CVE-2025-5717 Authenticated Remote Code Execution in Multiple WSO2 Products via Event Processor Admin Service

[
  {
    "defaultStatus": "unaffected",
    "product": "WSO2 API Manager",
    "vendor": "WSO2",
    "versions": [
      {
        "lessThan": "3.0.0",
        "status": "unknown",
        "version": "0",
        "versionType": "custom"
      },
      {
        "lessThan": "3.0.0.174",
        "status": "affected",
        "version": "3.0.0",
        "versionType": "custom"
      },
      {
        "lessThan": "3.1.0.330",
        "status": "affected",
        "version": "3.1.0",
        "versionType": "custom"
      },
      {
        "lessThan": "3.2.0.426",
        "status": "affected",
        "version": "3.2.0",
        "versionType": "custom"
      },
      {
        "lessThan": "3.2.1.46",
        "status": "affected",
        "version": "3.2.1",
        "versionType": "custom"
      },
      {
        "lessThan": "4.0.0.344",
        "status": "affected",
        "version": "4.0.0",
        "versionType": "custom"
      },
      {
        "lessThan": "4.1.0.208",
        "status": "affected",
        "version": "4.1.0",
        "versionType": "custom"
      },
      {
        "lessThan": "4.2.0.147",
        "status": "affected",
        "version": "4.2.0",
        "versionType": "custom"
      },
      {
        "lessThan": "4.3.0.59",
        "status": "affected",
        "version": "4.3.0",
        "versionType": "custom"
      },
      {
        "lessThan": "4.4.0.22",
        "status": "affected",
        "version": "4.4.0",
        "versionType": "custom"
      },
      {
        "lessThan": "4.5.0.6",
        "status": "affected",
        "version": "4.5.0",
        "versionType": "custom"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "WSO2 Open Banking AM",
    "vendor": "WSO2",
    "versions": [
      {
        "lessThan": "2.0.0",
        "status": "unknown",
        "version": "0",
        "versionType": "custom"
      },
      {
        "lessThan": "2.0.0.379",
        "status": "affected",
        "version": "2.0.0",
        "versionType": "custom"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "WSO2 Traffic Manager",
    "vendor": "WSO2",
    "versions": [
      {
        "lessThan": "4.5.0.6",
        "status": "affected",
        "version": "4.5.0",
        "versionType": "custom"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "WSO2 API Control Plane",
    "vendor": "WSO2",
    "versions": [
      {
        "lessThan": "4.5.0.6",
        "status": "affected",
        "version": "4.5.0",
        "versionType": "custom"
      }
    ]
  },
  {
    "defaultStatus": "unknown",
    "packageName": "org.wso2.siddhi:siddhi-extension-eval-scriptApache",
    "product": "Siddhi Extension Evaluate Scripts",
    "vendor": "WSO2",
    "versions": [
      {
        "lessThan": "3.2.6.8",
        "status": "affected",
        "version": "3.2.6",
        "versionType": "custom"
      },
      {
        "lessThan": "3.2.7.6",
        "status": "affected",
        "version": "3.2.7",
        "versionType": "custom"
      },
      {
        "lessThan": "3.2.8.3",
        "status": "affected",
        "version": "3.2.8",
        "versionType": "custom"
      },
      {
        "lessThan": "3.2.10.1",
        "status": "affected",
        "version": "3.2.10",
        "versionType": "custom"
      },
      {
        "lessThan": "3.2.13.2",
        "status": "affected",
        "version": "3.2.13",
        "versionType": "custom"
      },
      {
        "lessThan": "3.2.14.1",
        "status": "affected",
        "version": "3.2.14",
        "versionType": "custom"
      },
      {
        "lessThanOrEqual": "*",
        "status": "unaffected",
        "version": "3.2.15",
        "versionType": "custom"
      }
    ]
  }
]