Lucene search
+L

CVE-2025-13394

🗓️ 06 Aug 2026 07:33:17Reported by WSO2Type 
cve
 cve
🔗 web.nvd.nist.gov👁 10 Views

Cross site request forgery flaw in Carbon console uses GET for state changes; SameSite Lax ineffective.

Related
Affected
Refs
[
  {
    "defaultStatus": "unaffected",
    "product": "WSO2 Identity Server",
    "vendor": "WSO2",
    "versions": [
      {
        "lessThan": "5.10.0",
        "status": "unknown",
        "version": "0",
        "versionType": "custom"
      },
      {
        "lessThan": "5.10.0.381",
        "status": "affected",
        "version": "5.10.0",
        "versionType": "custom"
      },
      {
        "lessThan": "5.11.0.428",
        "status": "affected",
        "version": "5.11.0",
        "versionType": "custom"
      },
      {
        "lessThan": "6.0.0.255",
        "status": "affected",
        "version": "6.0.0",
        "versionType": "custom"
      },
      {
        "lessThan": "6.1.0.256",
        "status": "affected",
        "version": "6.1.0",
        "versionType": "custom"
      },
      {
        "lessThan": "7.0.0.133",
        "status": "affected",
        "version": "7.0.0",
        "versionType": "custom"
      },
      {
        "lessThan": "7.1.0.41",
        "status": "affected",
        "version": "7.1.0",
        "versionType": "custom"
      },
      {
        "lessThan": "7.2.0.3",
        "status": "affected",
        "version": "7.2.0",
        "versionType": "custom"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "WSO2 API Manager",
    "vendor": "WSO2",
    "versions": [
      {
        "lessThan": "3.1.0",
        "status": "unknown",
        "version": "0",
        "versionType": "custom"
      },
      {
        "lessThan": "3.1.0.352",
        "status": "affected",
        "version": "3.1.0",
        "versionType": "custom"
      },
      {
        "lessThan": "3.2.0.456",
        "status": "affected",
        "version": "3.2.0",
        "versionType": "custom"
      },
      {
        "lessThan": "3.2.1.75",
        "status": "affected",
        "version": "3.2.1",
        "versionType": "custom"
      },
      {
        "lessThan": "4.0.0.376",
        "status": "affected",
        "version": "4.0.0",
        "versionType": "custom"
      },
      {
        "lessThan": "4.1.0.239",
        "status": "affected",
        "version": "4.1.0",
        "versionType": "custom"
      },
      {
        "lessThan": "4.2.0.179",
        "status": "affected",
        "version": "4.2.0",
        "versionType": "custom"
      },
      {
        "lessThan": "4.3.0.91",
        "status": "affected",
        "version": "4.3.0",
        "versionType": "custom"
      },
      {
        "lessThan": "4.4.0.55",
        "status": "affected",
        "version": "4.4.0",
        "versionType": "custom"
      },
      {
        "lessThan": "4.5.0.38",
        "status": "affected",
        "version": "4.5.0",
        "versionType": "custom"
      },
      {
        "lessThan": "4.6.0.3",
        "status": "affected",
        "version": "4.6.0",
        "versionType": "custom"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "WSO2 Open Banking IAM",
    "vendor": "WSO2",
    "versions": [
      {
        "lessThan": "2.0.0",
        "status": "unknown",
        "version": "0",
        "versionType": "custom"
      },
      {
        "lessThan": "2.0.0.421",
        "status": "affected",
        "version": "2.0.0",
        "versionType": "custom"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "WSO2 Open Banking AM",
    "vendor": "WSO2",
    "versions": [
      {
        "lessThan": "2.0.0",
        "status": "unknown",
        "version": "0",
        "versionType": "custom"
      },
      {
        "lessThan": "2.0.0.401",
        "status": "affected",
        "version": "2.0.0",
        "versionType": "custom"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "WSO2 Identity Server as Key Manager",
    "vendor": "WSO2",
    "versions": [
      {
        "lessThan": "5.10.0",
        "status": "unknown",
        "version": "0",
        "versionType": "custom"
      },
      {
        "lessThan": "5.10.0.372",
        "status": "affected",
        "version": "5.10.0",
        "versionType": "custom"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "WSO2 API Control Plane",
    "vendor": "WSO2",
    "versions": [
      {
        "lessThan": "4.5.0",
        "status": "unknown",
        "version": "0",
        "versionType": "custom"
      },
      {
        "lessThan": "4.5.0.39",
        "status": "affected",
        "version": "4.5.0",
        "versionType": "custom"
      },
      {
        "lessThan": "4.6.0.3",
        "status": "affected",
        "version": "4.6.0",
        "versionType": "custom"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "WSO2 Universal Gateway",
    "vendor": "WSO2",
    "versions": [
      {
        "lessThan": "4.5.0",
        "status": "unknown",
        "version": "0",
        "versionType": "custom"
      },
      {
        "lessThan": "4.5.0.37",
        "status": "affected",
        "version": "4.5.0",
        "versionType": "custom"
      },
      {
        "lessThan": "4.6.0.3",
        "status": "affected",
        "version": "4.6.0",
        "versionType": "custom"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "WSO2 Traffic Manager",
    "vendor": "WSO2",
    "versions": [
      {
        "lessThan": "4.5.0",
        "status": "unknown",
        "version": "0",
        "versionType": "custom"
      },
      {
        "lessThan": "4.5.0.37",
        "status": "affected",
        "version": "4.5.0",
        "versionType": "custom"
      },
      {
        "lessThan": "4.6.0.3",
        "status": "affected",
        "version": "4.6.0",
        "versionType": "custom"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "WSO2 Enterprise Integrator",
    "vendor": "WSO2",
    "versions": [
      {
        "lessThan": "6.6.0",
        "status": "unknown",
        "version": "0",
        "versionType": "custom"
      },
      {
        "lessThan": "6.6.0.227",
        "status": "affected",
        "version": "6.6.0",
        "versionType": "custom"
      }
    ]
  },
  {
    "defaultStatus": "unknown",
    "packageName": "org.wso2.carbon.identity.framework:org.wso2.carbon.identity.entitlement.ui",
    "product": "WSO2 Carbon Identity Entitlement UI",
    "vendor": "WSO2",
    "versions": [
      {
        "lessThan": "5.17.5.331",
        "status": "affected",
        "version": "5.17.5",
        "versionType": "custom"
      },
      {
        "lessThan": "5.18.187.329",
        "status": "affected",
        "version": "5.18.187",
        "versionType": "custom"
      },
      {
        "lessThan": "5.23.8.210",
        "status": "affected",
        "version": "5.23.8",
        "versionType": "custom"
      },
      {
        "lessThan": "5.25.92.166",
        "status": "affected",
        "version": "5.25.92",
        "versionType": "custom"
      },
      {
        "lessThan": "7.0.78.157",
        "status": "affected",
        "version": "7.0.78",
        "versionType": "custom"
      },
      {
        "lessThanOrEqual": "*",
        "status": "unaffected",
        "version": "x",
        "versionType": "custom"
      }
    ]
  },
  {
    "defaultStatus": "unknown",
    "packageName": "org.wso2.carbon.identity.framework:org.wso2.carbon.identity.mgt.ui",
    "product": "WSO2 Carbon Identity Management UI1",
    "vendor": "WSO2",
    "versions": [
      {
        "lessThan": "5.17.5.330",
        "status": "affected",
        "version": "5.17.5",
        "versionType": "custom"
      },
      {
        "lessThan": "5.17.5.331",
        "status": "affected",
        "version": "5.17.5",
        "versionType": "custom"
      },
      {
        "lessThan": "5.17.118.22",
        "status": "affected",
        "version": "5.17.118",
        "versionType": "custom"
      },
      {
        "lessThan": "5.18.187.328",
        "status": "affected",
        "version": "5.18.187",
        "versionType": "custom"
      },
      {
        "lessThan": "5.18.187.329",
        "status": "affected",
        "version": "5.18.187",
        "versionType": "custom"
      },
      {
        "lessThan": "5.18.248.31",
        "status": "affected",
        "version": "5.18.248",
        "versionType": "custom"
      },
      {
        "lessThan": "5.23.8.210",
        "status": "affected",
        "version": "5.23.8",
        "versionType": "custom"
      },
      {
        "lessThan": "5.24.8.26",
        "status": "affected",
        "version": "5.24.8",
        "versionType": "custom"
      },
      {
        "lessThan": "5.25.92.166",
        "status": "affected",
        "version": "5.25.92",
        "versionType": "custom"
      },
      {
        "lessThan": "5.25.705.21",
        "status": "affected",
        "version": "5.25.705",
        "versionType": "custom"
      },
      {
        "lessThan": "5.25.713.10",
        "status": "affected",
        "version": "5.25.713",
        "versionType": "custom"
      },
      {
        "lessThan": "5.25.724.5",
        "status": "affected",
        "version": "5.25.724",
        "versionType": "custom"
      },
      {
        "lessThan": "5.25.736.1",
        "status": "affected",
        "version": "5.25.736",
        "versionType": "custom"
      },
      {
        "lessThan": "7.0.78.157",
        "status": "affected",
        "version": "7.0.78",
        "versionType": "custom"
      },
      {
        "lessThan": "7.8.23.67",
        "status": "affected",
        "version": "7.8.23",
        "versionType": "custom"
      },
      {
        "lessThan": "7.8.586.7",
        "status": "affected",
        "version": "7.8.586",
        "versionType": "custom"
      },
      {
        "lessThanOrEqual": "*",
        "status": "unaffected",
        "version": "x",
        "versionType": "custom"
      }
    ]
  },
  {
    "defaultStatus": "unknown",
    "packageName": "org.wso2.carbon.identity.framework:org.wso2.carbon.identity.user.store.configuration.ui",
    "product": "WSO2 Carbon Identity User Store Configuration UI",
    "vendor": "WSO2",
    "versions": [
      {
        "lessThan": "5.14.127.13",
        "status": "affected",
        "version": "5.14.127",
        "versionType": "custom"
      },
      {
        "lessThan": "5.17.5.330",
        "status": "affected",
        "version": "5.17.5",
        "versionType": "custom"
      },
      {
        "lessThan": "5.17.5.331",
        "status": "affected",
        "version": "5.17.5",
        "versionType": "custom"
      },
      {
        "lessThan": "5.17.118.22",
        "status": "affected",
        "version": "5.17.118",
        "versionType": "custom"
      },
      {
        "lessThan": "5.18.187.328",
        "status": "affected",
        "version": "5.18.187",
        "versionType": "custom"
      },
      {
        "lessThan": "5.18.187.329",
        "status": "affected",
        "version": "5.18.187",
        "versionType": "custom"
      },
      {
        "lessThan": "5.18.248.31",
        "status": "affected",
        "version": "5.18.248",
        "versionType": "custom"
      },
      {
        "lessThan": "5.23.8.210",
        "status": "affected",
        "version": "5.23.8",
        "versionType": "custom"
      },
      {
        "lessThan": "5.24.8.26",
        "status": "affected",
        "version": "5.24.8",
        "versionType": "custom"
      },
      {
        "lessThan": "5.25.92.166",
        "status": "affected",
        "version": "5.25.92",
        "versionType": "custom"
      },
      {
        "lessThan": "5.25.705.21",
        "status": "affected",
        "version": "5.25.705",
        "versionType": "custom"
      },
      {
        "lessThan": "5.25.713.10",
        "status": "affected",
        "version": "5.25.713",
        "versionType": "custom"
      },
      {
        "lessThan": "5.25.724.5",
        "status": "affected",
        "version": "5.25.724",
        "versionType": "custom"
      },
      {
        "lessThan": "5.25.736.1",
        "status": "affected",
        "version": "5.25.736",
        "versionType": "custom"
      },
      {
        "lessThan": "7.0.78.157",
        "status": "affected",
        "version": "7.0.78",
        "versionType": "custom"
      },
      {
        "lessThan": "7.8.23.67",
        "status": "affected",
        "version": "7.8.23",
        "versionType": "custom"
      },
      {
        "lessThan": "7.8.586.7",
        "status": "affected",
        "version": "7.8.586",
        "versionType": "custom"
      },
      {
        "lessThanOrEqual": "*",
        "status": "unaffected",
        "version": "x",
        "versionType": "custom"
      }
    ]
  },
  {
    "defaultStatus": "unknown",
    "packageName": "org.wso2.carbon:org.wso2.carbon.registry.profiles.ui",
    "product": "WSO2 Carbon Registry Profiles UI",
    "vendor": "WSO2",
    "versions": [
      {
        "lessThan": "4.7.32.18",
        "status": "affected",
        "version": "4.7.32",
        "versionType": "custom"
      },
      {
        "lessThan": "4.7.33.16",
        "status": "affected",
        "version": "4.7.33",
        "versionType": "custom"
      },
      {
        "lessThan": "4.8.9.16",
        "status": "affected",
        "version": "4.8.9",
        "versionType": "custom"
      },
      {
        "lessThan": "4.8.12.8",
        "status": "affected",
        "version": "4.8.12",
        "versionType": "custom"
      },
      {
        "lessThan": "4.8.24.6",
        "status": "affected",
        "version": "4.8.24",
        "versionType": "custom"
      },
      {
        "lessThan": "4.8.43.4",
        "status": "affected",
        "version": "4.8.43",
        "versionType": "custom"
      },
      {
        "lessThan": "4.8.50.3",
        "status": "affected",
        "version": "4.8.50",
        "versionType": "custom"
      },
      {
        "lessThanOrEqual": "*",
        "status": "unaffected",
        "version": "x",
        "versionType": "custom"
      }
    ]
  },
  {
    "defaultStatus": "unknown",
    "packageName": "org.wso2.carbon:org.wso2.carbon.registry.properties.ui",
    "product": "WSO2 Carbon Registry Properties UI",
    "vendor": "WSO2",
    "versions": [
      {
        "lessThan": "4.7.24.11",
        "status": "affected",
        "version": "4.7.24",
        "versionType": "custom"
      },
      {
        "lessThan": "4.7.32.16",
        "status": "affected",
        "version": "4.7.32",
        "versionType": "custom"
      },
      {
        "lessThan": "4.7.32.18",
        "status": "affected",
        "version": "4.7.32",
        "versionType": "custom"
      },
      {
        "lessThan": "4.7.33.16",
        "status": "affected",
        "version": "4.7.33",
        "versionType": "custom"
      },
      {
        "lessThan": "4.7.35.15",
        "status": "affected",
        "version": "4.7.35",
        "versionType": "custom"
      },
      {
        "lessThan": "4.7.39.12",
        "status": "affected",
        "version": "4.7.39",
        "versionType": "custom"
      },
      {
        "lessThan": "4.7.51.8",
        "status": "affected",
        "version": "4.7.51",
        "versionType": "custom"
      },
      {
        "lessThan": "4.8.3.10",
        "status": "affected",
        "version": "4.8.3",
        "versionType": "custom"
      },
      {
        "lessThan": "4.8.9.16",
        "status": "affected",
        "version": "4.8.9",
        "versionType": "custom"
      },
      {
        "lessThan": "4.8.12.8",
        "status": "affected",
        "version": "4.8.12",
        "versionType": "custom"
      },
      {
        "lessThan": "4.8.13.9",
        "status": "affected",
        "version": "4.8.13",
        "versionType": "custom"
      },
      {
        "lessThan": "4.8.24.6",
        "status": "affected",
        "version": "4.8.24",
        "versionType": "custom"
      },
      {
        "lessThan": "4.8.32.4",
        "status": "affected",
        "version": "4.8.32",
        "versionType": "custom"
      },
      {
        "lessThan": "4.8.36.2",
        "status": "affected",
        "version": "4.8.36",
        "versionType": "custom"
      },
      {
        "lessThan": "4.8.43.2",
        "status": "affected",
        "version": "4.8.43",
        "versionType": "custom"
      },
      {
        "lessThan": "4.8.43.4",
        "status": "affected",
        "version": "4.8.43",
        "versionType": "custom"
      },
      {
        "lessThan": "4.8.50.1",
        "status": "affected",
        "version": "4.8.50",
        "versionType": "custom"
      },
      {
        "lessThan": "4.8.50.3",
        "status": "affected",
        "version": "4.8.50",
        "versionType": "custom"
      },
      {
        "lessThanOrEqual": "*",
        "status": "unaffected",
        "version": "x",
        "versionType": "custom"
      }
    ]
  },
  {
    "defaultStatus": "unknown",
    "packageName": "org.wso2.carbon:org.wso2.carbon.registry.resource.ui",
    "product": "WSO2 Carbon Registry Resources UI",
    "vendor": "WSO2",
    "versions": [
      {
        "lessThan": "4.7.24.11",
        "status": "affected",
        "version": "4.7.24",
        "versionType": "custom"
      },
      {
        "lessThan": "4.7.32.16",
        "status": "affected",
        "version": "4.7.32",
        "versionType": "custom"
      },
      {
        "lessThan": "4.7.32.18",
        "status": "affected",
        "version": "4.7.32",
        "versionType": "custom"
      },
      {
        "lessThan": "4.7.33.16",
        "status": "affected",
        "version": "4.7.33",
        "versionType": "custom"
      },
      {
        "lessThan": "4.7.35.15",
        "status": "affected",
        "version": "4.7.35",
        "versionType": "custom"
      },
      {
        "lessThan": "4.7.39.12",
        "status": "affected",
        "version": "4.7.39",
        "versionType": "custom"
      },
      {
        "lessThan": "4.7.51.8",
        "status": "affected",
        "version": "4.7.51",
        "versionType": "custom"
      },
      {
        "lessThan": "4.8.3.10",
        "status": "affected",
        "version": "4.8.3",
        "versionType": "custom"
      },
      {
        "lessThan": "4.8.9.16",
        "status": "affected",
        "version": "4.8.9",
        "versionType": "custom"
      },
      {
        "lessThan": "4.8.12.8",
        "status": "affected",
        "version": "4.8.12",
        "versionType": "custom"
      },
      {
        "lessThan": "4.8.13.9",
        "status": "affected",
        "version": "4.8.13",
        "versionType": "custom"
      },
      {
        "lessThan": "4.8.24.6",
        "status": "affected",
        "version": "4.8.24",
        "versionType": "custom"
      },
      {
        "lessThan": "4.8.32.4",
        "status": "affected",
        "version": "4.8.32",
        "versionType": "custom"
      },
      {
        "lessThan": "4.8.36.2",
        "status": "affected",
        "version": "4.8.36",
        "versionType": "custom"
      },
      {
        "lessThan": "4.8.43.2",
        "status": "affected",
        "version": "4.8.43",
        "versionType": "custom"
      },
      {
        "lessThan": "4.8.43.4",
        "status": "affected",
        "version": "4.8.43",
        "versionType": "custom"
      },
      {
        "lessThan": "4.8.50.1",
        "status": "affected",
        "version": "4.8.50",
        "versionType": "custom"
      },
      {
        "lessThan": "4.8.50.3",
        "status": "affected",
        "version": "4.8.50",
        "versionType": "custom"
      },
      {
        "lessThanOrEqual": "*",
        "status": "unaffected",
        "version": "x",
        "versionType": "custom"
      }
    ]
  },
  {
    "defaultStatus": "unknown",
    "packageName": "org.wso2.carbon:org.wso2.carbon.registry.search.ui",
    "product": "WSO2 Carbon Registry Search UI",
    "vendor": "WSO2",
    "versions": [
      {
        "lessThan": "4.7.24.11",
        "status": "affected",
        "version": "4.7.24",
        "versionType": "custom"
      },
      {
        "lessThan": "4.7.32.16",
        "status": "affected",
        "version": "4.7.32",
        "versionType": "custom"
      },
      {
        "lessThan": "4.7.32.18",
        "status": "affected",
        "version": "4.7.32",
        "versionType": "custom"
      },
      {
        "lessThan": "4.7.33.16",
        "status": "affected",
        "version": "4.7.33",
        "versionType": "custom"
      },
      {
        "lessThan": "4.7.35.15",
        "status": "affected",
        "version": "4.7.35",
        "versionType": "custom"
      },
      {
        "lessThan": "4.7.39.12",
        "status": "affected",
        "version": "4.7.39",
        "versionType": "custom"
      },
      {
        "lessThan": "4.7.51.8",
        "status": "affected",
        "version": "4.7.51",
        "versionType": "custom"
      },
      {
        "lessThan": "4.8.3.10",
        "status": "affected",
        "version": "4.8.3",
        "versionType": "custom"
      },
      {
        "lessThan": "4.8.9.16",
        "status": "affected",
        "version": "4.8.9",
        "versionType": "custom"
      },
      {
        "lessThan": "4.8.12.8",
        "status": "affected",
        "version": "4.8.12",
        "versionType": "custom"
      },
      {
        "lessThan": "4.8.13.9",
        "status": "affected",
        "version": "4.8.13",
        "versionType": "custom"
      },
      {
        "lessThan": "4.8.24.6",
        "status": "affected",
        "version": "4.8.24",
        "versionType": "custom"
      },
      {
        "lessThanOrEqual": "*",
        "status": "unaffected",
        "version": "x",
        "versionType": "custom"
      }
    ]
  },
  {
    "defaultStatus": "unknown",
    "packageName": "org.wso2.carbon:org.wso2.carbon.tenant.mgt.ui",
    "product": "WSO2 Stratos User Interface For Tenant CRUD Operations",
    "vendor": "WSO2",
    "versions": [
      {
        "lessThan": "4.8.1.6",
        "status": "affected",
        "version": "4.8.1",
        "versionType": "custom"
      },
      {
        "lessThan": "4.8.7.3",
        "status": "affected",
        "version": "4.8.7",
        "versionType": "custom"
      },
      {
        "lessThan": "4.9.8.7",
        "status": "affected",
        "version": "4.9.8",
        "versionType": "custom"
      },
      {
        "lessThan": "4.9.10.7",
        "status": "affected",
        "version": "4.9.10",
        "versionType": "custom"
      },
      {
        "lessThan": "4.9.10.8",
        "status": "affected",
        "version": "4.9.10",
        "versionType": "custom"
      },
      {
        "lessThan": "4.9.20.5",
        "status": "affected",
        "version": "4.9.20",
        "versionType": "custom"
      },
      {
        "lessThan": "4.9.27.1",
        "status": "affected",
        "version": "4.9.27",
        "versionType": "custom"
      },
      {
        "lessThan": "4.9.31.1",
        "status": "affected",
        "version": "4.9.31",
        "versionType": "custom"
      },
      {
        "lessThan": "4.9.34.1",
        "status": "affected",
        "version": "4.9.34",
        "versionType": "custom"
      },
      {
        "lessThan": "4.9.42.1",
        "status": "affected",
        "version": "4.9.42",
        "versionType": "custom"
      },
      {
        "lessThan": "4.11.0.7",
        "status": "affected",
        "version": "4.11.0",
        "versionType": "custom"
      },
      {
        "lessThan": "4.11.19.4",
        "status": "affected",
        "version": "4.11.19",
        "versionType": "custom"
      },
      {
        "lessThan": "4.11.34.3",
        "status": "affected",
        "version": "4.11.34",
        "versionType": "custom"
      },
      {
        "lessThan": "4.11.45.1",
        "status": "affected",
        "version": "4.11.45",
        "versionType": "custom"
      },
      {
        "lessThanOrEqual": "*",
        "status": "unaffected",
        "version": "x",
        "versionType": "custom"
      }
    ]
  },
  {
    "defaultStatus": "unknown",
    "packageName": "org.wso2.carbon.multitenancy:org.wso2.carbon.tenant.sso.redirector.ui",
    "product": "WSO2 Stratos SSO Redirector UI Component",
    "vendor": "WSO2",
    "versions": [
      {
        "lessThan": "4.8.1.6",
        "status": "affected",
        "version": "4.8.1",
        "versionType": "custom"
      },
      {
        "lessThanOrEqual": "*",
        "status": "unaffected",
        "version": "x",
        "versionType": "custom"
      }
    ]
  },
  {
    "defaultStatus": "unknown",
    "packageName": "org.wso2.carbon:org.wso2.carbon.email.verification.ui",
    "product": "WSO2 Carbon Email Verification UI",
    "vendor": "WSO2",
    "versions": [
      {
        "lessThan": "4.7.19.14",
        "status": "affected",
        "version": "4.7.19",
        "versionType": "custom"
      },
      {
        "lessThanOrEqual": "*",
        "status": "unaffected",
        "version": "x",
        "versionType": "custom"
      }
    ]
  },
  {
    "defaultStatus": "unknown",
    "packageName": "org.wso2.carbon:org.wso2.carbon.event.simulator.ui",
    "product": "WSO2 Carbon Event Simulator UI",
    "vendor": "WSO2",
    "versions": [
      {
        "lessThan": "2.2.11.1",
        "status": "affected",
        "version": "2.2.11",
        "versionType": "custom"
      },
      {
        "lessThan": "2.2.14.11",
        "status": "affected",
        "version": "2.2.14",
        "versionType": "custom"
      },
      {
        "lessThan": "2.2.14.12",
        "status": "affected",
        "version": "2.2.14",
        "versionType": "custom"
      },
      {
        "lessThan": "2.2.17.5",
        "status": "affected",
        "version": "2.2.17",
        "versionType": "custom"
      },
      {
        "lessThan": "2.3.1.4",
        "status": "affected",
        "version": "2.3.1",
        "versionType": "custom"
      },
      {
        "lessThan": "2.3.5.6",
        "status": "affected",
        "version": "2.3.5",
        "versionType": "custom"
      },
      {
        "lessThanOrEqual": "*",
        "status": "unaffected",
        "version": "x",
        "versionType": "custom"
      }
    ]
  },
  {
    "defaultStatus": "unknown",
    "packageName": "org.wso2.carbon.analytics-common:org.wso2.carbon.event.template.manager.ui",
    "product": "WSO2 Carbon Execution Manager UI",
    "vendor": "WSO2",
    "versions": [
      {
        "lessThan": "5.2.24.10",
        "status": "affected",
        "version": "5.2.24",
        "versionType": "custom"
      },
      {
        "lessThan": "5.2.26.22",
        "status": "affected",
        "version": "5.2.26",
        "versionType": "custom"
      },
      {
        "lessThan": "5.2.34.12",
        "status": "affected",
        "version": "5.2.34",
        "versionType": "custom"
      },
      {
        "lessThan": "5.2.41.7",
        "status": "affected",
        "version": "5.2.41",
        "versionType": "custom"
      },
      {
        "lessThan": "5.2.57.10",
        "status": "affected",
        "version": "5.2.57",
        "versionType": "custom"
      },
      {
        "lessThan": "5.3.5.9",
        "status": "affected",
        "version": "5.3.5",
        "versionType": "custom"
      },
      {
        "lessThanOrEqual": "*",
        "status": "unaffected",
        "version": "x",
        "versionType": "custom"
      }
    ]
  },
  {
    "defaultStatus": "unknown",
    "packageName": "org.wso2.carbon.governance:org.wso2.carbon.governance.custom.lifecycles.checklist.ui",
    "product": "WSO2 Carbon Governance Custom Lifecycle Checklist UI",
    "vendor": "WSO2",
    "versions": [
      {
        "lessThan": "4.8.14.4",
        "status": "affected",
        "version": "4.8.14",
        "versionType": "custom"
      },
      {
        "lessThan": "4.8.19.8",
        "status": "affected",
        "version": "4.8.19",
        "versionType": "custom"
      },
      {
        "lessThan": "4.8.21.10",
        "status": "affected",
        "version": "4.8.21",
        "versionType": "custom"
      },
      {
        "lessThan": "4.8.28.4",
        "status": "affected",
        "version": "4.8.28",
        "versionType": "custom"
      },
      {
        "lessThan": "4.8.30.6",
        "status": "affected",
        "version": "4.8.30",
        "versionType": "custom"
      },
      {
        "lessThan": "4.8.32.4",
        "status": "affected",
        "version": "4.8.32",
        "versionType": "custom"
      },
      {
        "lessThanOrEqual": "*",
        "status": "unaffected",
        "version": "x",
        "versionType": "custom"
      }
    ]
  },
  {
    "defaultStatus": "unknown",
    "packageName": "org.wso2.carbon.governance:org.wso2.carbon.governance.generic.ui",
    "product": "WSO2 Carbon Governance Generic Artifact User Interface",
    "vendor": "WSO2",
    "versions": [
      {
        "lessThan": "4.8.14.4",
        "status": "affected",
        "version": "4.8.14",
        "versionType": "custom"
      },
      {
        "lessThan": "4.8.19.8",
        "status": "affected",
        "version": "4.8.19",
        "versionType": "custom"
      },
      {
        "lessThan": "4.8.21.10",
        "status": "affected",
        "version": "4.8.21",
        "versionType": "custom"
      },
      {
        "lessThan": "4.8.28.4",
        "status": "affected",
        "version": "4.8.28",
        "versionType": "custom"
      },
      {
        "lessThan": "4.8.30.6",
        "status": "affected",
        "version": "4.8.30",
        "versionType": "custom"
      },
      {
        "lessThan": "4.8.32.4",
        "status": "affected",
        "version": "4.8.32",
        "versionType": "custom"
      },
      {
        "lessThan": "4.8.33.4",
        "status": "affected",
        "version": "4.8.33",
        "versionType": "custom"
      },
      {
        "lessThan": "4.8.34.5",
        "status": "affected",
        "version": "4.8.34",
        "versionType": "custom"
      },
      {
        "lessThan": "4.8.37.4",
        "status": "affected",
        "version": "4.8.37",
        "versionType": "custom"
      },
      {
        "lessThanOrEqual": "*",
        "status": "unaffected",
        "version": "x",
        "versionType": "custom"
      }
    ]
  },
  {
    "defaultStatus": "unknown",
    "packageName": "org.wso2.carbon.governance:org.wso2.carbon.governance.lcm.ui",
    "product": "WSO2 Carbon Governance Life Cycles User Interface",
    "vendor": "WSO2",
    "versions": [
      {
        "lessThan": "4.8.14.4",
        "status": "affected",
        "version": "4.8.14",
        "versionType": "custom"
      },
      {
        "lessThan": "4.8.19.8",
        "status": "affected",
        "version": "4.8.19",
        "versionType": "custom"
      },
      {
        "lessThan": "4.8.21.10",
        "status": "affected",
        "version": "4.8.21",
        "versionType": "custom"
      },
      {
        "lessThan": "4.8.28.4",
        "status": "affected",
        "version": "4.8.28",
        "versionType": "custom"
      },
      {
        "lessThan": "4.8.30.6",
        "status": "affected",
        "version": "4.8.30",
        "versionType": "custom"
      },
      {
        "lessThan": "4.8.32.4",
        "status": "affected",
        "version": "4.8.32",
        "versionType": "custom"
      },
      {
        "lessThanOrEqual": "*",
        "status": "unaffected",
        "version": "x",
        "versionType": "custom"
      }
    ]
  },
  {
    "defaultStatus": "unknown",
    "packageName": "org.wso2.carbon:org.wso2.carbon.governance.wsdltool.ui",
    "product": "WSO2 Carbon Governance WSDL Tool UI",
    "vendor": "WSO2",
    "versions": [
      {
        "lessThan": "4.8.14.4",
        "status": "affected",
        "version": "4.8.14",
        "versionType": "custom"
      },
      {
        "lessThan": "4.8.19.8",
        "status": "affected",
        "version": "4.8.19",
        "versionType": "custom"
      },
      {
        "lessThan": "4.8.21.10",
        "status": "affected",
        "version": "4.8.21",
        "versionType": "custom"
      },
      {
        "lessThan": "4.8.28.4",
        "status": "affected",
        "version": "4.8.28",
        "versionType": "custom"
      },
      {
        "lessThan": "4.8.30.6",
        "status": "affected",
        "version": "4.8.30",
        "versionType": "custom"
      },
      {
        "lessThan": "4.8.32.4",
        "status": "affected",
        "version": "4.8.32",
        "versionType": "custom"
      },
      {
        "lessThan": "4.8.33.4",
        "status": "affected",
        "version": "4.8.33",
        "versionType": "custom"
      },
      {
        "lessThan": "4.8.34.5",
        "status": "affected",
        "version": "4.8.34",
        "versionType": "custom"
      },
      {
        "lessThan": "4.8.37.4",
        "status": "affected",
        "version": "4.8.37",
        "versionType": "custom"
      },
      {
        "lessThanOrEqual": "*",
        "status": "unaffected",
        "version": "x",
        "versionType": "custom"
      }
    ]
  },
  {
    "defaultStatus": "unknown",
    "packageName": "org.wso2.carbon.commons:org.wso2.carbon.ndatasource.ui",
    "product": "WSO2 Carbon New Data Sources UI",
    "vendor": "WSO2",
    "versions": [
      {
        "lessThan": "4.7.19.13",
        "status": "affected",
        "version": "4.7.19",
        "versionType": "custom"
      },
      {
        "lessThan": "4.7.24.5",
        "status": "affected",
        "version": "4.7.24",
        "versionType": "custom"
      },
      {
        "lessThan": "4.7.32.10",
        "status": "affected",
        "version": "4.7.32",
        "versionType": "custom"
      },
      {
        "lessThan": "4.7.35.13",
        "status": "affected",
        "version": "4.7.35",
        "versionType": "custom"
      },
      {
        "lessThan": "4.7.49.7",
        "status": "affected",
        "version": "4.7.49",
        "versionType": "custom"
      },
      {
        "lessThan": "4.7.52.5",
        "status": "affected",
        "version": "4.7.52",
        "versionType": "custom"
      },
      {
        "lessThan": "4.9.2.8",
        "status": "affected",
        "version": "4.9.2",
        "versionType": "custom"
      },
      {
        "lessThan": "4.9.11.2",
        "status": "affected",
        "version": "4.9.11",
        "versionType": "custom"
      },
      {
        "lessThan": "4.9.18.1",
        "status": "affected",
        "version": "4.9.18",
        "versionType": "custom"
      },
      {
        "lessThanOrEqual": "*",
        "status": "unaffected",
        "version": "x",
        "versionType": "custom"
      }
    ]
  },
  {
    "defaultStatus": "unknown",
    "packageName": "org.wso2.carbon:org.wso2.carbon.registry.info.ui",
    "product": "WSO2 Carbon Registry Info UI2",
    "vendor": "WSO2",
    "versions": [
      {
        "lessThan": "4.7.32.16",
        "status": "affected",
        "version": "4.7.32",
        "versionType": "custom"
      },
      {
        "lessThan": "4.7.35.15",
        "status": "affected",
        "version": "4.7.35",
        "versionType": "custom"
      },
      {
        "lessThan": "4.7.39.12",
        "status": "affected",
        "version": "4.7.39",
        "versionType": "custom"
      },
      {
        "lessThan": "4.7.51.8",
        "status": "affected",
        "version": "4.7.51",
        "versionType": "custom"
      },
      {
        "lessThan": "4.8.3.10",
        "status": "affected",
        "version": "4.8.3",
        "versionType": "custom"
      },
      {
        "lessThan": "4.8.13.9",
        "status": "affected",
        "version": "4.8.13",
        "versionType": "custom"
      },
      {
        "lessThan": "4.8.32.4",
        "status": "affected",
        "version": "4.8.32",
        "versionType": "custom"
      },
      {
        "lessThan": "4.8.36.2",
        "status": "affected",
        "version": "4.8.36",
        "versionType": "custom"
      },
      {
        "lessThan": "4.8.43.2",
        "status": "affected",
        "version": "4.8.43",
        "versionType": "custom"
      },
      {
        "lessThan": "4.8.50.1",
        "status": "affected",
        "version": "4.8.50",
        "versionType": "custom"
      },
      {
        "lessThanOrEqual": "*",
        "status": "unaffected",
        "version": "x",
        "versionType": "custom"
      }
    ]
  },
  {
    "defaultStatus": "unknown",
    "packageName": "org.wso2.carbon:org.wso2.carbon.registry.relations.ui",
    "product": "WSO2 Carbon Registry Relations UI",
    "vendor": "WSO2",
    "versions": [
      {
        "lessThan": "4.7.24.11",
        "status": "affected",
        "version": "4.7.24",
        "versionType": "custom"
      },
      {
        "lessThan": "4.7.32.16",
        "status": "affected",
        "version": "4.7.32",
        "versionType": "custom"
      },
      {
        "lessThan": "4.7.35.15",
        "status": "affected",
        "version": "4.7.35",
        "versionType": "custom"
      },
      {
        "lessThan": "4.7.39.12",
        "status": "affected",
        "version": "4.7.39",
        "versionType": "custom"
      },
      {
        "lessThan": "4.7.51.8",
        "status": "affected",
        "version": "4.7.51",
        "versionType": "custom"
      },
      {
        "lessThan": "4.8.3.10",
        "status": "affected",
        "version": "4.8.3",
        "versionType": "custom"
      },
      {
        "lessThan": "4.8.13.9",
        "status": "affected",
        "version": "4.8.13",
        "versionType": "custom"
      },
      {
        "lessThan": "4.8.32.4",
        "status": "affected",
        "version": "4.8.32",
        "versionType": "custom"
      },
      {
        "lessThan": "4.8.36.2",
        "status": "affected",
        "version": "4.8.36",
        "versionType": "custom"
      },
      {
        "lessThan": "4.8.43.2",
        "status": "affected",
        "version": "4.8.43",
        "versionType": "custom"
      },
      {
        "lessThan": "4.8.50.1",
        "status": "affected",
        "version": "4.8.50",
        "versionType": "custom"
      },
      {
        "lessThanOrEqual": "*",
        "status": "unaffected",
        "version": "x",
        "versionType": "custom"
      }
    ]
  },
  {
    "defaultStatus": "unknown",
    "packageName": "org.wso2.carbon.registry:org.wso2.carbon.registry.indexing",
    "product": "WSO2 Carbon Registry Indexing",
    "vendor": "WSO2",
    "versions": [
      {
        "lessThan": "4.7.24",
        "status": "affected",
        "version": "4.7",
        "versionType": "custom"
      },
      {
        "lessThanOrEqual": "*",
        "status": "unaffected",
        "version": "x",
        "versionType": "custom"
      }
    ]
  },
  {
    "defaultStatus": "unknown",
    "packageName": "org.wso2.carbon:org.wso2.carbon.security.mgt.ui",
    "product": "WSO2 Carbon Security UI",
    "vendor": "WSO2",
    "versions": [
      {
        "lessThan": "5.14.127",
        "status": "affected",
        "version": "5.14",
        "versionType": "custom"
      },
      {
        "lessThanOrEqual": "*",
        "status": "unaffected",
        "version": "x",
        "versionType": "custom"
      }
    ]
  },
  {
    "defaultStatus": "unknown",
    "packageName": "org.wso2.carbon.messaging:org.wso2.carbon.andes.event.ui",
    "product": "WSO2 Carbon Component Andes Event UI",
    "vendor": "WSO2",
    "versions": [
      {
        "lessThan": "3.3.12.3",
        "status": "affected",
        "version": "3.3.12",
        "versionType": "custom"
      },
      {
        "lessThanOrEqual": "*",
        "status": "unaffected",
        "version": "x",
        "versionType": "custom"
      }
    ]
  },
  {
    "defaultStatus": "unknown",
    "packageName": "org.wso2.carbon.messaging:org.wso2.carbon.andes.ui",
    "product": "WSO2 Carbon Component Andes UI1",
    "vendor": "WSO2",
    "versions": [
      {
        "lessThan": "3.3.12.3",
        "status": "affected",
        "version": "3.3.12",
        "versionType": "custom"
      },
      {
        "lessThanOrEqual": "*",
        "status": "unaffected",
        "version": "x",
        "versionType": "custom"
      }
    ]
  },
  {
    "defaultStatus": "unknown",
    "packageName": "org.wso2.carbon.mediation:org.wso2.carbon.business.messaging.hl7.store.ui",
    "product": "WSO2 Carbon HL7 Business Messaging Store UI",
    "vendor": "WSO2",
    "versions": [
      {
        "lessThan": "4.7.30.53",
        "status": "affected",
        "version": "4.7.30",
        "versionType": "custom"
      },
      {
        "lessThanOrEqual": "*",
        "status": "unaffected",
        "version": "x",
        "versionType": "custom"
      }
    ]
  },
  {
    "defaultStatus": "unknown",
    "packageName": "org.wso2.carbonorg.wso2.carbon.endpoint.ui",
    "product": "WSO2 Carbon Endpoint Editor UI",
    "vendor": "WSO2",
    "versions": [
      {
        "lessThan": "4.7.30.53",
        "status": "affected",
        "version": "4.7.30",
        "versionType": "custom"
      },
      {
        "lessThanOrEqual": "*",
        "status": "unaffected",
        "version": "x",
        "versionType": "custom"
      }
    ]
  },
  {
    "defaultStatus": "unknown",
    "packageName": "org.wso2.carbon.mediationorg.wso2.carbon.event.sink.config.ui",
    "product": "WSO2 Carbon Publish Event Mediator Configuration UI",
    "vendor": "WSO2",
    "versions": [
      {
        "lessThan": "4.7.30.53",
        "status": "affected",
        "version": "4.7.30",
        "versionType": "custom"
      },
      {
        "lessThanOrEqual": "*",
        "status": "unaffected",
        "version": "x",
        "versionType": "custom"
      }
    ]
  },
  {
    "defaultStatus": "unknown",
    "packageName": "org.wso2.carbon.commons:org.wso2.carbon.event.ui",
    "product": "WSO2 Carbon Eventing UI",
    "vendor": "WSO2",
    "versions": [
      {
        "lessThan": "4.7.19.13",
        "status": "affected",
        "version": "4.7.19",
        "versionType": "custom"
      },
      {
        "lessThanOrEqual": "*",
        "status": "unaffected",
        "version": "x",
        "versionType": "custom"
      }
    ]
  },
  {
    "defaultStatus": "unknown",
    "packageName": "org.wso2.carbon.business-process:org.wso2.carbon.humantask.ui",
    "product": "WSO2 Carbon HumanTask UI",
    "vendor": "WSO2",
    "versions": [
      {
        "lessThan": "4.5.27.10",
        "status": "affected",
        "version": "4.5.27",
        "versionType": "custom"
      },
      {
        "lessThanOrEqual": "*",
        "status": "unaffected",
        "version": "x",
        "versionType": "custom"
      }
    ]
  },
  {
    "defaultStatus": "unknown",
    "packageName": "org.wso2.carbon:org.wso2.carbon.logging.admin.ui",
    "product": "WSO2 Carbon Logging UI",
    "vendor": "WSO2",
    "versions": [
      {
        "lessThan": "4.7.19.13",
        "status": "affected",
        "version": "4.7.19",
        "versionType": "custom"
      },
      {
        "lessThan": "4.7.24.5",
        "status": "affected",
        "version": "4.7.24",
        "versionType": "custom"
      },
      {
        "lessThan": "4.7.32.10",
        "status": "affected",
        "version": "4.7.32",
        "versionType": "custom"
      },
      {
        "lessThan": "4.7.52.5",
        "status": "affected",
        "version": "4.7.52",
        "versionType": "custom"
      },
      {
        "lessThanOrEqual": "*",
        "status": "unaffected",
        "version": "x",
        "versionType": "custom"
      }
    ]
  },
  {
    "defaultStatus": "unknown",
    "packageName": "org.wso2.carbon.mediation:org.wso2.carbon.mediation.templates.ui",
    "product": "WSO2 Carbon Template Editor UI",
    "vendor": "WSO2",
    "versions": [
      {
        "lessThan": "4.7.30.53",
        "status": "affected",
        "version": "4.7.30",
        "versionType": "custom"
      },
      {
        "lessThanOrEqual": "*",
        "status": "unaffected",
        "version": "x",
        "versionType": "custom"
      }
    ]
  },
  {
    "defaultStatus": "unknown",
    "packageName": "org.wso2.carbon:org.wso2.carbon.mediator.command.ui",
    "product": "WSO2 Carbon Command Mediator UI",
    "vendor": "WSO2",
    "versions": [
      {
        "lessThan": "4.7.30.53",
        "status": "affected",
        "version": "4.7.30",
        "versionType": "custom"
      },
      {
        "lessThanOrEqual": "*",
        "status": "unaffected",
        "version": "x",
        "versionType": "custom"
      }
    ]
  },
  {
    "defaultStatus": "unknown",
    "packageName": "org.wso2.carbon:org.wso2.carbon.mediator.rule.ui",
    "product": "WSO2 Carbon Rule Mediator UI",
    "vendor": "WSO2",
    "versions": [
      {
        "lessThan": "4.7.30.53",
        "status": "affected",
        "version": "4.7.30",
        "versionType": "custom"
      },
      {
        "lessThanOrEqual": "*",
        "status": "unaffected",
        "version": "x",
        "versionType": "custom"
      }
    ]
  },
  {
    "defaultStatus": "unknown",
    "packageName": "org.wso2.carbon:org.wso2.carbon.mediator.throttle.ui",
    "product": "WSO2 Carbon Throttle Mediator UI",
    "vendor": "WSO2",
    "versions": [
      {
        "lessThan": "4.7.30.53",
        "status": "affected",
        "version": "4.7.30",
        "versionType": "custom"
      },
      {
        "lessThanOrEqual": "*",
        "status": "unaffected",
        "version": "x",
        "versionType": "custom"
      }
    ]
  },
  {
    "defaultStatus": "unknown",
    "packageName": "org.wso2.carbon:org.wso2.carbon.ntask.core",
    "product": "WSO2 Carbon Tasks Core",
    "vendor": "WSO2",
    "versions": [
      {
        "lessThan": "4.7.19.13",
        "status": "affected",
        "version": "4.7.19",
        "versionType": "custom"
      },
      {
        "lessThanOrEqual": "*",
        "status": "unaffected",
        "version": "x",
        "versionType": "custom"
      }
    ]
  },
  {
    "defaultStatus": "unknown",
    "packageName": "org.wso2.carbon:org.wso2.carbon.rest.api.ui",
    "product": "WSO2 Carbon Rest API Admin UI",
    "vendor": "WSO2",
    "versions": [
      {
        "lessThan": "4.7.30.53",
        "status": "affected",
        "version": "4.7.30",
        "versionType": "custom"
      },
      {
        "lessThanOrEqual": "*",
        "status": "unaffected",
        "version": "x",
        "versionType": "custom"
      }
    ]
  },
  {
    "defaultStatus": "unknown",
    "packageName": "org.wso2.carbon:org.wso2.carbon.sequences.ui",
    "product": "WSO2 Carbon Sequence Editor UI",
    "vendor": "WSO2",
    "versions": [
      {
        "lessThan": "4.7.30.53",
        "status": "affected",
        "version": "4.7.30",
        "versionType": "custom"
      },
      {
        "lessThanOrEqual": "*",
        "status": "unaffected",
        "version": "x",
        "versionType": "custom"
      }
    ]
  },
  {
    "defaultStatus": "unknown",
    "packageName": "org.wso2.carbon:org.wso2.carbon.task.ui",
    "product": "WSO2 Carbon Task UI",
    "vendor": "WSO2",
    "versions": [
      {
        "lessThan": "4.7.30.53",
        "status": "affected",
        "version": "4.7.30",
        "versionType": "custom"
      },
      {
        "lessThanOrEqual": "*",
        "status": "unaffected",
        "version": "x",
        "versionType": "custom"
      }
    ]
  },
  {
    "defaultStatus": "unknown",
    "packageName": "org.wso2.carbon.governance:org.wso2.carbon.governance.api",
    "product": "WSO2 Carbon Governance",
    "vendor": "WSO2",
    "versions": [
      {
        "lessThan": "4.8.37.4",
        "status": "affected",
        "version": "4.8.37",
        "versionType": "custom"
      },
      {
        "lessThanOrEqual": "*",
        "status": "unaffected",
        "version": "x",
        "versionType": "custom"
      }
    ]
  }
]

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

06 Aug 2026 13:16Current
5.5Medium risk
Vulners AI Score5.5
CVSS 3.15.4
SSVC
10