جزئیات آسیبپذیری
CVE-2025-9804
WSO2 API Manager AnalyticsWSO2 API Control PlaneWSO2 API ManagerWSO2 Data Analytics ServerWSO2 Enterprise IntegratorWSO2 Enterprise Mobility Manager
Improper Access Control in Multiple WSO2 Products via Internal SOAP Admin Services and System REST APIs
CVSS 3.1
9.6بحرانی
شرح رسمی (انگلیسی)
An improper access control vulnerability exists in multiple WSO2 products due to insufficient permission enforcement in certain internal SOAP Admin Services and System REST APIs. A low-privileged user may exploit this flaw to perform unauthorized operations, including accessing server-level information. This vulnerability affects only internal administrative interfaces. APIs exposed through the WSO2 API Manager's API Gateway remain unaffected.
امتیازهای CVSS
| امتیاز | نسخه | منبع | بردار |
|---|---|---|---|
| 9.6بحرانی | 3.1 | CVEProject cvelistV5 (CNA) (WSO2) | CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H |
محصولات آسیبپذیر
| فروشنده | محصول | نسخهها | منبع |
|---|---|---|---|
| WSO2 | API Manager Analytics | v < 2.0.0 | CVEProject cvelistV5 (CNA) |
| WSO2 | API Manager Analytics | 2.0.0 ≤ v < 2.0.0.14 | CVEProject cvelistV5 (CNA) |
| WSO2 | API Manager Analytics | 2.1.0 ≤ v < 2.1.0.19 | CVEProject cvelistV5 (CNA) |
| WSO2 | API Manager Analytics | 2.2.0 ≤ v < 2.2.0.30 | CVEProject cvelistV5 (CNA) |
| WSO2 | API Manager Analytics | 2.5.0 ≤ v < 2.5.0.39 | CVEProject cvelistV5 (CNA) |
| WSO2 | WSO2 API Control Plane | 4.5.0 ≤ v < 4.5.0.24 | CVEProject cvelistV5 (CNA) |
| WSO2 | WSO2 API Manager | v < 2.0.0 | CVEProject cvelistV5 (CNA) |
| WSO2 | WSO2 API Manager | 2.0.0 ≤ v < 2.0.0.31 | CVEProject cvelistV5 (CNA) |
| WSO2 | WSO2 API Manager | 2.1.0 ≤ v < 2.1.0.40 | CVEProject cvelistV5 (CNA) |
| WSO2 | WSO2 API Manager | 2.2.0 ≤ v < 2.2.0.59 | CVEProject cvelistV5 (CNA) |
| WSO2 | WSO2 API Manager | 2.5.0 ≤ v < 2.5.0.85 | CVEProject cvelistV5 (CNA) |
| WSO2 | WSO2 API Manager | 2.6.0 ≤ v < 2.6.0.146 | CVEProject cvelistV5 (CNA) |
| WSO2 | WSO2 API Manager | 3.0.0 ≤ v < 3.0.0.176 | CVEProject cvelistV5 (CNA) |
| WSO2 | WSO2 API Manager | 3.1.0 ≤ v < 3.1.0.340 | CVEProject cvelistV5 (CNA) |
| WSO2 | WSO2 API Manager | 3.2.0 ≤ v < 3.2.0.441 | CVEProject cvelistV5 (CNA) |
| WSO2 | WSO2 API Manager | 3.2.1 ≤ v < 3.2.1.61 | CVEProject cvelistV5 (CNA) |
| WSO2 | WSO2 API Manager | 4.0.0 ≤ v < 4.0.0.361 | CVEProject cvelistV5 (CNA) |
| WSO2 | WSO2 API Manager | 4.1.0 ≤ v < 4.1.0.224 | CVEProject cvelistV5 (CNA) |
| WSO2 | WSO2 API Manager | 4.2.0 ≤ v < 4.2.0.162 | CVEProject cvelistV5 (CNA) |
| WSO2 | WSO2 API Manager | 4.3.0 ≤ v < 4.3.0.75 | CVEProject cvelistV5 (CNA) |
| WSO2 | WSO2 API Manager | 4.4.0 ≤ v < 4.4.0.39 | CVEProject cvelistV5 (CNA) |
| WSO2 | WSO2 API Manager | 4.5.0 ≤ v < 4.5.0.23 | CVEProject cvelistV5 (CNA) |
| WSO2 | WSO2 Data Analytics Server | v < 3.1.0 | CVEProject cvelistV5 (CNA) |
| WSO2 | WSO2 Data Analytics Server | 3.1.0 ≤ v < 3.1.0.20 | CVEProject cvelistV5 (CNA) |
| WSO2 | WSO2 Data Analytics Server | 3.2.0 ≤ v < 3.2.0.33 | CVEProject cvelistV5 (CNA) |
| WSO2 | WSO2 Enterprise Integrator | v < 6.2.0 | CVEProject cvelistV5 (CNA) |
| WSO2 | WSO2 Enterprise Integrator | 6.2.0 ≤ v < 6.2.0.62 | CVEProject cvelistV5 (CNA) |
| WSO2 | WSO2 Enterprise Integrator | 6.3.0 ≤ v < 6.3.0.70 | CVEProject cvelistV5 (CNA) |
| WSO2 | WSO2 Enterprise Mobility Manager | v < 2.2.0 | CVEProject cvelistV5 (CNA) |
| WSO2 | WSO2 Enterprise Mobility Manager | 2.2.0 ≤ v < 2.2.0.28 | CVEProject cvelistV5 (CNA) |
| WSO2 | WSO2 Enterprise Service Bus Analytics | v < 5.0.0 | CVEProject cvelistV5 (CNA) |
| WSO2 | WSO2 Enterprise Service Bus Analytics | 5.0.0 ≤ v < 5.0.0.13 | CVEProject cvelistV5 (CNA) |
| WSO2 | WSO2 Identity Server | v < 5.2.0 | CVEProject cvelistV5 (CNA) |
| WSO2 | WSO2 Identity Server | 5.10.0 ≤ v < 5.10.0.369 | CVEProject cvelistV5 (CNA) |
| WSO2 | WSO2 Identity Server | 5.11.0 ≤ v < 5.11.0.413 | CVEProject cvelistV5 (CNA) |
| WSO2 | WSO2 Identity Server | 5.2.0 ≤ v < 5.2.0.34 | CVEProject cvelistV5 (CNA) |
| WSO2 | WSO2 Identity Server | 5.3.0 ≤ v < 5.3.0.36 | CVEProject cvelistV5 (CNA) |
| WSO2 | WSO2 Identity Server | 5.4.0 ≤ v < 5.4.0.34 | CVEProject cvelistV5 (CNA) |
| WSO2 | WSO2 Identity Server | 5.4.1 ≤ v < 5.4.1.38 | CVEProject cvelistV5 (CNA) |
| WSO2 | WSO2 Identity Server | 5.5.0 ≤ v < 5.5.0.52 | CVEProject cvelistV5 (CNA) |
| WSO2 | WSO2 Identity Server | 5.6.0 ≤ v < 5.6.0.60 | CVEProject cvelistV5 (CNA) |
| WSO2 | WSO2 Identity Server | 5.7.0 ≤ v < 5.7.0.126 | CVEProject cvelistV5 (CNA) |
| WSO2 | WSO2 Identity Server | 5.8.0 ≤ v < 5.8.0.110 | CVEProject cvelistV5 (CNA) |
| WSO2 | WSO2 Identity Server | 5.9.0 ≤ v < 5.9.0.169 | CVEProject cvelistV5 (CNA) |
| WSO2 | WSO2 Identity Server | 6.0.0 ≤ v < 6.0.0.244 | CVEProject cvelistV5 (CNA) |
| WSO2 | WSO2 Identity Server | 6.1.0 ≤ v < 6.1.0.243 | CVEProject cvelistV5 (CNA) |
| WSO2 | WSO2 Identity Server | 7.0.0 ≤ v < 7.0.0.118 | CVEProject cvelistV5 (CNA) |
| WSO2 | WSO2 Identity Server | 7.1.0 ≤ v < 7.1.0.25 | CVEProject cvelistV5 (CNA) |
| WSO2 | WSO2 Identity Server Analytics | v < 5.2.0 | CVEProject cvelistV5 (CNA) |
| WSO2 | WSO2 Identity Server Analytics | 5.2.0 ≤ v < 5.2.0.19 | CVEProject cvelistV5 (CNA) |
| WSO2 | WSO2 Identity Server Analytics | 5.3.0 ≤ v < 5.3.0.17 | CVEProject cvelistV5 (CNA) |
| WSO2 | WSO2 Identity Server Analytics | 5.5.0 ≤ v < 5.5.0.31 | CVEProject cvelistV5 (CNA) |
| WSO2 | WSO2 Identity Server Analytics | 5.6.0 ≤ v < 5.6.0.38 | CVEProject cvelistV5 (CNA) |
| WSO2 | WSO2 Identity Server as Key Manager | v < 5.3.0 | CVEProject cvelistV5 (CNA) |
| WSO2 | WSO2 Identity Server as Key Manager | 5.10.0 ≤ v < 5.10.0.359 | CVEProject cvelistV5 (CNA) |
| WSO2 | WSO2 Identity Server as Key Manager | 5.3.0 ≤ v < 5.3.0.41 | CVEProject cvelistV5 (CNA) |
| WSO2 | WSO2 Identity Server as Key Manager | 5.5.0 ≤ v < 5.5.0.53 | CVEProject cvelistV5 (CNA) |
| WSO2 | WSO2 Identity Server as Key Manager | 5.6.0 ≤ v < 5.6.0.75 | CVEProject cvelistV5 (CNA) |
| WSO2 | WSO2 Identity Server as Key Manager | 5.7.0 ≤ v < 5.7.0.125 | CVEProject cvelistV5 (CNA) |
| WSO2 | WSO2 Identity Server as Key Manager | 5.9.0 ≤ v < 5.9.0.176 | CVEProject cvelistV5 (CNA) |
| WSO2 | WSO2 Open Banking AM | v < 1.4.0 | CVEProject cvelistV5 (CNA) |
| WSO2 | WSO2 Open Banking AM | 1.4.0 ≤ v < 1.4.0.139 | CVEProject cvelistV5 (CNA) |
| WSO2 | WSO2 Open Banking AM | 1.5.0 ≤ v < 1.5.0.140 | CVEProject cvelistV5 (CNA) |
| WSO2 | WSO2 Open Banking AM | 2.0.0 ≤ v < 2.0.0.389 | CVEProject cvelistV5 (CNA) |
| WSO2 | WSO2 Open Banking IAM | v < 2.0.0 | CVEProject cvelistV5 (CNA) |
| WSO2 | WSO2 Open Banking IAM | 2.0.0 ≤ v < 2.0.0.409 | CVEProject cvelistV5 (CNA) |
| WSO2 | WSO2 Open Banking KM | v < 1.4.0 | CVEProject cvelistV5 (CNA) |
| WSO2 | WSO2 Open Banking KM | 1.4.0 ≤ v < 1.4.0.133 | CVEProject cvelistV5 (CNA) |
| WSO2 | WSO2 Open Banking KM | 1.5.0 ≤ v < 1.5.0.123 | CVEProject cvelistV5 (CNA) |
| WSO2 | WSO2 Traffic Manager | 4.5.0 ≤ v < 4.5.0.22 | CVEProject cvelistV5 (CNA) |
| WSO2 | WSO2 Universal Gateway | 4.5.0 ≤ v < 4.5.0.22 | CVEProject cvelistV5 (CNA) |
| WSO2 | org.wso2.carbon.apimgt:org.wso2.carbon.apimgt.rest.api.util | 6.7.206 ≤ v < 6.7.206.567 | CVEProject cvelistV5 (CNA) |
| WSO2 | org.wso2.carbon.apimgt:org.wso2.carbon.apimgt.rest.api.util | 6.7.210 ≤ v < 6.7.210.63 | CVEProject cvelistV5 (CNA) |
| WSO2 | org.wso2.carbon.apimgt:org.wso2.carbon.apimgt.rest.api.util | 9.0.174 ≤ v < 9.0.174.522 | CVEProject cvelistV5 (CNA) |
| WSO2 | org.wso2.carbon.apimgt:org.wso2.carbon.apimgt.rest.api.util | 9.20.74 ≤ v < 9.20.74.379 | CVEProject cvelistV5 (CNA) |
| WSO2 | org.wso2.carbon.apimgt:org.wso2.carbon.apimgt.rest.api.util | 9.28.116 ≤ v < 9.28.116.360 | CVEProject cvelistV5 (CNA) |
| WSO2 | org.wso2.carbon.apimgt:org.wso2.carbon.apimgt.rest.api.util | 9.29.120 ≤ v < 9.29.120.184 | CVEProject cvelistV5 (CNA) |
| WSO2 | org.wso2.carbon.apimgt:org.wso2.carbon.apimgt.rest.api.util | 9.30.67 ≤ v < 9.30.67.109 | CVEProject cvelistV5 (CNA) |
| WSO2 | org.wso2.carbon.apimgt:org.wso2.carbon.apimgt.rest.api.util | 9.31.86 ≤ v < 9.31.86.71 | CVEProject cvelistV5 (CNA) |
| WSO2 | org.wso2.carbon.extension.identity.authenticator.outbound.totp:org.wso2.carbon.extension.identity.authenticator.totp.connector | 2.0.10 ≤ v < 2.0.10.1 | CVEProject cvelistV5 (CNA) |
| WSO2 | org.wso2.carbon.extension.identity.authenticator.outbound.totp:org.wso2.carbon.extension.identity.authenticator.totp.connector | 2.0.15 ≤ v < 2.0.15.1 | CVEProject cvelistV5 (CNA) |
| WSO2 | org.wso2.carbon.extension.identity.authenticator.outbound.totp:org.wso2.carbon.extension.identity.authenticator.totp.connector | 2.0.21 ≤ v < 2.0.21.1 | CVEProject cvelistV5 (CNA) |
| WSO2 | org.wso2.carbon.extension.identity.authenticator.outbound.totp:org.wso2.carbon.extension.identity.authenticator.totp.connector | 2.0.22 ≤ v < 2.0.22.1 | CVEProject cvelistV5 (CNA) |
| WSO2 | org.wso2.carbon.extension.identity.authenticator.outbound.totp:org.wso2.carbon.extension.identity.authenticator.totp.connector | 2.1 ≤ v < 2.1.1972 | CVEProject cvelistV5 (CNA) |
| WSO2 | org.wso2.carbon.extension.identity.authenticator.outbound.totp:org.wso2.carbon.extension.identity.authenticator.totp.connector | 2.1.12 ≤ v < 2.1.12.1 | CVEProject cvelistV5 (CNA) |
| WSO2 | org.wso2.carbon.extension.identity.authenticator.outbound.totp:org.wso2.carbon.extension.identity.authenticator.totp.connector | 2.2 ≤ v < 2.2.24 | CVEProject cvelistV5 (CNA) |
| WSO2 | org.wso2.carbon.extension.identity.authenticator.outbound.totp:org.wso2.carbon.extension.identity.authenticator.totp.connector | 2.2 ≤ v < 2.2.25 | CVEProject cvelistV5 (CNA) |
| WSO2 | org.wso2.carbon.extension.identity.authenticator.outbound.totp:org.wso2.carbon.extension.identity.authenticator.totp.connector | 3.1.0 ≤ v < 3.1.0.74 | CVEProject cvelistV5 (CNA) |
| WSO2 | org.wso2.carbon.extension.identity.authenticator.outbound.totp:org.wso2.carbon.extension.identity.authenticator.totp.connector | 3.3.26 ≤ v < 3.3.26.2 | CVEProject cvelistV5 (CNA) |
| WSO2 | org.wso2.carbon.extension.identity.authenticator.outbound.totp:org.wso2.carbon.extension.identity.authenticator.totp.connector | 3.3.35 ≤ v < 3.3.35.1 | CVEProject cvelistV5 (CNA) |
| WSO2 | org.wso2.carbon.extension.identity.authenticator.outbound.totp:org.wso2.carbon.extension.identity.authenticator.totp.connector | 3.3.6 ≤ v < 3.3.6.7 | CVEProject cvelistV5 (CNA) |
| WSO2 | org.wso2.carbon.identity.framework:org.wso2.carbon.identity.application.mgt | 5.11.148 ≤ v < 5.11.148.19 | CVEProject cvelistV5 (CNA) |
| WSO2 | org.wso2.carbon.identity.framework:org.wso2.carbon.identity.application.mgt | 5.11.256 ≤ v < 5.11.256.21 | CVEProject cvelistV5 (CNA) |
| WSO2 | org.wso2.carbon.identity.framework:org.wso2.carbon.identity.application.mgt | 5.12.153 ≤ v < 5.12.153.63 | CVEProject cvelistV5 (CNA) |
| WSO2 | org.wso2.carbon.identity.framework:org.wso2.carbon.identity.application.mgt | 5.12.387 ≤ v < 5.12.387.46 | CVEProject cvelistV5 (CNA) |
| WSO2 | org.wso2.carbon.identity.framework:org.wso2.carbon.identity.application.mgt | 5.14.97 ≤ v < 5.14.97.89 | CVEProject cvelistV5 (CNA) |
| WSO2 | org.wso2.carbon.identity.framework:org.wso2.carbon.identity.application.mgt | 5.17.118 ≤ v < 5.17.118.17 | CVEProject cvelistV5 (CNA) |
| WSO2 | org.wso2.carbon.identity.framework:org.wso2.carbon.identity.application.mgt | 5.17.5 ≤ v < 5.17.5.317 | CVEProject cvelistV5 (CNA) |
| WSO2 | org.wso2.carbon.identity.framework:org.wso2.carbon.identity.application.mgt | 5.18.187 ≤ v < 5.18.187.309 | CVEProject cvelistV5 (CNA) |
| WSO2 | org.wso2.carbon.identity.framework:org.wso2.carbon.identity.application.mgt | 5.18.248 ≤ v < 5.18.248.30 | CVEProject cvelistV5 (CNA) |
| WSO2 | org.wso2.carbon.identity.framework:org.wso2.carbon.identity.application.mgt | 5.2.0 ≤ v < 5.2.0.4 | CVEProject cvelistV5 (CNA) |
| WSO2 | org.wso2.carbon.identity.framework:org.wso2.carbon.identity.application.mgt | 5.2.2 ≤ v < 5.2.2.21 | CVEProject cvelistV5 (CNA) |
| WSO2 | org.wso2.carbon.identity.framework:org.wso2.carbon.identity.application.mgt | 5.23.8 ≤ v < 5.23.8.207 | CVEProject cvelistV5 (CNA) |
| WSO2 | org.wso2.carbon.identity.framework:org.wso2.carbon.identity.application.mgt | 5.24.8 ≤ v < 5.24.8.23 | CVEProject cvelistV5 (CNA) |
| WSO2 | org.wso2.carbon.identity.framework:org.wso2.carbon.identity.application.mgt | 5.25 ≤ v < 5.25.734 | CVEProject cvelistV5 (CNA) |
| WSO2 | org.wso2.carbon.identity.framework:org.wso2.carbon.identity.application.mgt | 5.25.705 ≤ v < 5.25.705.19 | CVEProject cvelistV5 (CNA) |
| WSO2 | org.wso2.carbon.identity.framework:org.wso2.carbon.identity.application.mgt | 5.25.713 ≤ v < 5.25.713.9 | CVEProject cvelistV5 (CNA) |
| WSO2 | org.wso2.carbon.identity.framework:org.wso2.carbon.identity.application.mgt | 5.25.724 ≤ v < 5.25.724.3 | CVEProject cvelistV5 (CNA) |
| WSO2 | org.wso2.carbon.identity.framework:org.wso2.carbon.identity.application.mgt | 5.25.92 ≤ v < 5.25.92.152 | CVEProject cvelistV5 (CNA) |
| WSO2 | org.wso2.carbon.identity.framework:org.wso2.carbon.identity.application.mgt | 5.7.5 ≤ v < 5.7.5.18 | CVEProject cvelistV5 (CNA) |
| WSO2 | org.wso2.carbon.identity.framework:org.wso2.carbon.identity.application.mgt | 7.0.78 ≤ v < 7.0.78.133 | CVEProject cvelistV5 (CNA) |
| WSO2 | org.wso2.carbon.identity.framework:org.wso2.carbon.identity.application.mgt | 7.8.23 ≤ v < 7.8.23.47 | CVEProject cvelistV5 (CNA) |
| WSO2 | org.wso2.carbon.identity.workflow.user:org.wso2.carbon.user.mgt.workflow | 5.1.1 ≤ v < 5.1.1.1 | CVEProject cvelistV5 (CNA) |
| WSO2 | org.wso2.carbon.identity.workflow.user:org.wso2.carbon.user.mgt.workflow | 5.1.2 ≤ v < 5.1.2.1 | CVEProject cvelistV5 (CNA) |
| WSO2 | org.wso2.carbon.identity.workflow.user:org.wso2.carbon.user.mgt.workflow | 5.1.5 ≤ v < 5.1.5.1 | CVEProject cvelistV5 (CNA) |
| WSO2 | org.wso2.carbon.identity.workflow.user:org.wso2.carbon.user.mgt.workflow | 5.3.3 ≤ v < 5.3.3.1 | CVEProject cvelistV5 (CNA) |
| WSO2 | org.wso2.carbon.identity.workflow.user:org.wso2.carbon.user.mgt.workflow | 5.4.0 ≤ v < 5.4.0.4 | CVEProject cvelistV5 (CNA) |
| WSO2 | org.wso2.carbon.identity.workflow.user:org.wso2.carbon.user.mgt.workflow | 5.4.1 ≤ v < 5.4.1.5 | CVEProject cvelistV5 (CNA) |
| WSO2 | org.wso2.carbon.identity.workflow.user:org.wso2.carbon.user.mgt.workflow | 5.6.0 ≤ v < 5.6.0.1 | CVEProject cvelistV5 (CNA) |
| WSO2 | org.wso2.carbon:org.wso2.carbon.base | 4.10 ≤ v < 4.10.94 | CVEProject cvelistV5 (CNA) |
| WSO2 | org.wso2.carbon:org.wso2.carbon.base | 4.10.42 ≤ v < 4.10.42.9 | CVEProject cvelistV5 (CNA) |
| WSO2 | org.wso2.carbon:org.wso2.carbon.base | 4.10.9 ≤ v < 4.10.9.66 | CVEProject cvelistV5 (CNA) |
| WSO2 | org.wso2.carbon:org.wso2.carbon.base | 4.4.11 ≤ v < 4.4.11.9 | CVEProject cvelistV5 (CNA) |
| WSO2 | org.wso2.carbon:org.wso2.carbon.base | 4.4.26 ≤ v < 4.4.26.12 | CVEProject cvelistV5 (CNA) |
| WSO2 | org.wso2.carbon:org.wso2.carbon.base | 4.4.35 ≤ v < 4.4.35.44 | CVEProject cvelistV5 (CNA) |
| WSO2 | org.wso2.carbon:org.wso2.carbon.base | 4.4.7 ≤ v < 4.4.7.6 | CVEProject cvelistV5 (CNA) |
| WSO2 | org.wso2.carbon:org.wso2.carbon.base | 4.4.9 ≤ v < 4.4.9.11 | CVEProject cvelistV5 (CNA) |
| WSO2 | org.wso2.carbon:org.wso2.carbon.base | 4.5.1 ≤ v < 4.5.1.43 | CVEProject cvelistV5 (CNA) |
| WSO2 | org.wso2.carbon:org.wso2.carbon.base | 4.6.0 ≤ v < 4.6.0.1990 | CVEProject cvelistV5 (CNA) |
| WSO2 | org.wso2.carbon:org.wso2.carbon.base | 4.6.1 ≤ v < 4.6.1.149 | CVEProject cvelistV5 (CNA) |
| WSO2 | org.wso2.carbon:org.wso2.carbon.base | 4.6.2 ≤ v < 4.6.2.667 | CVEProject cvelistV5 (CNA) |
| WSO2 | org.wso2.carbon:org.wso2.carbon.base | 4.6.3 ≤ v < 4.6.3.36 | CVEProject cvelistV5 (CNA) |
| WSO2 | org.wso2.carbon:org.wso2.carbon.base | 4.6.4 ≤ v < 4.6.4.14 | CVEProject cvelistV5 (CNA) |
| WSO2 | org.wso2.carbon:org.wso2.carbon.base | 4.7.1 ≤ v < 4.7.1.68 | CVEProject cvelistV5 (CNA) |
| WSO2 | org.wso2.carbon:org.wso2.carbon.base | 4.8.1 ≤ v < 4.8.1.39 | CVEProject cvelistV5 (CNA) |
| WSO2 | org.wso2.carbon:org.wso2.carbon.base | 4.9 ≤ v < 4.9.29 | CVEProject cvelistV5 (CNA) |
| WSO2 | org.wso2.carbon:org.wso2.carbon.base | 4.9.0 ≤ v < 4.9.0.99 | CVEProject cvelistV5 (CNA) |
| WSO2 | org.wso2.carbon:org.wso2.carbon.base | 4.9.26 ≤ v < 4.9.26.25 | CVEProject cvelistV5 (CNA) |
| WSO2 | org.wso2.carbon:org.wso2.carbon.base | 4.9.27 ≤ v < 4.9.27.10 | CVEProject cvelistV5 (CNA) |
| WSO2 | org.wso2.carbon:org.wso2.carbon.base | 4.9.28 ≤ v < 4.9.28.11 | CVEProject cvelistV5 (CNA) |
| WSO2 | org.wso2.carbon:org.wso2.carbon.server.admin | 4.10 ≤ v < 4.10.94 | CVEProject cvelistV5 (CNA) |
| WSO2 | org.wso2.carbon:org.wso2.carbon.server.admin | 4.10.42 ≤ v < 4.10.42.9 | CVEProject cvelistV5 (CNA) |
| WSO2 | org.wso2.carbon:org.wso2.carbon.server.admin | 4.10.9 ≤ v < 4.10.9.66 | CVEProject cvelistV5 (CNA) |
| WSO2 | org.wso2.carbon:org.wso2.carbon.server.admin | 4.4.11 ≤ v < 4.4.11.9 | CVEProject cvelistV5 (CNA) |
| WSO2 | org.wso2.carbon:org.wso2.carbon.server.admin | 4.4.26 ≤ v < 4.4.26.12 | CVEProject cvelistV5 (CNA) |
| WSO2 | org.wso2.carbon:org.wso2.carbon.server.admin | 4.4.32 ≤ v < 4.4.32.16 | CVEProject cvelistV5 (CNA) |
| WSO2 | org.wso2.carbon:org.wso2.carbon.server.admin | 4.4.35 ≤ v < 4.4.35.44 | CVEProject cvelistV5 (CNA) |
| WSO2 | org.wso2.carbon:org.wso2.carbon.server.admin | 4.4.7 ≤ v < 4.4.7.6 | CVEProject cvelistV5 (CNA) |
| WSO2 | org.wso2.carbon:org.wso2.carbon.server.admin | 4.4.9 ≤ v < 4.4.9.11 | CVEProject cvelistV5 (CNA) |
| WSO2 | org.wso2.carbon:org.wso2.carbon.server.admin | 4.5.1 ≤ v < 4.5.1.43 | CVEProject cvelistV5 (CNA) |
| WSO2 | org.wso2.carbon:org.wso2.carbon.server.admin | 4.6.0 ≤ v < 4.6.0.1990 | CVEProject cvelistV5 (CNA) |
| WSO2 | org.wso2.carbon:org.wso2.carbon.server.admin | 4.6.1 ≤ v < 4.6.1.149 | CVEProject cvelistV5 (CNA) |
| WSO2 | org.wso2.carbon:org.wso2.carbon.server.admin | 4.6.2 ≤ v < 4.6.2.667 | CVEProject cvelistV5 (CNA) |
| WSO2 | org.wso2.carbon:org.wso2.carbon.server.admin | 4.6.3 ≤ v < 4.6.3.36 | CVEProject cvelistV5 (CNA) |
| WSO2 | org.wso2.carbon:org.wso2.carbon.server.admin | 4.6.4 ≤ v < 4.6.4.14 | CVEProject cvelistV5 (CNA) |
| WSO2 | org.wso2.carbon:org.wso2.carbon.server.admin | 4.7.1 ≤ v < 4.7.1.68 | CVEProject cvelistV5 (CNA) |
| WSO2 | org.wso2.carbon:org.wso2.carbon.server.admin | 4.8.1 ≤ v < 4.8.1.39 | CVEProject cvelistV5 (CNA) |
| WSO2 | org.wso2.carbon:org.wso2.carbon.server.admin | 4.9 ≤ v < 4.9.29 | CVEProject cvelistV5 (CNA) |
| WSO2 | org.wso2.carbon:org.wso2.carbon.server.admin | 4.9.0 ≤ v < 4.9.0.99 | CVEProject cvelistV5 (CNA) |
| WSO2 | org.wso2.carbon:org.wso2.carbon.server.admin | 4.9.26 ≤ v < 4.9.26.25 | CVEProject cvelistV5 (CNA) |
| WSO2 | org.wso2.carbon:org.wso2.carbon.server.admin | 4.9.27 ≤ v < 4.9.27.10 | CVEProject cvelistV5 (CNA) |
| WSO2 | org.wso2.carbon:org.wso2.carbon.server.admin | 4.9.28 ≤ v < 4.9.28.11 | CVEProject cvelistV5 (CNA) |
منابع و راهنماها
۱
هشدار CVEهای بعدی این محصولمحصول را دنبال کنید تا آسیبپذیریهای تازه را در تلگرام بگیرید.
اطلاعات
- تاریخ انتشار
- ۱۴۰۴/۰۷/۲۴
- آخرین بهروزرسانی
- ۱۴۰۴/۰۷/۲۵
- وضعیت
- منتشرشده
- صادرکننده (CNA)
- WSO2
پیشبینی بهرهبرداری (EPSS)
۰٫۵۷٪
احتمال بهرهبرداری در ۳۰ روز
۴۷٫۴٪
صدک (نسبت به همهی CVEها)
ارزیابی SSVC (CISA)
- قابل خودکارسازی
- خیر
- وضعیت بهرهبرداری
- ندارد
- اثر فنی
- کامل
ضعفها (CWE)
- CWE-284Improper Access Control