CVE-2025-2905 An XML External Entity (XXE) vulnerability in Multiple WSO2 Products

[
  {
    "defaultStatus": "unaffected",
    "product": "WSO2 API Manager",
    "vendor": "WSO2",
    "versions": [
      {
        "lessThan": "2.0.0",
        "status": "affected",
        "version": "0",
        "versionType": "custom"
      },
      {
        "status": "affected",
        "version": "2.1.0",
        "versionType": "custom"
      },
      {
        "status": "affected",
        "version": "2.2.0",
        "versionType": "custom"
      },
      {
        "status": "affected",
        "version": "2.5.0",
        "versionType": "custom"
      },
      {
        "status": "affected",
        "version": "2.6.0",
        "versionType": "custom"
      },
      {
        "status": "affected",
        "version": "3.0.0",
        "versionType": "custom"
      },
      {
        "status": "affected",
        "version": "3.1.0",
        "versionType": "custom"
      },
      {
        "lessThan": "4.0.0.311",
        "status": "affected",
        "version": "4.0.0",
        "versionType": "custom"
      },
      {
        "lessThan": "4.1.0.152",
        "status": "affected",
        "version": "4.1.0",
        "versionType": "custom"
      },
      {
        "lessThan": "4.2.0.122",
        "status": "affected",
        "version": "4.2.0",
        "versionType": "custom"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "WSO2 Enterprise Integrator",
    "vendor": "WSO2",
    "versions": [
      {
        "lessThan": "6.0.0",
        "status": "unknown",
        "version": "0",
        "versionType": "custom"
      },
      {
        "status": "affected",
        "version": "6.0.0",
        "versionType": "custom"
      },
      {
        "status": "affected",
        "version": "6.1.0",
        "versionType": "custom"
      },
      {
        "status": "affected",
        "version": "6.1.1",
        "versionType": "custom"
      },
      {
        "status": "affected",
        "version": "6.2.0",
        "versionType": "custom"
      },
      {
        "status": "affected",
        "version": "6.3.0",
        "versionType": "custom"
      },
      {
        "status": "affected",
        "version": "6.4.0",
        "versionType": "custom"
      },
      {
        "status": "affected",
        "version": "6.5.0",
        "versionType": "custom"
      },
      {
        "status": "affected",
        "version": "6.6.0",
        "versionType": "custom"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "WSO2 Enterprise Service Bus",
    "vendor": "WSO2",
    "versions": [
      {
        "lessThan": "4.9.0",
        "status": "unknown",
        "version": "0",
        "versionType": "custom"
      },
      {
        "status": "affected",
        "version": "4.9.0",
        "versionType": "custom"
      },
      {
        "status": "affected",
        "version": "5.0.0",
        "versionType": "custom"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "WSO2 Micro integrator",
    "vendor": "WSO2",
    "versions": [
      {
        "lessThan": "1.0.0",
        "status": "unknown",
        "version": "0",
        "versionType": "custom"
      },
      {
        "status": "affected",
        "version": "1.0.0",
        "versionType": "custom"
      },
      {
        "status": "affected",
        "version": "1.1.0",
        "versionType": "custom"
      },
      {
        "lessThan": "1.2.0.162",
        "status": "affected",
        "version": "1.2.0",
        "versionType": "custom"
      },
      {
        "lessThan": "4.0.0.132",
        "status": "affected",
        "version": "4.0.0",
        "versionType": "custom"
      },
      {
        "lessThan": "4.1.0.115",
        "status": "affected",
        "version": "4.1.0",
        "versionType": "custom"
      },
      {
        "lessThan": "4.2.0.112",
        "status": "affected",
        "version": "4.2.0",
        "versionType": "custom"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "WSO2 Open Banking AM",
    "vendor": "WSO2",
    "versions": [
      {
        "lessThan": "1.5.0",
        "status": "unknown",
        "version": "0",
        "versionType": "custom"
      },
      {
        "status": "affected",
        "version": "1.5.0",
        "versionType": "custom"
      }
    ]
  }
]