Lucene search
K

CVE-2025-10853

🗓️ 05 Nov 2025 19:21:32Reported by WSO2Type 
cve
 cve
🔗 web.nvd.nist.gov👁 14 Views

Reflected XSS in WSO2 console due to improper output encoding enabling JavaScript injection.

Related
Detection
Affected
Refs
NVD
CNA
Node
OR
wso2api_managerMatch3.1.0
OR
wso2api_managerMatch3.2.0
OR
wso2api_managerMatch3.2.1
OR
wso2api_managerMatch4.0.0
OR
wso2api_managerMatch4.1.0-
OR
wso2api_managerMatch4.2.0-
OR
wso2api_managerMatch4.3.0-
OR
wso2api_managerMatch4.4.0-
OR
wso2api_managerMatch4.5.0-
OROROROROROROROROROROROR
[
  {
    "defaultStatus": "unaffected",
    "product": "WSO2 Open Banking IAM",
    "vendor": "WSO2",
    "versions": [
      {
        "lessThan": "2.0.0",
        "status": "unknown",
        "version": "0",
        "versionType": "custom"
      },
      {
        "lessThan": "2.0.0.413",
        "status": "affected",
        "version": "2.0.0",
        "versionType": "custom"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "WSO2 API Manager",
    "vendor": "WSO2",
    "versions": [
      {
        "lessThan": "3.1.0",
        "status": "unknown",
        "version": "0",
        "versionType": "custom"
      },
      {
        "lessThan": "3.1.0.344",
        "status": "affected",
        "version": "3.1.0",
        "versionType": "custom"
      },
      {
        "lessThan": "3.2.0.445",
        "status": "affected",
        "version": "3.2.0",
        "versionType": "custom"
      },
      {
        "lessThan": "3.2.1.65",
        "status": "affected",
        "version": "3.2.1",
        "versionType": "custom"
      },
      {
        "lessThan": "4.0.0.365",
        "status": "affected",
        "version": "4.0.0",
        "versionType": "custom"
      },
      {
        "lessThan": "4.1.0.227",
        "status": "affected",
        "version": "4.1.0",
        "versionType": "custom"
      },
      {
        "lessThan": "4.2.0.167",
        "status": "affected",
        "version": "4.2.0",
        "versionType": "custom"
      },
      {
        "lessThan": "4.3.0.79",
        "status": "affected",
        "version": "4.3.0",
        "versionType": "custom"
      },
      {
        "lessThan": "4.4.0.43",
        "status": "affected",
        "version": "4.4.0",
        "versionType": "custom"
      },
      {
        "lessThan": "4.5.0.26",
        "status": "affected",
        "version": "4.5.0",
        "versionType": "custom"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "WSO2 Identity Server",
    "vendor": "WSO2",
    "versions": [
      {
        "lessThan": "5.10.0",
        "status": "unknown",
        "version": "0",
        "versionType": "custom"
      },
      {
        "lessThan": "5.10.0.373",
        "status": "affected",
        "version": "5.10.0",
        "versionType": "custom"
      },
      {
        "lessThan": "5.11.0.417",
        "status": "affected",
        "version": "5.11.0",
        "versionType": "custom"
      },
      {
        "lessThan": "6.0.0.247",
        "status": "affected",
        "version": "6.0.0",
        "versionType": "custom"
      },
      {
        "lessThan": "6.1.0.246",
        "status": "affected",
        "version": "6.1.0",
        "versionType": "custom"
      },
      {
        "lessThan": "7.0.0.122",
        "status": "affected",
        "version": "7.0.0",
        "versionType": "custom"
      },
      {
        "lessThan": "7.1.0.29",
        "status": "affected",
        "version": "7.1.0",
        "versionType": "custom"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "WSO2 Open Banking AM",
    "vendor": "WSO2",
    "versions": [
      {
        "lessThan": "2.0.0",
        "status": "unknown",
        "version": "0",
        "versionType": "custom"
      },
      {
        "lessThan": "2.0.0.393",
        "status": "affected",
        "version": "2.0.0",
        "versionType": "custom"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "WSO2 Identity Server as Key Manager",
    "vendor": "WSO2",
    "versions": [
      {
        "lessThan": "5.10.0",
        "status": "unknown",
        "version": "0",
        "versionType": "custom"
      },
      {
        "lessThan": "5.10.0.363",
        "status": "affected",
        "version": "5.10.0",
        "versionType": "custom"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "WSO2 Enterprise Integrator",
    "vendor": "WSO2",
    "versions": [
      {
        "lessThan": "6.6.0",
        "status": "unknown",
        "version": "0",
        "versionType": "custom"
      },
      {
        "lessThan": "6.6.0.223",
        "status": "affected",
        "version": "6.6.0",
        "versionType": "custom"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "WSO2 API Control Plane",
    "vendor": "WSO2",
    "versions": [
      {
        "lessThan": "4.5.0.27",
        "status": "affected",
        "version": "4.5.0",
        "versionType": "custom"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "WSO2 Universal Gateway",
    "vendor": "WSO2",
    "versions": [
      {
        "lessThan": "4.5.0.25",
        "status": "affected",
        "version": "4.5.0",
        "versionType": "custom"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "WSO2 Traffic Manager",
    "vendor": "WSO2",
    "versions": [
      {
        "lessThan": "4.5.0.25",
        "status": "affected",
        "version": "4.5.0",
        "versionType": "custom"
      }
    ]
  },
  {
    "defaultStatus": "unknown",
    "packageName": "org.wso2.carbon.registry:org.wso2.carbon.registry.info.ui",
    "product": "org.wso2.carbon.registry:org.wso2.carbon.registry.info.ui",
    "vendor": "WSO2",
    "versions": [
      {
        "lessThan": "4.7.32.14",
        "status": "affected",
        "version": "4.7.32",
        "versionType": "custom"
      },
      {
        "lessThan": "4.7.35.11",
        "status": "affected",
        "version": "4.7.35",
        "versionType": "custom"
      },
      {
        "lessThan": "4.7.39.9",
        "status": "affected",
        "version": "4.7.39",
        "versionType": "custom"
      },
      {
        "lessThan": "4.7.51.4",
        "status": "affected",
        "version": "4.7.51",
        "versionType": "custom"
      },
      {
        "lessThan": "4.8.3.9",
        "status": "affected",
        "version": "4.8.3",
        "versionType": "custom"
      },
      {
        "lessThan": "4.8.13.6",
        "status": "affected",
        "version": "4.8.13",
        "versionType": "custom"
      },
      {
        "lessThan": "4.8.32.3",
        "status": "affected",
        "version": "4.8.32",
        "versionType": "custom"
      },
      {
        "lessThan": "4.8.36.1",
        "status": "affected",
        "version": "4.8.36",
        "versionType": "custom"
      },
      {
        "lessThan": "4.8.43.1",
        "status": "affected",
        "version": "4.8.43",
        "versionType": "custom"
      },
      {
        "lessThanOrEqual": "*",
        "status": "unaffected",
        "version": "4.8.47",
        "versionType": "custom"
      }
    ]
  },
  {
    "defaultStatus": "unknown",
    "packageName": "org.wso2.carbon.registry:org.wso2.carbon.registry.resource.ui",
    "product": "org.wso2.carbon.registry:org.wso2.carbon.registry.resource.ui",
    "vendor": "WSO2",
    "versions": [
      {
        "lessThan": "4.7.24.7",
        "status": "affected",
        "version": "4.7.24",
        "versionType": "custom"
      },
      {
        "lessThan": "4.7.32.14",
        "status": "affected",
        "version": "4.7.32",
        "versionType": "custom"
      },
      {
        "lessThan": "4.7.33.13",
        "status": "affected",
        "version": "4.7.33",
        "versionType": "custom"
      },
      {
        "lessThan": "4.7.35.11",
        "status": "affected",
        "version": "4.7.35",
        "versionType": "custom"
      },
      {
        "lessThan": "4.7.39.9",
        "status": "affected",
        "version": "4.7.39",
        "versionType": "custom"
      },
      {
        "lessThan": "4.7.51.4",
        "status": "affected",
        "version": "4.7.51",
        "versionType": "custom"
      },
      {
        "lessThan": "4.8.3.9",
        "status": "affected",
        "version": "4.8.3",
        "versionType": "custom"
      },
      {
        "lessThan": "4.8.9.5",
        "status": "affected",
        "version": "4.8.9",
        "versionType": "custom"
      },
      {
        "lessThan": "4.8.12.5",
        "status": "affected",
        "version": "4.8.12",
        "versionType": "custom"
      },
      {
        "lessThan": "4.8.13.6",
        "status": "affected",
        "version": "4.8.13",
        "versionType": "custom"
      },
      {
        "lessThan": "4.8.24.3",
        "status": "affected",
        "version": "4.8.24",
        "versionType": "custom"
      },
      {
        "lessThan": "4.8.32.3",
        "status": "affected",
        "version": "4.8.32",
        "versionType": "custom"
      },
      {
        "lessThan": "4.8.36.1",
        "status": "affected",
        "version": "4.8.36",
        "versionType": "custom"
      },
      {
        "lessThan": "4.8.43.1",
        "status": "affected",
        "version": "4.8.43",
        "versionType": "custom"
      },
      {
        "lessThanOrEqual": "*",
        "status": "unaffected",
        "version": "4.8.47",
        "versionType": "custom"
      }
    ]
  },
  {
    "defaultStatus": "unknown",
    "packageName": "org.wso2.carbon.governance:org.wso2.carbon.governance.wsdltool.ui",
    "product": "org.wso2.carbon.governance:org.wso2.carbon.governance.wsdltool.ui",
    "vendor": "WSO2",
    "versions": [
      {
        "lessThan": "4.8.19.5",
        "status": "affected",
        "version": "4.8.19",
        "versionType": "custom"
      },
      {
        "lessThan": "4.8.21.9",
        "status": "affected",
        "version": "4.8.21",
        "versionType": "custom"
      },
      {
        "lessThan": "4.8.28.3",
        "status": "affected",
        "version": "4.8.28",
        "versionType": "custom"
      },
      {
        "lessThan": "4.8.30.3",
        "status": "affected",
        "version": "4.8.30",
        "versionType": "custom"
      },
      {
        "lessThan": "4.8.32.1",
        "status": "affected",
        "version": "4.8.32",
        "versionType": "custom"
      },
      {
        "lessThan": "4.8.33.3",
        "status": "affected",
        "version": "4.8.33",
        "versionType": "custom"
      },
      {
        "lessThan": "4.8.34.3",
        "status": "affected",
        "version": "4.8.34",
        "versionType": "custom"
      },
      {
        "lessThanOrEqual": "*",
        "status": "affected",
        "version": "4.8.35",
        "versionType": "custom"
      }
    ]
  },
  {
    "defaultStatus": "unknown",
    "packageName": "org.wso2.carbon.identity.inbound.auth.oauth2:org.wso2.carbon.identity.oauth.ui",
    "product": "org.wso2.carbon.identity.inbound.auth.oauth2:org.wso2.carbon.identity.oauth.ui",
    "vendor": "WSO2",
    "versions": [
      {
        "lessThan": "6.4.2.165",
        "status": "affected",
        "version": "6.4.2",
        "versionType": "custom"
      },
      {
        "lessThan": "6.4.111.155",
        "status": "affected",
        "version": "6.4.111",
        "versionType": "custom"
      },
      {
        "lessThan": "6.4.176.28",
        "status": "affected",
        "version": "6.4.176",
        "versionType": "custom"
      },
      {
        "lessThan": "6.4.180.12",
        "status": "affected",
        "version": "6.4.180",
        "versionType": "custom"
      },
      {
        "lessThan": "6.9.6.26",
        "status": "affected",
        "version": "6.9.6",
        "versionType": "custom"
      },
      {
        "lessThan": "6.13.16.19",
        "status": "affected",
        "version": "6.13.16",
        "versionType": "custom"
      },
      {
        "lessThan": "6.13.19.12",
        "status": "affected",
        "version": "6.13.19",
        "versionType": "custom"
      },
      {
        "lessThan": "6.13.27.5",
        "status": "affected",
        "version": "6.13.27",
        "versionType": "custom"
      },
      {
        "lessThanOrEqual": "6.13.*",
        "status": "unaffected",
        "version": "6.13.38",
        "versionType": "custom"
      },
      {
        "lessThanOrEqual": "*",
        "status": "unaffected",
        "version": "7.0.349",
        "versionType": "custom"
      }
    ]
  }
]

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

17 Jun 2026 08:29Current
5.4Medium risk
Vulners AI Score5.4
CVSS 3.15.2 - 6.1
EPSS0.00168
SSVC
14