CVE-2025-8591 Reflected Cross-Site Scripting via URL Parameter in Multiple WSO2 Products Enables UI Modification

[
  {
    "vendor": "WSO2",
    "product": "WSO2 Identity Server",
    "versions": [
      {
        "status": "unknown",
        "version": "0",
        "lessThan": "5.10.0",
        "versionType": "custom"
      },
      {
        "status": "affected",
        "version": "5.10.0",
        "lessThan": "5.10.0.381",
        "versionType": "custom"
      },
      {
        "status": "affected",
        "version": "5.10.0",
        "lessThan": "5.10.0.384",
        "versionType": "custom"
      },
      {
        "status": "affected",
        "version": "6.0.0",
        "lessThan": "6.0.0.255",
        "versionType": "custom"
      },
      {
        "status": "affected",
        "version": "7.0.0",
        "lessThan": "7.0.0.131",
        "versionType": "custom"
      },
      {
        "status": "affected",
        "version": "7.1.0",
        "lessThan": "7.1.0.21",
        "versionType": "custom"
      },
      {
        "status": "affected",
        "version": "7.1.0",
        "lessThan": "7.1.0.51",
        "versionType": "custom"
      }
    ],
    "defaultStatus": "unaffected"
  },
  {
    "vendor": "WSO2",
    "product": "WSO2 API Manager",
    "versions": [
      {
        "status": "unknown",
        "version": "0",
        "lessThan": "3.1.0",
        "versionType": "custom"
      },
      {
        "status": "affected",
        "version": "3.1.0",
        "lessThan": "3.1.0.355",
        "versionType": "custom"
      },
      {
        "status": "affected",
        "version": "3.2.0",
        "lessThan": "3.2.0.459",
        "versionType": "custom"
      },
      {
        "status": "affected",
        "version": "3.2.1",
        "lessThan": "3.2.1.78",
        "versionType": "custom"
      },
      {
        "status": "affected",
        "version": "4.0.0",
        "lessThan": "4.0.0.380",
        "versionType": "custom"
      },
      {
        "status": "affected",
        "version": "4.1.0",
        "lessThan": "4.1.0.243",
        "versionType": "custom"
      },
      {
        "status": "affected",
        "version": "4.2.0",
        "lessThan": "4.2.0.183",
        "versionType": "custom"
      },
      {
        "status": "affected",
        "version": "4.3.0",
        "lessThan": "4.3.0.94",
        "versionType": "custom"
      },
      {
        "status": "affected",
        "version": "4.4.0",
        "lessThan": "4.4.0.58",
        "versionType": "custom"
      },
      {
        "status": "affected",
        "version": "4.5.0",
        "lessThan": "4.5.0.43",
        "versionType": "custom"
      },
      {
        "status": "affected",
        "version": "4.6.0",
        "lessThan": "4.6.0.7",
        "versionType": "custom"
      }
    ],
    "defaultStatus": "unaffected"
  },
  {
    "vendor": "WSO2",
    "product": "WSO2 API Control Plane",
    "versions": [
      {
        "status": "affected",
        "version": "4.5.0",
        "lessThan": "4.5.0.44",
        "versionType": "custom"
      },
      {
        "status": "affected",
        "version": "4.6.0",
        "lessThan": "4.6.0.8",
        "versionType": "custom"
      }
    ],
    "defaultStatus": "unaffected"
  },
  {
    "vendor": "WSO2",
    "product": "WSO2 Traffic Manager",
    "versions": [
      {
        "status": "affected",
        "version": "4.5.0",
        "lessThan": "4.5.0.42",
        "versionType": "custom"
      },
      {
        "status": "affected",
        "version": "4.6.0",
        "lessThan": "4.6.0.7",
        "versionType": "custom"
      }
    ],
    "defaultStatus": "unaffected"
  },
  {
    "vendor": "WSO2",
    "product": "WSO2 Universal Gateway",
    "versions": [
      {
        "status": "affected",
        "version": "4.5.0",
        "lessThan": "4.5.0.42",
        "versionType": "custom"
      },
      {
        "status": "affected",
        "version": "4.6.0",
        "lessThan": "4.6.0.7",
        "versionType": "custom"
      }
    ],
    "defaultStatus": "unaffected"
  },
  {
    "vendor": "WSO2",
    "product": "WSO2 Open Banking AM",
    "versions": [
      {
        "status": "unknown",
        "version": "0",
        "lessThan": "2.0.0",
        "versionType": "custom"
      },
      {
        "status": "affected",
        "version": "2.0.0",
        "lessThan": "2.0.0.404",
        "versionType": "custom"
      }
    ],
    "defaultStatus": "unaffected"
  },
  {
    "vendor": "WSO2",
    "product": "WSO2 Identity Server as Key Manager",
    "versions": [
      {
        "status": "unknown",
        "version": "0",
        "lessThan": "5.10.0",
        "versionType": "custom"
      },
      {
        "status": "affected",
        "version": "5.10.0",
        "lessThan": "5.10.0.375",
        "versionType": "custom"
      }
    ],
    "defaultStatus": "unaffected"
  },
  {
    "vendor": "WSO2",
    "product": "WSO2 Open Banking IAM",
    "versions": [
      {
        "status": "unknown",
        "version": "0",
        "lessThan": "2.0.0",
        "versionType": "custom"
      },
      {
        "status": "affected",
        "version": "2.0.0",
        "lessThan": "2.0.0.424",
        "versionType": "custom"
      }
    ],
    "defaultStatus": "unaffected"
  }
]