": "org.wso2.carbon:org.wso2.carbon.task.ui", "product": "WSO2 Carbon Task UI", "vendor": "WSO2", "versions": [{"lessThan": "4.7.30.53", "status": "affected", "version": "4.7.30", "versionType": "custom"}, {"lessThanOrEqual": "*", "status": "unaffected", "version": "x", "versionType": "custom"}]}, {"defaultStatus": "unknown", "packageName": "org.wso2.carbon.governance:org.wso2.carbon.governance.api", "product": "WSO2 Carbon Governance", "vendor": "WSO2", "versions": [{"lessThan": "4.8.37.4", "status": "affected", "version": "4.8.37", "versionType": "custom"}, {"lessThanOrEqual": "*", "status": "unaffected", "version": "x", "versionType": "custom"}]}], "descriptions": [{"lang": "en", "supportingMedia": [{"base64": false, "type": "text/html", "value": "The Ajax processor within the Carbon console fails to adequately protect state-changing operations from Cross-Site Request Forgery (CSRF) attacks. Specifically, it utilizes the HTTP GET method for these operations, and while the SameSite=Lax cookie attribute is employed for mitigation, this mechanism is bypassed as it permits cookies to be sent with cross-origin top-level navigation requests, including GET requests. This allows an attacker to trick an authenticated user's browser into unknowingly executing unintended actions.\n\nAn attacker can exploit this vulnerability to perform unauthorized state-altering requests on behalf of authenticated users. This could lead to consequences such as data modification, account changes, or other actions that could result in data compromise or loss of user control over their account. However, this attack is only feasible if the Carbon console and related services are exposed to the public internet, which is not recommended according to WSO2's security guidelines."}], "value": "The Ajax processor within the Carbon console fails to adequately protect state-changing operations from Cross-Site Request Forgery (CSRF) attacks. Specifically, it utilizes the HTTP GET method for these operations, and while the SameSite=Lax cookie attribute is employed for mitigation, this mechanism is bypassed as it permits cookies to be sent with cross-origin top-level navigation requests, including GET requests. This allows an attacker to trick an authenticated user's browser into unknowingly executing unintended actions.\n\nAn attacker can exploit this vulnerability to perform unauthorized state-altering requests on behalf of authenticated users. This could lead to consequences such as data modification, account changes, or other actions that could result in data compromise or loss of user control over their account. However, this attack is only feasible if the Carbon console and related services are exposed to the public internet, which is not recommended according to WSO2's security guidelines."}], "metrics": [{"cvssV3_1": {"version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L", "attackVector": "NETWORK", "attackComplexity": "LOW", "privilegesRequired": "NONE", "userInteraction": "REQUIRED", "scope": "UNCHANGED", "confidentialityImpact": "NONE", "integrityImpact": "LOW", "availabilityImpact": "LOW", "baseScore": 5.4, "baseSeverity": "MEDIUM"}, "format": "CVSS"}], "problemTypes": [{"descriptions": [{"cweId": "CWE-352", "description": "CWE-352: Cross-Site Request Forgery (CSRF)", "lang": "en", "type": "CWE"}]}], "providerMetadata": {"orgId": "ed10eef1-636d-4fbe-9993-6890dfa878f8", "shortName": "WSO2", "dateUpdated": "2026-08-06T07:33:17.645Z"}, "references": [{"tags": ["vendor-advisory"], "url": "https://security.docs.wso2.com/en/latest/security-announcements/security-advisories/2026/WSO2-2025-4800/"}], "solutions": [{"lang": "en", "supportingMedia": [{"base64": false, "type": "text/html", "value": "<span style=\"background-color: transparent;\">Follow the instructions given on </span><a target=\"_blank\" rel=\"nofollow\" href=\"https://security.docs.wso2.com/en/latest/security-announcements/security-advisories/2026/WSO2-2025-4800/#solution\"><span style=\"background-color: transparent;\">https://security.docs.wso2.com/en/latest/security-announcements/security-advisories/2026/WSO2-2025-4800/#solution</span></a> <br>"}], "value": "Follow the instructions given on https://security.docs.wso2.com/en/latest/security-announcements/security-advisories/2026/WSO2-2025-4800/#solution"}], "source": {"advisory": "WSO2-2025-4800", "discovery": "INTERNAL"}, "title": "Cross-Site Request Forgery via Ajax Processor Endpoints in Multiple WSO2 Products Enables Unauthorized Actions", "x_generator": {"engine": "Vulnogram 0.2.0"}, "impacts": [{"capecId": "CAPEC-234", "descriptions": [{"lang": "en", "value": "CAPEC-234 CAPEC-234: Cross-Site Request Forgery"}]}]}, "adp": [{"metrics": [{"other": {"type": "ssvc", "content": {"timestamp": "2026-08-06T12:32:20.578575Z", "id": "CVE-2025-13394", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-08-06T12:32:29.065Z"}}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2025-13394", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "version": "2.0.3", "timestamp": "2026-08-06T12:32:20.578575Z"}}}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-08-06T12:32:26.203Z"}}], "cna": {"title": "Cross-Site Request Forgery via Ajax Processor Endpoints in Multiple WSO2 Products Enables Unauthorized Actions", "source": {"advisory": "WSO2-2025-4800", "discovery": "INTERNAL"}, "impacts": [{"capecId": "CAPEC-234", "descriptions": [{"lang": "en", "value": "CAPEC-234 CAPEC-234: Cross-Site Request Forgery"}]}], "metrics": [{"format": "CVSS", "cvssV3_1": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 5.4, "attackVector": "NETWORK", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L", "integrityImpact": "LOW", "userInteraction": "REQUIRED", "attackComplexity": "LOW", "availabilityImpact": "LOW", "privilegesRequired": "NONE", "confidentialityImpact": "NONE"}}], "affected": [{"vendor": "WSO2", "product": "WSO2 Identity Server", "versions": [{"status": "unknown", "version": "0", "lessThan": "5.10.0", "versionType": "custom"}, {"status": "affected", "version": "5.10.0", "lessThan": "5.10.0.381", "versionType": "custom"}, {"status": "affected", "version": "5.11.0", "lessThan": "5.11.0.428", "versionType": "custom"}, {"status": "affected", "version": "6.0.0", "lessThan": "6.0.0.255", "versionType": "custom"}, {"status": "affected", "version": "6.1.0", "lessThan": "6.1.0.256", "versionType": "custom"}, {"status": "affected", "version": "7.0.0", "lessThan": "7.0.0.133", "versionType": "custom"}, {"status": "affected", "version": "7.1.0", "lessThan": "7.1.0.41", "versionType": "custom"}, {"status": "affected", "version": "7.2.0", "lessThan": "7.2.0.3", "versionType": "custom"}], "defaultStatus": "unaffected"}, {"vendor": "WSO2", "product": "WSO2 API Manager", "versions": [{"status": "unknown", "version": "0", "lessThan": "3.1.0", "versionType": "custom"}, {"status": "affected", "version": "3.1.0", "lessThan": "3.1.0.352", "versionType": "custom"}, {"status": "affected", "version": "3.2.0", "lessThan": "3.2.0.456", "versionType": "custom"}, {"status": "affected", "version": "3.2.1", "lessThan": "3.2.1.75", "versionType": "custom"}, {"status": "affected", "version": "4.0.0", "lessThan": "4.0.0.376", "versionType": "custom"}, {"status": "affected", "version": "4.1.0", "lessThan": "4.1.0.239", "versionType": "custom"}, {"status": "affected", "version": "4.2.0", "lessThan": "4.2.0.179", "versionType": "custom"}, {"status": "affected", "version": "4.3.0", "lessThan": "4.3.0.91", "versionType": "custom"}, {"status": "affected", "version": "4.4.0", "lessThan": "4.4.0.55", "versionType": "custom"}, {"status": "affected", "version": "4.5.0", "lessThan": "4.5.0.38", "versionType": "custom"}, {"status": "affected", "version": "4.6.0", "lessThan": "4.6.0.3", "versionType": "custom"}], "defaultStatus": "unaffected"}, {"vendor": "WSO2", "product": "WSO2 Open Banking IAM", "versions": [{"status": "unknown", "version": "0", "lessThan": "2.0.0", "versionType": "custom"}, {"status": "affected", "version": "2.0.0", "lessThan": "2.0.0.421", "versionType": "custom"}], "defaultStatus": "unaffected"}, {"vendor": "WSO2", "product": "WSO2 Open Banking AM", "versions": [{"status": "unknown", "version": "0", "lessThan": "2.0.0", "versionType": "custom"}, {"status": "affected", "version": "2.0.0", "lessThan": "2.0.0.401", "versionType": "custom"}], "defaultStatus": "unaffected"}, {"vendor": "WSO2", "product": "WSO2 Identity Server as Key Manager", "versions": [{"status": "unknown", "version": "0", "lessThan": "5.10.0", "versionType": "custom"}, {"status": "affected", "version": "5.10.0", "lessThan": "5.10.0.372", "versionType": "custom"}], "defaultStatus": "unaffected"}, {"vendor": "WSO2", "product": "WSO2 API Control Plane", "versions": [{"status": "unknown", "version": "0", "lessThan": "4.5.0", "versionType": "custom"}, {"status": "affected", "version": "4.5.0", "lessThan": "4.5.0.39", "versionType": "custom"}, {"status": "affected", "version": "4.6.0", "lessThan": "4.6.0.3", "versionType": "custom"}], "defaultStatus": "unaffected"}, {"vendor": "WSO2", "product": "WSO2 Universal Gateway", "versions": [{"status": "unknown", "version": "0", "lessThan": "4.5.0", "versionType": "custom"}, {"status": "affected", "version": "4.5.0", "lessThan": "4.5.0.37", "versionType": "custom"}, {"status": "affected", "version": "4.6.0", "lessThan": "4.6.0.3", "versionType": "custom"}], "defaultStatus": "unaffected"}, {"vendor": "WSO2", "product": "WSO2 Traffic Manager", "versions": [{"status": "unknown", "version": "0", "lessThan": "4.5.0", "versionType": "custom"}, {"status": "affected", "version": "4.5.0", "lessThan": "4.5.0.37", "versionType": "custom"}, {"status": "affected", "version": "4.6.0", "lessThan": "4.6.0.3", "versionType": "custom"}], "defaultStatus": "unaffected"}, {"vendor": "WSO2", "product": "WSO2 Enterprise Integrator", "versions": [{"status": "unknown", "version": "0", "lessThan": "6.6.0", "versionType": "custom"}, {"status": "affected", "version": "6.6.0", "lessThan": "6.6.0.227", "versionType": "custom"}], "defaultStatus": "unaffected"}, {"vendor": "WSO2", "product": "WSO2 Carbon Identity Entitlement UI", "versions": [{"status": "affected", "version": "5.17.5", "lessThan": "5.17.5.331", "versionType": "custom"}, {"status": "affected", "version": "5.18.187", "lessThan": "5.18.187.329", "versionType": "custom"}, {"status": "affected", "version": "5.23.8", "lessThan": "5.23.8.210", "versionType": "custom"}, {"status": "affected", "version": "5.25.92", "lessThan": "5.25.92.166", "versionType": "custom"}, {"status": "affected", "version": "7.0.78", "lessThan": "7.0.78.157", "versionType": "custom"}, {"status": "unaffected", "version": "x", "versionType": "custom", "lessThanOrEqual": "*"}], "packageName": "org.wso2.carbon.identity.framework:org.wso2.carbon.identity.entitlement.ui", "defaultStatus": "unknown"}, {"vendor": "WSO2", "product": "WSO2 Carbon Identity Management UI1", "versions": [{"status": "affected", "version": "5.17.5", "lessThan": "5.17.5.330", "versionType": "custom"}, {"status": "affected", "version": "5.17.5", "lessThan": "5.17.5.331", "versionType": "custom"}, {"status": "affected", "version": "5.17.118", "lessThan": "5.17.118.22", "versionType": "custom"}, {"status": "affected", "version": "5.18.187", "lessThan": "5.18.187.328", "versionType": "custom"}, {"status": "affected", "version": "5.18.187", "lessThan": "5.18.187.329", "versionType": "custom"}, {"status": "affected", "version": "5.18.248", "lessThan": "5.18.248.31", "versionType": "custom"}, {"status": "affected", "version": "5.23.8", "lessThan": "5.23.8.210", "versionType": "custom"}, {"status": "affected", "version": "5.24.8", "lessThan": "5.24.8.26", "versionType": "custom"}, {"status": "affected", "version": "5.25.92", "lessThan": "5.25.92.166", "versionType": "custom"}, {"status": "affected", "version": "5.25.705", "lessThan": "5.25.705.21", "versionType": "custom"}, {"status": "affected", "version": "5.25.713", "lessThan": "5.25.713.10", "versionType": "custom"}, {"status": "affected", "version": "5.25.724", "lessThan": "5.25.724.5", "versionType": "custom"}, {"status": "affected", "version": "5.25.736", "lessThan": "5.25.736.1", "versionType": "custom"}, {"status": "affected", "version": "7.0.78", "lessThan": "7.0.78.157", "versionType": "custom"}, {"status": "affected", "version": "7.8.23", "lessThan": "7.8.23.67", "versionType": "custom"}, {"status": "affected", "version": "7.8.586", "lessThan": "7.8.586.7", "versionType": "custom"}, {"status": "unaffected", "version": "x", "versionType": "custom", "lessThanOrEqual": "*"}], "packageName": "org.wso2.carbon.identity.framework:org.wso2.carbon.identity.mgt.ui", "defaultStatus": "unknown"}, {"vendor": "WSO2", "product": "WSO2 Carbon Identity User Store Configuration UI", "versions": [{"status": "affected", "version": "5.14.127", "lessThan": "5.14.127.13", "versionType": "custom"}, {"status": "affected", "version": "5.17.5", "lessThan": "5.17.5.330", "versionType": "custom"}, {"status": "affected", "version": "5.17.5", "lessThan": "5.17.5.331", "versionType": "custom"}, {"status": "affected", "version": "5.17.118", "lessThan": "5.17.118.22", "versionType": "custom"}, {"status": "affected", "version": "5.18.187", "lessThan": "5.18.187.328", "versionType": "custom"}, {"status": "affected", "version": "5.18.187", "lessThan": "5.18.187.329", "versionType": "custom"}, {"status": "affected", "version": "5.18.248", "lessThan": "5.18.248.31", "versionType": "custom"}, {"status": "affected", "version": "5.23.8", "lessThan": "5.23.8.210", "versionType": "custom"}, {"status": "affected", "version": "5.24.8", "lessThan": "5.24.8.26", "versionType": "custom"}, {"status": "affected", "version": "5.25.92", "lessThan": "5.25.92.166", "versionType": "custom"}, {"status": "affected", "version": "5.25.705", "lessThan": "5.25.705.21", "versionType": "custom"}, {"status": "affected", "version": "5.25.713", "lessThan": "5.25.713.10", "versionType": "custom"}, {"status": "affected", "version": "5.25.724", "lessThan": "5.25.724.5", "versionType": "custom"}, {"status": "affected", "version": "5.25.736", "lessThan": "5.25.736.1", "versionType": "custom"}, {"status": "affected", "version": "7.0.78", "lessThan": "7.0.78.157", "versionType": "custom"}, {"status": "affected", "version": "7.8.23", "lessThan": "7.8.23.67", "versionType": "custom"}, {"status": "affected", "version": "7.8.586", "lessThan": "7.8.586.7", "versionType": "custom"}, {"status": "unaffected", "version": "x", "versionType": "custom", "lessThanOrEqual": "*"}], "packageName": "org.wso2.carbon.identity.framework:org.wso2.carbon.identity.user.store.configuration.ui", "defaultStatus": "unknown"}, {"vendor": "WSO2", "product": "WSO2 Carbon Registry Profiles UI", "versions": [{"status": "affected", "version": "4.7.32", "lessThan": "4.7.32.18", "versionType": "custom"}, {"status": "affected", "version": "4.7.33", "lessThan": "4.7.33.16", "versionType": "custom"}, {"status": "affected", "version": "4.8.9", "lessThan": "4.8.9.16", "versionType": "custom"}, {"status": "affected", "version": "4.8.12", "lessThan": "4.8.12.8", "versionType": "custom"}, {"status": "affected", "version": "4.8.24", "lessThan": "4.8.24.6", "versionType": "custom"}, {"status": "affected", "version": "4.8.43", "lessThan": "4.8.43.4", "versionType": "custom"}, {"status": "affected", "version": "4.8.50", "lessThan": "4.8.50.3", "versionType": "custom"}, {"status": "unaffected", "version": "x", "versionType": "custom", "lessThanOrEqual": "*"}], "packageName": "org.wso2.carbon:org.wso2.carbon.registry.profiles.ui", "defaultStatus": "unknown"}, {"vendor": "WSO2", "product": "WSO2 Carbon Registry Properties UI", "versions": [{"status": "affected", "version": "4.7.24", "lessThan": "4.7.24.11", "versionType": "custom"}, {"status": "affected", "version": "4.7.32", "lessThan": "4.7.32.16", "versionType": "custom"}, {"status": "affected", "version": "4.7.32", "lessThan": "4.7.32.18", "versionType": "custom"}, {"status": "affected", "version": "4.7.33", "lessThan": "4.7.33.16", "versionType": "custom"}, {"status": "affected", "version": "4.7.35", "lessThan": "4.7.35.15", "versionType": "custom"}, {"status": "affected", "version": "4.7.39", "lessThan": "4.7.39.12", "versionType": "custom"}, {"status": "affected", "version": "4.7.51", "lessThan": "4.7.51.8", "versionType": "custom"}, {"status": "affected", "version": "4.8.3", "lessThan": "4.8.3.10", "versionType": "custom"}, {"status": "affected", "version": "4.8.9", "lessThan": "4.8.9.16", "versionType": "custom"}, {"status": "affected", "version": "4.8.12", "lessThan": "4.8.12.8", "versionType": "custom"}, {"status": "affected", "version": "4.8.13", "lessThan": "4.8.13.9", "versionType": "custom"}, {"status": "affected", "version": "4.8.24", "lessThan": "4.8.24.6", "versionType": "custom"}, {"status": "affected", "version": "4.8.32", "lessThan": "4.8.32.4", "versionType": "custom"}, {"status": "affected", "version": "4.8.36", "lessThan": "4.8.36.2", "versionType": "custom"}, {"status": "affected", "version": "4.8.43", "lessThan": "4.8.43.2", "versionType": "custom"}, {"status": "affected", "version": "4.8.43", "lessThan": "4.8.43.4", "versionType": "custom"}, {"status": "affected", "version": "4.8.50", "lessThan": "4.8.50.1", "versionType": "custom"}, {"status": "affected", "version": "4.8.50", "lessThan": "4.8.50.3", "versionType": "custom"}, {"status": "unaffected", "version": "x", "versionType": "custom", "lessThanOrEqual": "*"}], "packageName": "org.wso2.carbon:org.wso2.carbon.registry.properties.ui", "defaultStatus": "unknown"}, {"vendor": "WSO2", "product": "WSO2 Carbon Registry Resources UI", "versions": [{"status": "affected", "version": "4.7.24", "lessThan": "4.7.24.11", "versionType": "custom"}, {"status": "affected", "version": "4.7.32", "lessThan": "4.7.32.16", "versionType": "custom"}, {"status": "affected", "version": "4.7.32", "lessThan": "4.7.32.18", "versionType": "custom"}, {"status": "affected", "version": "4.7.33", "lessThan": "4.7.33.16", "versionType": "custom"}, {"status": "affected", "version": "4.7.35", "lessThan": "4.7.35.15", "versionType": "custom"}, {"status": "affected", "version": "4.7.39", "lessThan": "4.7.39.12", "versionType": "custom"}, {"status": "affected", "version": "4.7.51", "lessThan": "4.7.51.8", "versionType": "custom"}, {"status": "affected", "version": "4.8.3", "lessThan": "4.8.3.10", "versionType": "custom"}, {"status": "affected", "version": "4.8.9", "lessThan": "4.8.9.16", "versionType": "custom"}, {"status": "affected", "version": "4.8.12", "lessThan": "4.8.12.8", "versionType": "custom"}, {"status": "affected", "version": "4.8.13", "lessThan": "4.8.13.9", "versionType": "custom"}, {"status": "affected", "version": "4.8.24", "lessThan": "4.8.24.6", "versionType": "custom"}, {"status": "affected", "version": "4.8.32", "lessThan": "4.8.32.4", "versionType": "custom"}, {"status": "affected", "version": "4.8.36", "lessThan": "4.8.36.2", "versionType": "custom"}, {"status": "affected", "version": "4.8.43", "lessThan": "4.8.43.2", "versionType": "custom"}, {"status": "affected", "version": "4.8.43", "lessThan": "4.8.43.4", "versionType": "custom"}, {"status": "affected", "version": "4.8.50", "lessThan": "4.8.50.1", "versionType": "custom"}, {"status": "affected", "version": "4.8.50", "lessThan": "4.8.50.3", "versionType": "custom"}, {"status": "unaffected", "version": "x", "versionType": "custom", "lessThanOrEqual": "*"}], "packageName": "org.wso2.carbon:org.wso2.carbon.registry.resource.ui", "defaultStatus": "unknown"}, {"vendor": "WSO2", "product": "WSO2 Carbon Registry Search UI", "versions": [{"status": "affected", "version": "4.7.24", "lessThan": "4.7.24.11", "versionType": "custom"}, {"status": "affected", "version": "4.7.32", "lessThan": "4.7.32.16", "versionType": "custom"}, {"status": "affected", "version": "4.7.32", "lessThan": "4.7.32.18", "versionType": "custom"}, {"status": "affected", "version": "4.7.33", "lessThan": "4.7.33.16", "versionType": "custom"}, {"status": "affected", "version": "4.7.35", "lessThan": "4.7.35.15", "versionType": "custom"}, {"status": "affected", "version": "4.7.39", "lessThan": "4.7.39.12", "versionType": "custom"}, {"status": "affected", "version": "4.7.51", "lessThan": "4.7.51.8", "versionType": "custom"}, {"status": "affected", "version": "4.8.3", "lessThan": "4.8.3.10", "versionType": "custom"}, {"status": "affected", "version": "4.8.9", "lessThan": "4.8.9.16", "versionType": "custom"}, {"status": "affected", "version": "4.8.12", "lessThan": "4.8.12.8", "versionType": "custom"}, {"status": "affected", "version": "4.8.13", "lessThan": "4.8.13.9", "versionType": "custom"}, {"status": "affected", "version": "4.8.24", "lessThan": "4.8.24.6", "versionType": "custom"}, {"status": "unaffected", "version": "x", "versionType": "custom", "lessThanOrEqual": "*"}], "packageName": "org.wso2.carbon:org.wso2.carbon.registry.search.ui", "defaultStatus": "unknown"}, {"vendor": "WSO2", "product": "WSO2 Stratos User Interface For Tenant CRUD Operations", "versions": [{"status": "affected", "version": "4.8.1", "lessThan": "4.8.1.6", "versionType": "custom"}, {"status": "affected", "version": "4.8.7", "lessThan": "4.8.7.3", "versionType": "custom"}, {"status": "affected", "version": "4.9.8", "lessThan": "4.9.8.7", "versionType": "custom"}, {"status": "affected", "version": "4.9.10", "lessThan": "4.9.10.7", "versionType": "custom"}, {"status": "affected", "version": "4.9.10", "lessThan": "4.9.10.8", "versionType": "custom"}, {"status": "affected", "version": "4.9.20", "lessThan": "4.9.20.5", "versionType": "custom"}, {"status": "affected", "version": "4.9.27", "lessThan": "4.9.27.1", "versionType": "custom"}, {"status": "affected", "version": "4.9.31", "lessThan": "4.9.31.1", "versionType": "custom"}, {"status": "affected", "version": "4.9.34", "lessThan": "4.9.34.1", "versionType": "custom"}, {"status": "affected", "version": "4.9.42", "lessThan": "4.9.42.1", "versionType": "custom"}, {"status": "affected", "version": "4.11.0", "lessThan": "4.11.0.7", "versionType": "custom"}, {"status": "affected", "version": "4.11.19", "lessThan": "4.11.19.4", "versionType": "custom"}, {"status": "affected", "version": "4.11.34", "lessThan": "4.11.34.3", "versionType": "custom"}, {"status": "affected", "version": "4.11.45", "lessThan": "4.11.45.1", "versionType": "custom"}, {"status": "unaffected", "version": "x", "versionType": "custom", "lessThanOrEqual": "*"}], "packageName": "org.wso2.carbon:org.wso2.carbon.tenant.mgt.ui", "defaultStatus": "unknown"}, {"vendor": "WSO2", "product": "WSO2 Stratos SSO Redirector UI Component", "versions": [{"status": "affected", "version": "4.8.1", "lessThan": "4.8.1.6", "versionType": "custom"}, {"status": "unaffected", "version": "x", "versionType": "custom", "lessThanOrEqual": "*"}], "packageName": "org.wso2.carbon.multitenancy:org.wso2.carbon.tenant.sso.redirector.ui", "defaultStatus": "unknown"}, {"vendor": "WSO2", "product": "WSO2 Carbon Email Verification UI", "versions": [{"status": "affected", "version": "4.7.19", "lessThan": "4.7.19.14", "versionType": "custom"}, {"status": "unaffected", "version": "x", "versionType": "custom", "lessThanOrEqual": "*"}], "packageName": "org.wso2.carbon:org.wso2.carbon.email.verification.ui", "defaultStatus": "unknown"}, {"vendor": "WSO2", "product": "WSO2 Carbon Event Simulator UI", "versions": [{"status": "affected", "version": "2.2.11", "lessThan": "2.2.11.1", "versionType": "custom"}, {"status": "affected", "version": "2.2.14", "lessThan": "2.2.14.11", "versionType": "custom"}, {"status": "affected", "version": "2.2.14", "lessThan": "2.2.14.12", "versionType": "custom"}, {"status": "affected", "version": "2.2.17", "lessThan": "2.2.17.5", "versionType": "custom"}, {"status": "affected", "version": "2.3.1", "lessThan": "2.3.1.4", "versionType": "custom"}, {"status": "affected", "version": "2.3.5", "lessThan": "2.3.5.6", "versionType": "custom"}, {"status": "unaffected", "version": "x", "versionType": "custom", "lessThanOrEqual": "*"}], "packageName": "org.wso2.carbon:org.wso2.carbon.event.simulator.ui", "defaultStatus": "unknown"}, {"vendor": "WSO2", "product": "WSO2 Carbon Execution Manager UI", "versions": [{"status": "affected", "version": "5.2.24", "lessThan": "5.2.24.10", "versionType": "custom"}, {"status": "affected", "version": "5.2.26", "lessThan": "5.2.26.22", "versionType": "custom"}, {"status": "affected", "version": "5.2.34", "lessThan": "5.2.34.12", "versionType": "custom"}, {"status": "affected", "version": "5.2.41", "lessThan": "5.2.41.7", "versionType": "custom"}, {"status": "affected", "version": "5.2.57", "lessThan": "5.2.57.10", "versionType": "custom"}, {"status": "affected", "version": "5.3.5", "lessThan": "5.3.5.9", "versionType": "custom"}, {"status": "unaffected", "version": "x", "versionType": "custom", "lessThanOrEqual": "*"}], "packageName": "org.wso2.carbon.analytics-common:org.wso2.carbon.event.template.manager.ui", "defaultStatus": "unknown"}, {"vendor": "WSO2", "product": "WSO2 Carbon Governance Custom Lifecycle Checklist UI", "versions": [{"status": "affected", "version": "4.8.14", "lessThan": "4.8.14.4", "versionType": "custom"}, {"status": "affected", "version": "4.8.19", "lessThan": "4.8.19.8", "versionType": "custom"}, {"status": "affected", "version": "4.8.21", "lessThan": "4.8.21.10", "versionType": "custom"}, {"status": "affected", "version": "4.8.28", "lessThan": "4.8.28.4", "versionType": "custom"}, {"status": "affected", "version": "4.8.30", "lessThan": "4.8.30.6", "versionType": "custom"}, {"status": "affected", "version": "4.8.32", "lessThan": "4.8.32.4", "versionType": "custom"}, {"status": "unaffected", "version": "x", "versionType": "custom", "lessThanOrEqual": "*"}], "packageName": "org.wso2.carbon.governance:org.wso2.carbon.governance.custom.lifecycles.checklist.ui", "defaultStatus": "unknown"}, {"vendor": "WSO2", "product": "WSO2 Carbon Governance Generic Artifact User Interface", "versions": [{"status": "affected", "version": "4.8.14", "lessThan": "4.8.14.4", "versionType": "custom"}, {"status": "affected", "version": "4.8.19", "lessThan": "4.8.19.8", "versionType": "custom"}, {"status": "affected", "version": "4.8.21", "lessThan": "4.8.21.10", "versionType": "custom"}, {"status": "affected", "version": "4.8.28", "lessThan": "4.8.28.4", "versionType": "custom"}, {"status": "affected", "version": "4.8.30", "lessThan": "4.8.30.6", "versionType": "custom"}, {"status": "affected", "version": "4.8.32", "lessThan": "4.8.32.4", "versionType": "custom"}, {"status": "affected", "version": "4.8.33", "lessThan": "4.8.33.4", "versionType": "custom"}, {"status": "affected", "version": "4.8.34", "lessThan": "4.8.34.5", "versionType": "custom"}, {"status": "affected", "version": "4.8.37", "lessThan": "4.8.37.4", "versionType": "custom"}, {"status": "unaffected", "version": "x", "versionType": "custom", "lessThanOrEqual": "*"}], "packageName": "org.wso2.carbon.governance:org.wso2.carbon.governance.generic.ui", "defaultStatus": "unknown"}, {"vendor": "WSO2", "product": "WSO2 Carbon Governance Life Cycles User Interface", "versions": [{"status": "affected", "version": "4.8.14", "lessThan": "4.8.14.4", "versionType": "custom"}, {"status": "affected", "version": "4.8.19", "lessThan": "4.8.19.8", "versionType": "custom"}, {"status": "affected", "version": "4.8.21", "lessThan": "4.8.21.10", "versionType": "custom"}, {"status": "affected", "version": "4.8.28", "lessThan": "4.8.28.4", "versionType": "custom"}, {"status": "affected", "version": "4.8.30", "lessThan": "4.8.30.6", "versionType": "custom"}, {"status": "affected", "version": "4.8.32", "lessThan": "4.8.32.4", "versionType": "custom"}, {"status": "unaffected", "version": "x", "versionType": "custom", "lessThanOrEqual": "*"}], "packageName": "org.wso2.carbon.governance:org.wso2.carbon.governance.lcm.ui", "defaultStatus": "unknown"}, {"vendor": "WSO2", "product": "WSO2 Carbon Governance WSDL Tool UI", "versions": [{"status": "affected", "version": "4.8.14", "lessThan": "4.8.14.4", "versionType": "custom"}, {"status": "affected", "version": "4.8.19", "lessThan": "4.8.19.8", "versionType": "custom"}, {"status": "affected", "version": "4.8.21", "lessThan": "4.8.21.10", "versionType": "custom"}, {"status": "affected", "version": "4.8.28", "lessThan": "4.8.28.4", "versionType": "custom"}, {"status": "affected", "version": "4.8.30", "lessThan": "4.8.30.6", "versionType": "custom"}, {"status": "affected", "version": "4.8.32", "lessThan": "4.8.32.4", "versionType": "custom"}, {"status": "affected", "version": "4.8.33", "lessThan": "4.8.33.4", "versionType": "custom"}, {"status": "affected", "version": "4.8.34", "lessThan": "4.8.34.5", "versionType": "custom"}, {"status": "affected", "version": "4.8.37", "lessThan": "4.8.37.4", "versionType": "custom"}, {"status": "unaffected", "version": "x", "versionType": "custom", "lessThanOrEqual": "*"}], "packageName": "org.wso2.carbon:org.wso2.carbon.governance.wsdltool.ui", "defaultStatus": "unknown"}, {"vendor": "WSO2", "product": "WSO2 Carbon New Data Sources UI", "versions": [{"status": "affected", "version": "4.7.19", "lessThan": "4.7.19.13", "versionType": "custom"}, {"status": "affected", "version": "4.7.24", "lessThan": "4.7.24.5", "versionType": "custom"}, {"status": "affected", "version": "4.7.32", "lessThan": "4.7.32.10", "versionType": "custom"}, {"status": "affected", "version": "4.7.35", "lessThan": "4.7.35.13", "versionType": "custom"}, {"status": "affected", "version": "4.7.49", "lessThan": "4.7.49.7", "versionType": "custom"}, {"status": "affected", "version": "4.7.52", "lessThan": "4.7.52.5", "versionType": "custom"}, {"status": "affected", "version": "4.9.2", "lessThan": "4.9.2.8", "versionType": "custom"}, {"status": "affected", "version": "4.9.11", "lessThan": "4.9.11.2", "versionType": "custom"}, {"status": "affected", "version": "4.9.18", "lessThan": "4.9.18.1", "versionType": "custom"}, {"status": "unaffected", "version": "x", "versionType": "custom", "lessThanOrEqual": "*"}], "packageName": "org.wso2.carbon.commons:org.wso2.carbon.ndatasource.ui", "defaultStatus": "unknown"}, {"vendor": "WSO2", "product": "WSO2 Carbon Registry Info UI2", "versions": [{"status": "affected", "version": "4.7.32", "lessThan": "4.7.32.16", "versionType": "custom"}, {"status": "affected", "version": "4.7.35", "lessThan": "4.7.35.15", "versionType": "custom"}, {"status": "affected", "version": "4.7.39", "lessThan": "4.7.39.12", "versionType": "custom"}, {"status": "affected", "version": "4.7.51", "lessThan": "4.7.51.8", "versionType": "custom"}, {"status": "affected", "version": "4.8.3", "lessThan": "4.8.3.10", "versionType": "custom"}, {"status": "affected", "version": "4.8.13", "lessThan": "4.8.13.9", "versionType": "custom"}, {"status": "affected", "version": "4.8.32", "lessThan": "4.8.32.4", "versionType": "custom"}, {"status": "affected", "version": "4.8.36", "lessThan": "4.8.36.2", "versionType": "custom"}, {"status": "affected", "version": "4.8.43", "lessThan": "4.8.43.2", "versionType": "custom"}, {"status": "affected", "version": "4.8.50", "lessThan": "4.8.50.1", "versionType": "custom"}, {"status": "unaffected", "version": "x", "versionType": "custom", "lessThanOrEqual": "*"}], "packageName": "org.wso2.carbon:org.wso2.carbon.registry.info.ui", "defaultStatus": "unknown"}, {"vendor": "WSO2", "product": "WSO2 Carbon Registry Relations UI", "versions": [{"status": "affected", "version": "4.7.24", "lessThan": "4.7.24.11", "versionType": "custom"}, {"status": "affected", "version": "4.7.32", "lessThan": "4.7.32.16", "versionType": "custom"}, {"status": "affected", "version": "4.7.35", "lessThan": "4.7.35.15", "versionType": "custom"}, {"status": "affected", "version": "4.7.39", "lessThan": "4.7.39.12", "versionType": "custom"}, {"status": "affected", "version": "4.7.51", "lessThan": "4.7.51.8", "versionType": "custom"}, {"status": "affected", "version": "4.8.3", "lessThan": "4.8.3.10", "versionType": "custom"}, {"status": "affected", "version": "4.8.13", "lessThan": "4.8.13.9", "versionType": "custom"}, {"status": "affected", "version": "4.8.32", "lessThan": "4.8.32.4", "versionType": "custom"}, {"status": "affected", "version": "4.8.36", "lessThan": "4.8.36.2", "versionType": "custom"}, {"status": "affected", "version": "4.8.43", "lessThan": "4.8.43.2", "versionType": "custom"}, {"status": "affected", "version": "4.8.50", "lessThan": "4.8.50.1", "versionType": "custom"}, {"status": "unaffected", "version": "x", "versionType": "custom", "lessThanOrEqual": "*"}], "packageName": "org.wso2.carbon:org.wso2.carbon.registry.relations.ui", "defaultStatus": "unknown"}, {"vendor": "WSO2", "product": "WSO2 Carbon Registry Indexing", "versions": [{"status": "affected", "version": "4.7", "lessThan": "4.7.24", "versionType": "custom"}, {"status": "unaffected", "version": "x", "versionType": "custom", "lessThanOrEqual": "*"}], "packageName": "org.wso2.carbon.registry:org.wso2.carbon.registry.indexing", "defaultStatus": "unknown"}, {"vendor": "WSO2", "product": "WSO2 Carbon Security UI", "versions": [{"status": "affected", "version": "5.14", "lessThan": "5.14.127", "versionType": "custom"}, {"status": "unaffected", "version": "x", "versionType": "custom", "lessThanOrEqual": "*"}], "packageName": "org.wso2.carbon:org.wso2.carbon.security.mgt.ui", "defaultStatus": "unknown"}, {"vendor": "WSO2", "product": "WSO2 Carbon Component Andes Event UI", "versions": [{"status": "affected", "version": "3.3.12", "lessThan": "3.3.12.3", "versionType": "custom"}, {"status": "unaffected", "version": "x", "versionType": "custom", "lessThanOrEqual": "*"}], "packageName": "org.wso2.carbon.messaging:org.wso2.carbon.andes.event.ui", "defaultStatus": "unknown"}, {"vendor": "WSO2", "product": "WSO2 Carbon Component Andes UI1", "versions": [{"status": "affected", "version": "3.3.12", "lessThan": "3.3.12.3", "versionType": "custom"}, {"status": "unaffected", "version": "x", "versionType": "custom", "lessThanOrEqual": "*"}], "packageName": "org.wso2.carbon.messaging:org.wso2.carbon.andes.ui", "defaultStatus": "unknown"}, {"vendor": "WSO2", "product": "WSO2 Carbon HL7 Business Messaging Store UI", "versions": [{"status": "affected", "version": "4.7.30", "lessThan": "4.7.30.53", "versionType": "custom"}, {"status": "unaffected", "version": "x", "versionType": "custom", "lessThanOrEqual": "*"}], "packageName": "org.wso2.carbon.mediation:org.wso2.carbon.business.messaging.hl7.store.ui", "defaultStatus": "unknown"}, {"vendor": "WSO2", "product": "WSO2 Carbon Endpoint Editor UI", "versions": [{"status": "affected", "version": "4.7.30", "lessThan": "4.7.30.53", "versionType": "custom"}, {"status": "unaffected", "version": "x", "versionType": "custom", "lessThanOrEqual": "*"}], "packageName": "org.wso2.carbonorg.wso2.carbon.endpoint.ui", "defaultStatus": "unknown"}, {"vendor": "WSO2", "product": "WSO2 Carbon Publish Event Mediator Configuration UI", "versions": [{"status": "affected", "version": "4.7.30", "lessThan": "4.7.30.53", "versionType": "custom"}, {"status": "unaffected", "version": "x", "versionType": "custom", "lessThanOrEqual": "*"}], "packageName": "org.wso2.carbon.mediationorg.wso2.carbon.event.sink.config.ui", "defaultStatus": "unknown"}, {"vendor": "WSO2", "product": "WSO2 Carbon Eventing UI", "versions": [{"status": "affected", "version": "4.7.19", "lessThan": "4.7.19.13", "versionType": "custom"}, {"status": "unaffected", "version": "x", "versionType": "custom", "lessThanOrEqual": "*"}], "packageName": "org.wso2.carbon.commons:org.wso2.carbon.event.ui", "defaultStatus": "unknown"}, {"vendor": "WSO2", "product": "WSO2 Carbon HumanTask UI", "versions": [{"status": "affected", "version": "4.5.27", "lessThan": "4.5.27.10", "versionType": "custom"}, {"status": "unaffected", "version": "x", "versionType": "custom", "lessThanOrEqual": "*"}], "packageName": "org.wso2.carbon.business-process:org.wso2.carbon.humantask.ui", "defaultStatus": "unknown"}, {"vendor": "WSO2", "product": "WSO2 Carbon Logging UI", "versions": [{"status": "affected", "version": "4.7.19", "lessThan": "4.7.19.13", "versionType": "custom"}, {"status": "affected", "version": "4.7.24", "lessThan": "4.7.24.5", "versionType": "custom"}, {"status": "affected", "version": "4.7.32", "lessThan": "4.7.32.10", "versionType": "custom"}, {"status": "affected", "version": "4.7.52", "lessThan": "4.7.52.5", "versionType": "custom"}, {"status": "unaffected", "version": "x", "versionType": "custom", "lessThanOrEqual": "*"}], "packageName": "org.wso2.carbon:org.wso2.carbon.logging.admin.ui", "defaultStatus": "unknown"}, {"vendor": "WSO2", "product": "WSO2 Carbon Template Editor UI", "versions": [{"status": "affected", "version": "4.7.30", "lessThan": "4.7.30.53", "versionType": "custom"}, {"status": "unaffected", "version": "x", "versionType": "custom", "lessThanOrEqual": "*"}], "packageName": "org.wso2.carbon.mediation:org.wso2.carbon.mediation.templates.ui", "defaultStatus": "unknown"}, {"vendor": "WSO2", "product": "WSO2 Carbon Command Mediator UI", "versions": [{"status": "affected", "version": "4.7.30", "lessThan": "4.7.30.53", "versionType": "custom"}, {"status": "unaffected", "version": "x", "versionType": "custom", "lessThanOrEqual": "*"}], "packageName": "org.wso2.carbon:org.wso2.carbon.mediator.command.ui", "defaultStatus": "unknown"}, {"vendor": "WSO2", "product": "WSO2 Carbon Rule Mediator UI", "versions": [{"status": "affected", "version": "4.7.30", "lessThan": "4.7.30.53", "versionType": "custom"}, {"status": "unaffected", "version": "x", "versionType": "custom", "lessThanOrEqual": "*"}], "packageName": "org.wso2.carbon:org.wso2.carbon.mediator.rule.ui", "defaultStatus": "unknown"}, {"vendor": "WSO2", "product": "WSO2 Carbon Throttle Mediator UI", "versions": [{"status": "affected", "version": "4.7.30", "lessThan": "4.7.30.53", "versionType": "custom"}, {"status": "unaffected", "version": "x", "versionType": "custom", "lessThanOrEqual": "*"}], "packageName": "org.wso2.carbon:org.wso2.carbon.mediator.throttle.ui", "defaultStatus": "unknown"}, {"vendor": "WSO2", "product": "WSO2 Carbon Tasks Core", "versions": [{"status": "affected", "version": "4.7.19", "lessThan": "4.7.19.13", "versionType": "custom"}, {"status": "unaffected", "version": "x", "versionType": "custom", "lessThanOrEqual": "*"}], "packageName": "org.wso2.carbon:org.wso2.carbon.ntask.core", "defaultStatus": "unknown"}, {"vendor": "WSO2", "product": "WSO2 Carbon Rest API Admin UI", "versions": [{"status": "affected", "version": "4.7.30", "lessThan": "4.7.30.53", "versionType": "custom"}, {"status": "unaffected", "version": "x", "versionType": "custom", "lessThanOrEqual": "*"}], "packageName": "org.wso2.carbon:org.wso2.carbon.rest.api.ui", "defaultStatus": "unknown"}, {"vendor": "WSO2", "product": "WSO2 Carbon Sequence Editor UI", "versions": [{"status": "affected", "version": "4.7.30", "lessThan": "4.7.30.53", "versionType": "custom"}, {"status": "unaffected", "version": "x", "versionType": "custom", "lessThanOrEqual": "*"}], "packageName": "org.wso2.carbon:org.wso2.carbon.sequences.ui", "defaultStatus": "unknown"}, {"vendor": "WSO2", "product": "WSO2 Carbon Task UI", "versions": [{"status": "affected", "version": "4.7.30", "lessThan": "4.7.30.53", "versionType": "custom"}, {"status": "unaffected", "version": "x", "versionType": "custom", "lessThanOrEqual": "*"}], "packageName": "org.wso2.carbon:org.wso2.carbon.task.ui", "defaultStatus": "unknown"}, {"vendor": "WSO2", "product": "WSO2 Carbon Governance", "versions": [{"status": "affected", "version": "4.8.37", "lessThan": "4.8.37.4", "versionType": "custom"}, {"status": "unaffected", "version": "x", "versionType": "custom", "lessThanOrEqual": "*"}], "packageName": "org.wso2.carbon.governance:org.wso2.carbon.governance.api", "defaultStatus": "unknown"}], "solutions": [{"lang": "en", "value": "Follow the instructions given on https://security.docs.wso2.com/en/latest/security-announcements/security-advisories/2026/WSO2-2025-4800/#solution", "supportingMedia": [{"type": "text/html", "value": "<span style=\"background-color: transparent;\">Follow the instructions given on </span><a target=\"_blank\" rel=\"nofollow\" href=\"https://security.docs.wso2.com/en/latest/security-announcements/security-advisories/2026/WSO2-2025-4800/#solution\"><span style=\"background-color: transparent;\">https://security.docs.wso2.com/en/latest/security-announcements/security-advisories/2026/WSO2-2025-4800/#solution</span></a> <br>", "base64": false}]}], "references": [{"url": "https://security.docs.wso2.com/en/latest/security-announcements/security-advisories/2026/WSO2-2025-4800/", "tags": ["vendor-advisory"]}], "x_generator": {"engine": "Vulnogram 0.2.0"}, "descriptions": [{"lang": "en", "value": "The Ajax processor within the Carbon console fails to adequately protect state-changing operations from Cross-Site Request Forgery (CSRF) attacks. Specifically, it utilizes the HTTP GET method for these operations, and while the SameSite=Lax cookie attribute is employed for mitigation, this mechanism is bypassed as it permits cookies to be sent with cross-origin top-level navigation requests, including GET requests. This allows an attacker to trick an authenticated user's browser into unknowingly executing unintended actions.\n\nAn attacker can exploit this vulnerability to perform unauthorized state-altering requests on behalf of authenticated users. This could lead to consequences such as data modification, account changes, or other actions that could result in data compromise or loss of user control over their account. However, this attack is only feasible if the Carbon console and related services are exposed to the public internet, which is not recommended according to WSO2's security guidelines.", "supportingMedia": [{"type": "text/html", "value": "The Ajax processor within the Carbon console fails to adequately protect state-changing operations from Cross-Site Request Forgery (CSRF) attacks. Specifically, it utilizes the HTTP GET method for these operations, and while the SameSite=Lax cookie attribute is employed for mitigation, this mechanism is bypassed as it permits cookies to be sent with cross-origin top-level navigation requests, including GET requests. This allows an attacker to trick an authenticated user's browser into unknowingly executing unintended actions.\n\nAn attacker can exploit this vulnerability to perform unauthorized state-altering requests on behalf of authenticated users. This could lead to consequences such as data modification, account changes, or other actions that could result in data compromise or loss of user control over their account. However, this attack is only feasible if the Carbon console and related services are exposed to the public internet, which is not recommended according to WSO2's security guidelines.", "base64": false}]}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-352", "description": "CWE-352: Cross-Site Request Forgery (CSRF)"}]}], "providerMetadata": {"orgId": "ed10eef1-636d-4fbe-9993-6890dfa878f8", "shortName": "WSO2", "dateUpdated": "2026-08-06T07:33:17.645Z"}}}, "cveMetadata": {"cveId": "CVE-2025-13394", "state": "PUBLISHED", "dateUpdated": "2026-08-06T12:32:29.065Z", "dateReserved": "2025-11-19T06:17:35.259Z", "assignerOrgId": "ed10eef1-636d-4fbe-9993-6890dfa878f8", "datePublished": "2026-08-06T07:33:17.645Z", "assignerShortName": "WSO2"}, "dataVersion": "5.2"}

{}

{}

{"affected": [{"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "[4.5.0,4.5.0.39)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "[4.6.0,4.6.0.3)"}}], "enrichment": {"confidence": 100.0, "confidence_source": "matching", "scores": [{"score": 100.0, "source": "matching"}]}, "original": {"product": "WSO2 API Control Plane", "source": "cna", "vendor": "WSO2"}, "product": "wso2_api_control_plane", "vendor": "wso2"}, {"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "[3.1.0,3.1.0.352)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "[3.2.0,3.2.0.456)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "[3.2.1,3.2.1.75)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "[4.0.0,4.0.0.376)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "[4.1.0,4.1.0.239)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "[4.2.0,4.2.0.179)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "[4.3.0,4.3.0.91)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "[4.4.0,4.4.0.55)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "[4.5.0,4.5.0.38)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "[4.6.0,4.6.0.3)"}}], "enrichment": {"confidence": 100.0, "confidence_source": "matching", "scores": [{"score": 100.0, "source": "matching"}]}, "original": {"product": "WSO2 API Manager", "source": "cna", "vendor": "WSO2"}, "product": "wso2_api_manager", "vendor": "wso2"}, {"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "[4.7.30,4.7.30.53)"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "generic", "value": "[0,*]"}}], "enrichment": {"confidence": 100.0, "confidence_source": "cna", "scores": [{"score": 100.0, "source": "cna"}]}, "original": {"product": "WSO2 Carbon Command Mediator UI", "source": "cna", "vendor": "WSO2"}, "product": "wso2_carbon_command_mediator_ui", "vendor": "wso2"}, {"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "[3.3.12,3.3.12)"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "generic", "value": "[0,*]"}}], "enrichment": {"confidence": 100.0, "confidence_source": "cna", "scores": [{"score": 100.0, "source": "cna"}]}, "original": {"product": "WSO2 Carbon Component Andes Event UI", "source": "cna", "vendor": "WSO2"}, "product": "wso2_carbon_component_andes_event_ui", "vendor": "wso2"}, {"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "[3.3.12,3.3.12)"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "generic", "value": "[0,*]"}}], "enrichment": {"confidence": 100.0, "confidence_source": "cna", "scores": [{"score": 100.0, "source": "cna"}]}, "original": {"product": "WSO2 Carbon Component Andes UI1", "source": "cna", "vendor": "WSO2"}, "product": "wso2_carbon_component_andes_ui1", "vendor": "wso2"}, {"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "[4.2.2,4.2.2.41)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "[4.3.0,4.3.0.30)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "[4.4.0,4.4.0.18)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "[4.5.0,4.5.0.9)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "[4.6.0,4.6.0.6)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "[4.7.0,4.7.0.8)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "[4.8.0,4.8.0.11)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "[4.9.0,4.9.0.7)"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "generic", "value": "[0,*]"}}], "enrichment": {"confidence": 100.0, "confidence_source": "cna", "scores": [{"score": 100.0, "source": "cna"}]}, "original": {"product": "WSO2 Carbon Email Verification UI", "source": "cna", "vendor": "WSO2"}, "product": "wso2_carbon_email_verification_ui", "vendor": "wso2"}, {"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "[4.7.30,4.7.30.53)"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "generic", "value": "[0,*]"}}], "enrichment": {"confidence": 100.0, "confidence_source": "cna", "scores": [{"score": 100.0, "source": "cna"}]}, "original": {"product": "WSO2 Carbon Endpoint Editor UI", "source": "cna", "vendor": "WSO2"}, "product": "wso2_carbon_endpoint_editor_ui", "vendor": "wso2"}, {"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "[4.8.0,4.8.0.8)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "[4.9.0,4.9.0.9)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "[5.0.0,5.0.0.10)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "[5.1.0,5.1.0.8)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "[5.2.0,5.2.0.3)"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "generic", "value": "[0,*]"}}], "enrichment": {"confidence": 100.0, "confidence_source": "cna", "scores": [{"score": 100.0, "source": "cna"}]}, "original": {"product": "WSO2 Carbon Event Simulator UI", "source": "cna", "vendor": "WSO2"}, "product": "wso2_carbon_event_simulator_ui", "vendor": "wso2"}, {"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "[4.7.19,4.7.19.13)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "[4.7.24,4.7.24.5)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "[4.7.32,4.7.32.10)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "[4.7.35,4.7.35.13)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "[4.7.49,4.7.49.7)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "[4.7.52,4.7.52.5)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "[4.9.2,4.9.2.8)"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "generic", "value": "[0,*]"}}], "enrichment": {"confidence": 100.0, "confidence_source": "cna", "scores": [{"score": 100.0, "source": "cna"}]}, "original": {"product": "WSO2 Carbon Eventing UI", "source": "cna", "vendor": "WSO2"}, "product": "wso2_carbon_eventing_ui", "vendor": "wso2"}, {"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "[4.9.0,4.9.0.2)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "[4.9.1,4.9.1.3)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "[4.9.2,4.9.2.5)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "[4.9.3,4.9.3.7)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "[5.0.0,5.0.0.4)"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "generic", "value": "[0,*]"}}], "enrichment": {"confidence": 100.0, "confidence_source": "cna", "scores": [{"score": 100.0, "source": "cna"}]}, "original": {"product": "WSO2 Carbon Execution Manager UI", "source": "cna", "vendor": "WSO2"}, "product": "wso2_carbon_execution_manager_ui", "vendor": "wso2"}, {"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "[4.8.37,4.8.37.4)"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "generic", "value": "[0,*]"}}], "enrichment": {"confidence": 100.0, "confidence_source": "cna", "scores": [{"score": 100.0, "source": "cna"}]}, "original": {"product": "WSO2 Carbon Governance", "source": "cna", "vendor": "WSO2"}, "product": "wso2_carbon_governance", "vendor": "wso2"}, {"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "[4.1.0,4.1.0.14)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "[4.2.0,4.2.0.9)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "[4.3.0,4.3.0.1)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "[4.4.0,4.4.0.6)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "[4.5.0,4.5.0.10)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "[4.6.0,4.6.0.11)"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "generic", "value": "[0,*]"}}], "enrichment": {"confidence": 100.0, "confidence_source": "cna", "scores": [{"score": 100.0, "source": "cna"}]}, "original": {"product": "WSO2 Carbon Governance Custom Lifecycle Checklist UI", "source": "cna", "vendor": "WSO2"}, "product": "wso2_carbon_governance_custom_lifecycle_checklist_ui", "vendor": "wso2"}, {"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "[4.2.0,4.2.0.11)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "[4.3.0,4.3.0.13)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "[4.4.0,4.4.0.17)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "[4.5.0,4.5.0.21)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "[4.6.0,4.6.0.27)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "[4.7.0,4.7.0.34)"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "generic", "value": "[0,*]"}}], "enrichment": {"confidence": 100.0, "confidence_source": "cna", "scores": [{"score": 100.0, "source": "cna"}]}, "original": {"product": "WSO2 Carbon Governance Generic Artifact User Interface", "source": "cna", "vendor": "WSO2"}, "product": "wso2_carbon_governance_generic_artifact_user_interface", "vendor": "wso2"}, {"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "[4.1.0,4.1.0.16)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "[4.2.0,4.2.0.27)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "[4.3.0,4.3.0.16)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "[4.4.0,4.4.0.6)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "[4.5.0,4.5.0.20)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "[4.6.0,4.6.0.27)"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "generic", "value": "[0,*]"}}], "enrichment": {"confidence": 100.0, "confidence_source": "cna", "scores": [{"score": 100.0, "source": "cna"}]}, "original": {"product": "WSO2 Carbon Governance Life Cycles User Interface", "source": "cna", "vendor": "WSO2"}, "product": "wso2_carbon_governance_life_cycles_user_interface", "vendor": "wso2"}, {"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "[4.1.0,4.1.0.14)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "[4.2.0,4.2.0.222)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "[4.3.0,4.3.0.16)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "[4.4.0,4.4.0.4)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "[4.5.0,4.5.0.2)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "[4.6.0,4.6.0.10)"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "generic", "value": "[0,*]"}}], "enrichment": {"confidence": 100.0, "confidence_source": "cna", "scores": [{"score": 100.0, "source": "cna"}]}, "original": {"product": "WSO2 Carbon Governance WSDL Tool UI", "source": "cna", "vendor": "WSO2"}, "product": "wso2_carbon_governance_wsdl_tool_ui", "vendor": "wso2"}, {"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "[4.7.30,4.7.30.53)"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "generic", "value": "[0,*]"}}], "enrichment": {"confidence": 100.0, "confidence_source": "cna", "scores": [{"score": 100.0, "source": "cna"}]}, "original": {"product": "WSO2 Carbon HL7 Business Messaging Store UI", "source": "cna", "vendor": "WSO2"}, "product": "wso2_carbon_hl7_business_messaging_store_ui", "vendor": "wso2"}, {"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "[4.5.27,4.5.27.10)"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "generic", "value": "[0,*]"}}], "enrichment": {"confidence": 100.0, "confidence_source": "cna", "scores": [{"score": 100.0, "source": "cna"}]}, "original": {"product": "WSO2 Carbon HumanTask UI", "source": "cna", "vendor": "WSO2"}, "product": "wso2_carbon_humantask_ui", "vendor": "wso2"}, {"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "[5.17.5,5.17.5.331)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "[5.18.187,5.18.187.329)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "[5.23.8,5.23.8.210)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "[5.25.92,5.25.92.166)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "[7.0.78,7.0.78.157)"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "generic", "value": "[0,*]"}}], "enrichment": {"confidence": 100.0, "confidence_source": "cna", "scores": [{"score": 100.0, "source": "cna"}]}, "original": {"product": "WSO2 Carbon Identity Entitlement UI", "source": "cna", "vendor": "WSO2"}, "product": "wso2_carbon_identity_entitlement_ui", "vendor": "wso2"}, {"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "[5.17.5,5.17.5.330)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "[5.17.5,5.17.5.331)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "[5.17.118,5.17.118.22)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "[5.18.187,5.18.187.328)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "[5.18.187,5.18.187.329)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "[5.18.248,5.18.248.31)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "[5.23.8,5.23.8.210)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "[5.24.8,5.24.8.26)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "[5.25.92,5.25.92.166)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "[5.25.705,5.25.705.21)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "[5.25.713,5.25.713.10)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "[5.25.724,5.25.724.5)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "[5.25.736,5.25.736.1)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "[7.0.78,7.0.78.157)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "[7.8.23,7.8.23.67)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "[7.8.586,7.8.586.7)"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "generic", "value": "[0,*]"}}], "enrichment": {"confidence": 100.0, "confidence_source": "cna", "scores": [{"score": 100.0, "source": "cna"}]}, "original": {"product": "WSO2 Carbon Identity Management UI1", "source": "cna", "vendor": "WSO2"}, "product": "wso2_carbon_identity_management_ui1", "vendor": "wso2"}, {"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "[5.14.127,5.14.127.13)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "[5.17.5,5.17.5.330)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "[5.17.5,5.17.5.331)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "[5.17.118,5.17.118.22)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "[5.18.187,5.18.187.328)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "[5.18.187,5.18.187.329)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "[5.18.248,5.18.248.31)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "[5.23.8,5.23.8.210)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "[5.24.8,5.24.8.26)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "[5.25.92,5.25.92.166)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "[5.25.705,5.25.705.21)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "[5.25.713,5.25.713.10)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "[5.25.724,5.25.724.5)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "[5.25.736,5.25.736.1)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "[7.0.78,7.0.78.157)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "[7.8.23,7.8.23.67)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "[7.8.586,7.8.586.7)"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "generic", "value": "[0,*]"}}], "enrichment": {"confidence": 100.0, "confidence_source": "cna", "scores": [{"score": 100.0, "source": "cna"}]}, "original": {"product": "WSO2 Carbon Identity User Store Configuration UI", "source": "cna", "vendor": "WSO2"}, "product": "wso2_carbon_identity_user_store_configuration_ui", "vendor": "wso2"}, {"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "[4.7.19,4.7.19.13)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "[4.7.24,4.7.24.5)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "[4.7.32,4.7.32.10)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "[4.7.35,4.7.35.13)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "[4.7.49,4.7.49.7)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "[4.7.52,4.7.52.5)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "[4.9.2,4.9.2.8)"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "generic", "value": "[0,*]"}}], "enrichment": {"confidence": 100.0, "confidence_source": "cna", "scores": [{"score": 100.0, "source": "cna"}]}, "original": {"product": "WSO2 Carbon Logging UI", "source": "cna", "vendor": "WSO2"}, "product": "wso2_carbon_logging_ui", "vendor": "wso2"}, {"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "[4.7.19,4.7.19.13)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "[4.7.24,4.7.24.5)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "[4.7.32,4.7.32.10)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "[4.7.35,4.7.35.13)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "[4.7.49,4.7.49.7)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "[4.7.52,4.7.52.5)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "[4.9.2,4.9.2.8)"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "generic", "value": "[0,*]"}}], "enrichment": {"confidence": 100.0, "confidence_source": "cna", "scores": [{"score": 100.0, "source": "cna"}]}, "original": {"product": "WSO2 Carbon New Data Sources UI", "source": "cna", "vendor": "WSO2"}, "product": "wso2_carbon_new_data_sources_ui", "vendor": "wso2"}, {"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "[4.7.30,4.7.30.53)"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "generic", "value": "[0,*]"}}], "enrichment": {"confidence": 100.0, "confidence_source": "cna", "scores": [{"score": 100.0, "source": "cna"}]}, "original": {"product": "WSO2 Carbon Publish Event Mediator Configuration UI", "source": "cna", "vendor": "WSO2"}, "product": "wso2_carbon_publish_event_mediator_configuration_ui", "vendor": "wso2"}, {"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "[4.7.24,4.7.24)"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "generic", "value": "[0,*]"}}], "enrichment": {"confidence": 100.0, "confidence_source": "cna", "scores": [{"score": 100.0, "source": "cna"}]}, "original": {"product": "WSO2 Carbon Registry Indexing", "source": "cna", "vendor": "WSO2"}, "product": "wso2_carbon_registry_indexing", "vendor": "wso2"}, {"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "[4.7.32,4.7.32.16)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "[4.7.35,4.7.35.15)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "[4.7.39,4.7.39.12)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "[4.7.51,4.7.51.8)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "[4.8.3,4.8.3.10)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "[4.8.9,4.8.9.16)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "[4.8.12,4.8.12.8)"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "generic", "value": "[0,*]"}}], "enrichment": {"confidence": 100.0, "confidence_source": "cna", "scores": [{"score": 100.0, "source": "cna"}]}, "original": {"product": "WSO2 Carbon Registry Info UI2", "source": "cna", "vendor": "WSO2"}, "product": "wso2_carbon_registry_info_ui2", "vendor": "wso2"}, {"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "[4.7.32,4.7.32.18)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "[4.7.33,4.7.33.16)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "[4.8.9,4.8.9.16)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "[4.8.12,4.8.12.8)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "[4.8.24,4.8.24.6)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "[4.8.43,4.8.43.4)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "[4.8.50,4.8.50.3)"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "generic", "value": "[0,*]"}}], "enrichment": {"confidence": 100.0, "confidence_source": "cna", "scores": [{"score": 100.0, "source": "cna"}]}, "original": {"product": "WSO2 Carbon Registry Profiles UI", "source": "cna", "vendor": "WSO2"}, "product": "wso2_carbon_registry_profiles_ui", "vendor": "wso2"}, {"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "[4.7.24,4.7.24.11)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "[4.7.32,4.7.32.16)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "[4.7.32,4.7.32.18)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "[4.7.33,4.7.33.16)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "[4.7.35,4.7.35.15)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "[4.7.39,4.7.39.12)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "[4.7.51,4.7.51.8)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "[4.8.3,4.8.3.10)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "[4.8.9,4.8.9.16)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "[4.8.12,4.8.12.8)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "[4.8.13,4.8.13.9)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "[4.8.24,4.8.24.6)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "[4.8.32,4.8.32.4)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "[4.8.36,4.8.36.2)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "[4.8.43,4.8.43.2)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "[4.8.43,4.8.43.4)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "[4.8.50,4.8.50.1)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "[4.8.50,4.8.50.3)"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "generic", "value": "[0,*]"}}], "enrichment": {"confidence": 100.0, "confidence_source": "cna", "scores": [{"score": 100.0, "source": "cna"}]}, "original": {"product": "WSO2 Carbon Registry Properties UI", "source": "cna", "vendor": "WSO2"}, "product": "wso2_carbon_registry_properties_ui", "vendor": "wso2"}, {"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "[4.7.24,4.7.24.11)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "[4.7.32,4.7.32.16)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "[4.7.32,4.7.32.18)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "[4.7.33,4.7.33.16)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "[4.7.35,4.7.35.15)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "[4.7.39,4.7.39.12)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "[4.7.51,4.7.51.8)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "[4.8.3,4.8.3.10)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "[4.8.9,4.8.9.16)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "[4.8.12,4.8.12.8)"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "generic", "value": "[0,*]"}}], "enrichment": {"confidence": 100.0, "confidence_source": "cna", "scores": [{"score": 100.0, "source": "cna"}]}, "original": {"product": "WSO2 Carbon Registry Relations UI", "source": "cna", "vendor": "WSO2"}, "product": "wso2_carbon_registry_relations_ui", "vendor": "wso2"}, {"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "[4.7.24,4.7.24.11)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "[4.7.32,4.7.32.16)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "[4.7.32,4.7.32.18)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "[4.7.33,4.7.33.16)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "[4.7.35,4.7.35.15)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "[4.7.39,4.7.39.12)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "[4.7.51,4.7.51.8)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "[4.8.3,4.8.3.10)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "[4.8.9,4.8.9.16)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "[4.8.12,4.8.12.8)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "[4.8.13,4.8.13.9)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "[4.8.24,4.8.24.6)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "[4.8.32,4.8.32.4)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "[4.8.36,4.8.36.2)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "[4.8.43,4.8.43.2)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "[4.8.43,4.8.43.4)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "[4.8.50,4.8.50.1)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "[4.8.50,4.8.50.3)"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "generic", "value": "[0,*]"}}], "enrichment": {"confidence": 100.0, "confidence_source": "cna", "scores": [{"score": 100.0, "source": "cna"}]}, "original": {"product": "WSO2 Carbon Registry Resources UI", "source": "cna", "vendor": "WSO2"}, "product": "wso2_carbon_registry_resources_ui", "vendor": "wso2"}, {"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "[4.7.19,4.7.19.13)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "[4.7.24,4.7.24.5)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "[4.7.32,4.7.32.10)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "[4.7.35,4.7.35.13)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "[4.7.49,4.7.49.7)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "[4.7.52,4.7.52.5)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "[4.9.2,4.9.2.8)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "[4.9.11,4.9.11.2)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "[4.9.18,4.9.18.1)"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "generic", "value": "[0,*]"}}], "enrichment": {"confidence": 100.0, "confidence_source": "cna", "scores": [{"score": 100.0, "source": "cna"}]}, "original": {"product": "WSO2 Carbon Registry Search UI", "source": "cna", "vendor": "WSO2"}, "product": "wso2_carbon_registry_search_ui", "vendor": "wso2"}, {"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "[4.7.30,4.7.30.53)"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "generic", "value": "[0,*]"}}], "enrichment": {"confidence": 100.0, "confidence_source": "cna", "scores": [{"score": 100.0, "source": "cna"}]}, "original": {"product": "WSO2 Carbon Rest API Admin UI", "source": "cna", "vendor": "WSO2"}, "product": "wso2_carbon_rest_api_admin_ui", "vendor": "wso2"}, {"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "[4.7.30,4.7.30.53)"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "generic", "value": "[0,*]"}}], "enrichment": {"confidence": 100.0, "confidence_source": "cna", "scores": [{"score": 100.0, "source": "cna"}]}, "original": {"product": "WSO2 Carbon Rule Mediator UI", "source": "cna", "vendor": "WSO2"}, "product": "wso2_carbon_rule_mediator_ui", "vendor": "wso2"}, {"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "[5.14.127,5.14.127)"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "generic", "value": "[0,*]"}}], "enrichment": {"confidence": 100.0, "confidence_source": "cna", "scores": [{"score": 100.0, "source": "cna"}]}, "original": {"product": "WSO2 Carbon Security UI", "source": "cna", "vendor": "WSO2"}, "product": "wso2_carbon_security_ui", "vendor": "wso2"}, {"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "[4.7.30,4.7.30.53)"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "generic", "value": "[0,*]"}}], "enrichment": {"confidence": 100.0, "confidence_source": "cna", "scores": [{"score": 100.0, "source": "cna"}]}, "original": {"product": "WSO2 Carbon Sequence Editor UI", "source": "cna", "vendor": "WSO2"}, "product": "wso2_carbon_sequence_editor_ui", "vendor": "wso2"}, {"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "[4.7.30,4.7.30.53)"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "generic", "value": "[0,*]"}}], "enrichment": {"confidence": 100.0, "confidence_source": "manual", "scores": [{"score": 100.0, "source": "manual"}]}, "original": {"product": "WSO2 Carbon Task UI", "source": "cna", "vendor": "WSO2"}, "product": "wso2_carbon_task_ui", "vendor": "wso2"}, {"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "[4.7.19,4.7.19.13)"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "generic", "value": "[0,*]"}}], "enrichment": {"confidence": 100.0, "confidence_source": "cna", "scores": [{"score": 100.0, "source": "cna"}]}, "original": {"product": "WSO2 Carbon Tasks Core", "source": "cna", "vendor": "WSO2"}, "product": "wso2_carbon_tasks_core", "vendor": "wso2"}, {"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "[4.7.30,4.7.30.53)"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "generic", "value": "[0,*]"}}], "enrichment": {"confidence": 100.0, "confidence_source": "cna", "scores": [{"score": 100.0, "source": "cna"}]}, "original": {"product": "WSO2 Carbon Template Editor UI", "source": "cna", "vendor": "WSO2"}, "product": "wso2_carbon_template_editor_ui", "vendor": "wso2"}, {"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "[4.7.30,4.7.30.53)"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "generic", "value": "[0,*]"}}], "enrichment": {"confidence": 100.0, "confidence_source": "cna", "scores": [{"score": 100.0, "source": "cna"}]}, "original": {"product": "WSO2 Carbon Throttle Mediator UI", "source": "cna", "vendor": "WSO2"}, "product": "wso2_carbon_throttle_mediator_ui", "vendor": "wso2"}, {"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "[6.6.0,6.6.0.227)"}}], "enrichment": {"confidence": 100.0, "confidence_source": "matching", "scores": [{"score": 100.0, "source": "matching"}]}, "original": {"product": "WSO2 Enterprise Integrator", "source": "cna", "vendor": "WSO2"}, "product": "wso2_enterprise_integrator", "vendor": "wso2"}, {"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "[5.10.0,5.10.0.381)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "[5.11.0,5.11.0.428)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "[6.0.0,6.0.0.255)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "[6.1.0,6.1.0.256)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "[7.0.0,7.0.0.133)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "[7.1.0,7.1.0.41)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "[7.2.0,7.2.0.3)"}}], "enrichment": {"confidence": 100.0, "confidence_source": "matching", "scores": [{"score": 100.0, "source": "matching"}]}, "original": {"product": "WSO2 Identity Server", "source": "cna", "vendor": "WSO2"}, "product": "wso2_identity_server", "vendor": "wso2"}, {"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "[5.10.0,5.10.0.372)"}}], "enrichment": {"confidence": 100.0, "confidence_source": "matching", "scores": [{"score": 100.0, "source": "matching"}]}, "original": {"product": "WSO2 Identity Server as Key Manager", "source": "cna", "vendor": "WSO2"}, "product": "wso2_identity_server_as_key_manager", "vendor": "wso2"}, {"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "[2.0.0,2.0.0.401)"}}], "enrichment": {"confidence": 100.0, "confidence_source": "matching", "scores": [{"score": 100.0, "source": "matching"}]}, "original": {"product": "WSO2 Open Banking AM", "source": "cna", "vendor": "WSO2"}, "product": "wso2_open_banking_am", "vendor": "wso2"}, {"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "[2.0.0,2.0.0.421)"}}], "enrichment": {"confidence": 100.0, "confidence_source": "matching", "scores": [{"score": 100.0, "source": "matching"}]}, "original": {"product": "WSO2 Open Banking IAM", "source": "cna", "vendor": "WSO2"}, "product": "wso2_open_banking_iam", "vendor": "wso2"}, {"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "[4.7.32,4.7.32.16)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "[4.7.35,4.7.35.15)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "[4.7.39,4.7.39.12)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "[4.7.51,4.7.51.8)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "[4.8.3,4.8.3.10)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "[4.8.9,4.8.9.16)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "[4.8.12,4.8.12.8)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "[4.8.13,4.8.13.9)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "[4.8.24,4.8.24.6)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "[4.8.32,4.8.32.4)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "[4.8.36,4.8.36.2)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "[4.8.43,4.8.43.2)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "[4.8.43,4.8.43.4)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "[4.8.50,4.8.50.1)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "[4.8.50,4.8.50.3)"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "generic", "value": "[0,*]"}}], "enrichment": {"confidence": 100.0, "confidence_source": "cna", "scores": [{"score": 100.0, "source": "cna"}]}, "original": {"product": "WSO2 Stratos SSO Redirector UI Component", "source": "cna", "vendor": "WSO2"}, "product": "wso2_stratos_sso_redirector_ui_component", "vendor": "wso2"}, {"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "[4.7.32,4.7.32.16)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "[4.7.35,4.7.35.15)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "[4.7.39,4.7.39.12)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "[4.7.51,4.7.51.8)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "[4.8.3,4.8.3.10)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "[4.8.9,4.8.9.16)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "[4.8.12,4.8.12.8)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "[4.8.13,4.8.13.9)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "[4.8.24,4.8.24.6)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "[4.8.32,4.8.32.4)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "[4.8.36,4.8.36.2)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "[4.8.43,4.8.43.2)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "[4.8.43,4.8.43.4)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "[4.8.50,4.8.50.1)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "[4.8.50,4.8.50.3)"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "generic", "value": "[0,*]"}}], "enrichment": {"confidence": 100.0, "confidence_source": "cna", "scores": [{"score": 100.0, "source": "cna"}]}, "original": {"product": "WSO2 Stratos User Interface For Tenant CRUD Operations", "source": "cna", "vendor": "WSO2"}, "product": "wso2_stratos_user_interface_for_tenant_crud_operations", "vendor": "wso2"}, {"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "[4.5.0,4.5.0.37)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "[4.6.0,4.6.0.3)"}}], "enrichment": {"confidence": 100.0, "confidence_source": "matching", "scores": [{"score": 100.0, "source": "matching"}]}, "original": {"product": "WSO2 Traffic Manager", "source": "cna", "vendor": "WSO2"}, "product": "wso2_traffic_manager", "vendor": "wso2"}, {"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "[4.5.0,4.5.0.37)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "[4.6.0,4.6.0.3)"}}], "enrichment": {"confidence": 100.0, "confidence_source": "matching", "scores": [{"score": 100.0, "source": "matching"}]}, "original": {"product": "WSO2 Universal Gateway", "source": "cna", "vendor": "WSO2"}, "product": "wso2_universal_gateway", "vendor": "wso2"}], "created": "2026-08-06T09:30:02.867772+00:00", "updated": "2026-08-07T10:01:12.713911+00:00", "vendors": ["wso2", "wso2$PRODUCT$wso2_api_control_plane", "wso2$PRODUCT$wso2_api_manager", "wso2$PRODUCT$wso2_carbon_command_mediator_ui", "wso2$PRODUCT$wso2_carbon_component_andes_event_ui", "wso2$PRODUCT$wso2_carbon_component_andes_ui1", "wso2$PRODUCT$wso2_carbon_email_verification_ui", "wso2$PRODUCT$wso2_carbon_endpoint_editor_ui", "wso2$PRODUCT$wso2_carbon_event_simulator_ui", "wso2$PRODUCT$wso2_carbon_eventing_ui", "wso2$PRODUCT$wso2_carbon_execution_manager_ui", "wso2$PRODUCT$wso2_carbon_governance", "wso2$PRODUCT$wso2_carbon_governance_custom_lifecycle_checklist_ui", "wso2$PRODUCT$wso2_carbon_governance_generic_artifact_user_interface", "wso2$PRODUCT$wso2_carbon_governance_life_cycles_user_interface", "wso2$PRODUCT$wso2_carbon_governance_wsdl_tool_ui", "wso2$PRODUCT$wso2_carbon_hl7_business_messaging_store_ui", "wso2$PRODUCT$wso2_carbon_humantask_ui", "wso2$PRODUCT$wso2_carbon_identity_entitlement_ui", "wso2$PRODUCT$wso2_carbon_identity_management_ui1", "wso2$PRODUCT$wso2_carbon_identity_user_store_configuration_ui", "wso2$PRODUCT$wso2_carbon_logging_ui", "wso2$PRODUCT$wso2_carbon_new_data_sources_ui", "wso2$PRODUCT$wso2_carbon_publish_event_mediator_configuration_ui", "wso2$PRODUCT$wso2_carbon_registry_indexing", "wso2$PRODUCT$wso2_carbon_registry_info_ui2", "wso2$PRODUCT$wso2_carbon_registry_profiles_ui", "wso2$PRODUCT$wso2_carbon_registry_properties_ui", "wso2$PRODUCT$wso2_carbon_registry_relations_ui", "wso2$PRODUCT$wso2_carbon_registry_resources_ui", "wso2$PRODUCT$wso2_carbon_registry_search_ui", "wso2$PRODUCT$wso2_carbon_rest_api_admin_ui", "wso2$PRODUCT$wso2_carbon_rule_mediator_ui", "wso2$PRODUCT$wso2_carbon_security_ui", "wso2$PRODUCT$wso2_carbon_sequence_editor_ui", "wso2$PRODUCT$wso2_carbon_task_ui", "wso2$PRODUCT$wso2_carbon_tasks_core", "wso2$PRODUCT$wso2_carbon_template_editor_ui", "wso2$PRODUCT$wso2_carbon_throttle_mediator_ui", "wso2$PRODUCT$wso2_enterprise_integrator", "wso2$PRODUCT$wso2_identity_server", "wso2$PRODUCT$wso2_identity_server_as_key_manager", "wso2$PRODUCT$wso2_open_banking_am", "wso2$PRODUCT$wso2_open_banking_iam", "wso2$PRODUCT$wso2_stratos_sso_redirector_ui_component", "wso2$PRODUCT$wso2_stratos_user_interface_for_tenant_crud_operations", "wso2$PRODUCT$wso2_traffic_manager", "wso2$PRODUCT$wso2_universal_gateway"]}