Lucene search
+L

CVE-2025-9312

🗓️ 18 Nov 2025 12:05:22Reported by WSO2Type 
cve
 cve
🔗 web.nvd.nist.gov👁 49 Views

Missing enforcement of mutual TLS in System REST APIs and SOAP services allows unauthenticated access and admin actions.

Related
Detection
Affected
Refs
[
  {
    "defaultStatus": "unaffected",
    "product": "WSO2 API Manager",
    "vendor": "WSO2",
    "versions": [
      {
        "lessThan": "2.2.0",
        "status": "unknown",
        "version": "0",
        "versionType": "custom"
      },
      {
        "lessThan": "2.2.0.58",
        "status": "affected",
        "version": "2.2.0",
        "versionType": "custom"
      },
      {
        "lessThan": "2.5.0.84",
        "status": "affected",
        "version": "2.5.0",
        "versionType": "custom"
      },
      {
        "lessThan": "2.6.0.145",
        "status": "affected",
        "version": "2.6.0",
        "versionType": "custom"
      },
      {
        "lessThan": "3.0.0.175",
        "status": "affected",
        "version": "3.0.0",
        "versionType": "custom"
      },
      {
        "lessThan": "3.1.0.339",
        "status": "affected",
        "version": "3.1.0",
        "versionType": "custom"
      },
      {
        "lessThan": "3.2.0.439",
        "status": "affected",
        "version": "3.2.0",
        "versionType": "custom"
      },
      {
        "lessThan": "3.2.1.59",
        "status": "affected",
        "version": "3.2.1",
        "versionType": "custom"
      },
      {
        "lessThan": "4.0.0.359",
        "status": "affected",
        "version": "4.0.0",
        "versionType": "custom"
      },
      {
        "lessThan": "4.1.0.222",
        "status": "affected",
        "version": "4.1.0",
        "versionType": "custom"
      },
      {
        "lessThan": "4.2.0.161",
        "status": "affected",
        "version": "4.2.0",
        "versionType": "custom"
      },
      {
        "lessThan": "4.3.0.73",
        "status": "affected",
        "version": "4.3.0",
        "versionType": "custom"
      },
      {
        "lessThan": "4.4.0.37",
        "status": "affected",
        "version": "4.4.0",
        "versionType": "custom"
      },
      {
        "lessThan": "4.5.0.21",
        "status": "affected",
        "version": "4.5.0",
        "versionType": "custom"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "WSO2 API Control Plane",
    "vendor": "WSO2",
    "versions": [
      {
        "lessThan": "4.5.0.22",
        "status": "affected",
        "version": "4.5.0",
        "versionType": "custom"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "WSO2 Traffic Manager",
    "vendor": "WSO2",
    "versions": [
      {
        "lessThan": "4.5.0.20",
        "status": "affected",
        "version": "4.5.0",
        "versionType": "custom"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "WSO2 Universal Gateway",
    "vendor": "WSO2",
    "versions": [
      {
        "lessThan": "4.5.0.20",
        "status": "affected",
        "version": "4.5.0",
        "versionType": "custom"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "WSO2 Identity Server as Key Manager",
    "vendor": "WSO2",
    "versions": [
      {
        "lessThan": "5.3.0",
        "status": "unknown",
        "version": "0",
        "versionType": "custom"
      },
      {
        "lessThan": "5.3.0.39",
        "status": "affected",
        "version": "5.3.0",
        "versionType": "custom"
      },
      {
        "lessThan": "5.5.0.52",
        "status": "affected",
        "version": "5.5.0",
        "versionType": "custom"
      },
      {
        "lessThan": "5.6.0.74",
        "status": "affected",
        "version": "5.6.0",
        "versionType": "custom"
      },
      {
        "lessThan": "5.7.0.124",
        "status": "affected",
        "version": "5.7.0",
        "versionType": "custom"
      },
      {
        "lessThan": "5.9.0.175",
        "status": "affected",
        "version": "5.9.0",
        "versionType": "custom"
      },
      {
        "lessThan": "5.10.0.358",
        "status": "affected",
        "version": "5.10.0",
        "versionType": "custom"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "WSO2 Identity Server",
    "vendor": "WSO2",
    "versions": [
      {
        "lessThan": "5.2.0",
        "status": "unknown",
        "version": "0",
        "versionType": "custom"
      },
      {
        "lessThan": "5.2.0.33",
        "status": "affected",
        "version": "5.2.0",
        "versionType": "custom"
      },
      {
        "lessThan": "5.3.0.34",
        "status": "affected",
        "version": "5.3.0",
        "versionType": "custom"
      },
      {
        "lessThan": "5.4.0.33",
        "status": "affected",
        "version": "5.4.0",
        "versionType": "custom"
      },
      {
        "lessThan": "5.4.1.37",
        "status": "affected",
        "version": "5.4.1",
        "versionType": "custom"
      },
      {
        "lessThan": "5.5.0.51",
        "status": "affected",
        "version": "5.5.0",
        "versionType": "custom"
      },
      {
        "lessThan": "5.6.0.59",
        "status": "affected",
        "version": "5.6.0",
        "versionType": "custom"
      },
      {
        "lessThan": "5.7.0.125",
        "status": "affected",
        "version": "5.7.0",
        "versionType": "custom"
      },
      {
        "lessThan": "5.8.0.109",
        "status": "affected",
        "version": "5.8.0",
        "versionType": "custom"
      },
      {
        "lessThan": "5.9.0.168",
        "status": "affected",
        "version": "5.9.0",
        "versionType": "custom"
      },
      {
        "lessThan": "5.10.0.368",
        "status": "affected",
        "version": "5.10.0",
        "versionType": "custom"
      },
      {
        "lessThan": "5.11.0.411",
        "status": "affected",
        "version": "5.11.0",
        "versionType": "custom"
      },
      {
        "lessThan": "6.0.0.243",
        "status": "affected",
        "version": "6.0.0",
        "versionType": "custom"
      },
      {
        "lessThan": "6.1.0.241",
        "status": "affected",
        "version": "6.1.0",
        "versionType": "custom"
      },
      {
        "lessThan": "7.0.0.116",
        "status": "affected",
        "version": "7.0.0",
        "versionType": "custom"
      },
      {
        "lessThan": "7.1.0.23",
        "status": "affected",
        "version": "7.1.0",
        "versionType": "custom"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "WSO2 Open Banking KM",
    "vendor": "WSO2",
    "versions": [
      {
        "lessThan": "1.4.0",
        "status": "unknown",
        "version": "0",
        "versionType": "custom"
      },
      {
        "lessThan": "1.4.0.132",
        "status": "affected",
        "version": "1.4.0",
        "versionType": "custom"
      },
      {
        "lessThan": "1.5.0.122",
        "status": "affected",
        "version": "1.5.0",
        "versionType": "custom"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "WSO2 Open Banking AM",
    "vendor": "WSO2",
    "versions": [
      {
        "lessThan": "1.4.0",
        "status": "unknown",
        "version": "0",
        "versionType": "custom"
      },
      {
        "lessThan": "1.4.0.138",
        "status": "affected",
        "version": "1.4.0",
        "versionType": "custom"
      },
      {
        "lessThan": "1.5.0.139",
        "status": "affected",
        "version": "1.5.0",
        "versionType": "custom"
      },
      {
        "lessThan": "2.0.0.388",
        "status": "affected",
        "version": "2.0.0",
        "versionType": "custom"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "WSO2 Open Banking IAM",
    "vendor": "WSO2",
    "versions": [
      {
        "lessThan": "2.0.0.408",
        "status": "affected",
        "version": "2.0.0",
        "versionType": "custom"
      }
    ]
  },
  {
    "defaultStatus": "unknown",
    "packageName": "org.wso2.carbon.identity.auth.service",
    "product": "org.wso2.carbon.identity.auth.service",
    "vendor": "WSO2",
    "versions": [
      {
        "lessThan": "1.1.1.2",
        "status": "affected",
        "version": "1.1.1",
        "versionType": "custom"
      },
      {
        "lessThan": "1.1.16.3",
        "status": "affected",
        "version": "1.1.16",
        "versionType": "custom"
      },
      {
        "lessThan": "1.1.18.4",
        "status": "affected",
        "version": "1.1.18",
        "versionType": "custom"
      },
      {
        "lessThan": "1.1.20.5",
        "status": "affected",
        "version": "1.1.20",
        "versionType": "custom"
      },
      {
        "lessThan": "1.1.26.7",
        "status": "affected",
        "version": "1.1.26",
        "versionType": "custom"
      },
      {
        "lessThan": "1.3.6.8",
        "status": "affected",
        "version": "1.3.6",
        "versionType": "custom"
      },
      {
        "lessThan": "1.4.0.18",
        "status": "affected",
        "version": "1.4.0",
        "versionType": "custom"
      },
      {
        "lessThan": "1.4.25.24",
        "status": "affected",
        "version": "1.4.25",
        "versionType": "custom"
      },
      {
        "lessThan": "1.4.52.4",
        "status": "affected",
        "version": "1.4.52",
        "versionType": "custom"
      },
      {
        "lessThan": "1.6.1.11",
        "status": "affected",
        "version": "1.6.1",
        "versionType": "custom"
      },
      {
        "lessThan": "1.7.1.4",
        "status": "affected",
        "version": "1.7.1",
        "versionType": "custom"
      },
      {
        "lessThan": "1.8.11.6",
        "status": "affected",
        "version": "1.8.11",
        "versionType": "custom"
      },
      {
        "lessThan": "1.8.41.2",
        "status": "affected",
        "version": "1.8.41",
        "versionType": "custom"
      },
      {
        "lessThan": "1.9.4.4",
        "status": "affected",
        "version": "1.9.4",
        "versionType": "custom"
      },
      {
        "lessThan": "1.9.18.2",
        "status": "affected",
        "version": "1.9.18",
        "versionType": "custom"
      },
      {
        "lessThanOrEqual": "5.5.2.*",
        "status": "unaffected",
        "version": "5.5.2",
        "versionType": "custom"
      }
    ]
  }
]

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation