Lucene search
K

EUVD-2025-37927

🗓️ 05 Nov 2025 19:21:32Reported by EUVDType 
euvd
 euvd
🔗 euvd.enisa.europa.eu👁 3 Views

Reflected XSS in WSO2 management consoles from improper encoding; may manipulate UI and steal data; HttpOnly cookies mitigate hijack.

Related
Affected
Refs
[
  {
    "enisaIdVendor": [
      {
        "id": "5e1efc25-6636-34d6-90d0-28a065b89506",
        "vendor": {
          "name": "WSO2"
        }
      }
    ],
    "enisaIdProduct": [
      {
        "id": "0252df7b-f165-3a0d-a3bf-24469603ca6c",
        "product": {
          "name": "org.wso2.carbon.governance:org.wso2.carbon.governance.wsdltool.ui"
        },
        "product_version": "4.8.35 ≤*"
      },
      {
        "id": "04cd9d8c-106e-3a6d-9ff6-b5ff74157a39",
        "product": {
          "name": "org.wso2.carbon.registry:org.wso2.carbon.registry.resource.ui"
        },
        "product_version": "4.7.32 <4.7.32.14"
      },
      {
        "id": "05c1c51d-8799-340d-9d7b-099ba9e00819",
        "product": {
          "name": "org.wso2.carbon.registry:org.wso2.carbon.registry.resource.ui"
        },
        "product_version": "4.8.3 <4.8.3.9"
      },
      {
        "id": "0dc8539b-69b9-36b7-a3e7-96df49e0f906",
        "product": {
          "name": "org.wso2.carbon.registry:org.wso2.carbon.registry.resource.ui"
        },
        "product_version": "4.8.13 <4.8.13.6"
      },
      {
        "id": "110acb39-4adf-353d-8c93-1e7407aea379",
        "product": {
          "name": "org.wso2.carbon.governance:org.wso2.carbon.governance.wsdltool.ui"
        },
        "product_version": "4.8.30 <4.8.30.3"
      },
      {
        "id": "186049ee-4b8b-38cd-90e6-27aae10ec1c7",
        "product": {
          "name": "WSO2 Identity Server"
        },
        "product_version": "6.1.0 <6.1.0.246"
      },
      {
        "id": "1c995a12-bd7b-33fb-a3fc-01277e8b581a",
        "product": {
          "name": "org.wso2.carbon.registry:org.wso2.carbon.registry.resource.ui"
        },
        "product_version": "4.7.51 <4.7.51.4"
      },
      {
        "id": "1d5e2e95-31b4-301c-8f32-28ea938a0fc5",
        "product": {
          "name": "WSO2 API Control Plane"
        },
        "product_version": "4.5.0 <4.5.0.27"
      },
      {
        "id": "1f00cefe-0718-3cd7-9198-b422035e95e8",
        "product": {
          "name": "org.wso2.carbon.registry:org.wso2.carbon.registry.resource.ui"
        },
        "product_version": "4.8.12 <4.8.12.5"
      },
      {
        "id": "22d25acf-7434-3547-89ff-f4530519e6de",
        "product": {
          "name": "WSO2 Identity Server"
        },
        "product_version": ""
      },
      {
        "id": "2875aa07-cf21-33b9-af07-cbf5eb5a1a4a",
        "product": {
          "name": "org.wso2.carbon.identity.inbound.auth.oauth2:org.wso2.carbon.identity.oauth.ui"
        },
        "product_version": "6.13.16 <6.13.16.19"
      },
      {
        "id": "317545db-558a-3548-9177-fcd19fe3b07c",
        "product": {
          "name": "org.wso2.carbon.governance:org.wso2.carbon.governance.wsdltool.ui"
        },
        "product_version": "4.8.21 <4.8.21.9"
      },
      {
        "id": "34c140bd-f8e0-3654-bf94-15d4c90adb75",
        "product": {
          "name": "org.wso2.carbon.identity.inbound.auth.oauth2:org.wso2.carbon.identity.oauth.ui"
        },
        "product_version": "6.4.176 <6.4.176.28"
      },
      {
        "id": "372e187e-0107-3129-9999-83bda07776c2",
        "product": {
          "name": "WSO2 Identity Server"
        },
        "product_version": "7.0.0 <7.0.0.122"
      },
      {
        "id": "4545df3c-cd39-35d9-b8fd-3ac9ecf910e7",
        "product": {
          "name": "org.wso2.carbon.registry:org.wso2.carbon.registry.info.ui"
        },
        "product_version": "4.8.36 <4.8.36.1"
      },
      {
        "id": "4b7fd355-67e6-3abd-b057-d2571a265d33",
        "product": {
          "name": "org.wso2.carbon.registry:org.wso2.carbon.registry.resource.ui"
        },
        "product_version": "4.8.43 <4.8.43.1"
      },
      {
        "id": "4c3066be-a667-37ee-8979-e19dc245c9eb",
        "product": {
          "name": "WSO2 API Manager"
        },
        "product_version": "4.3.0 <4.3.0.79"
      },
      {
        "id": "4c35e394-4350-35f2-a7cc-823570ba6c84",
        "product": {
          "name": "org.wso2.carbon.registry:org.wso2.carbon.registry.info.ui"
        },
        "product_version": "4.8.3 <4.8.3.9"
      },
      {
        "id": "4d5af3fa-4fda-3bd5-adf0-1c46cefe2f79",
        "product": {
          "name": "org.wso2.carbon.identity.inbound.auth.oauth2:org.wso2.carbon.identity.oauth.ui"
        },
        "product_version": "6.4.111 <6.4.111.155"
      },
      {
        "id": "4f979a3d-290f-3e42-9d16-3080d64b47fe",
        "product": {
          "name": "WSO2 API Manager"
        },
        "product_version": "4.5.0 <4.5.0.26"
      },
      {
        "id": "532b4cdc-2b9e-332d-ad12-ef8295b09f43",
        "product": {
          "name": "WSO2 Identity Server"
        },
        "product_version": "6.0.0 <6.0.0.247"
      },
      {
        "id": "54738f50-6068-397a-991b-df38da3e586d",
        "product": {
          "name": "WSO2 Enterprise Integrator"
        },
        "product_version": ""
      },
      {
        "id": "5b35f638-d5ec-3bbd-8eec-134c5f3a5768",
        "product": {
          "name": "org.wso2.carbon.governance:org.wso2.carbon.governance.wsdltool.ui"
        },
        "product_version": "4.8.28 <4.8.28.3"
      },
      {
        "id": "5f881f83-17d8-3374-a5de-01ec868a3c16",
        "product": {
          "name": "WSO2 API Manager"
        },
        "product_version": ""
      },
      {
        "id": "6237f5f2-88d9-31e2-b79b-3cf24bb63182",
        "product": {
          "name": "org.wso2.carbon.registry:org.wso2.carbon.registry.info.ui"
        },
        "product_version": "4.7.51 <4.7.51.4"
      },
      {
        "id": "62ff28fc-001d-3076-baed-9177764ca0c8",
        "product": {
          "name": "WSO2 Traffic Manager"
        },
        "product_version": "4.5.0 <4.5.0.25"
      },
      {
        "id": "6ba2e4d2-687c-3320-939d-e88d97b3d703",
        "product": {
          "name": "org.wso2.carbon.governance:org.wso2.carbon.governance.wsdltool.ui"
        },
        "product_version": "4.8.19 <4.8.19.5"
      },
      {
        "id": "70c272d6-3f00-3c24-8276-5fde10ba7401",
        "product": {
          "name": "WSO2 Open Banking AM"
        },
        "product_version": "2.0.0 <2.0.0.393"
      },
      {
        "id": "70f6ca3e-cbfd-34a3-9932-96459ec76535",
        "product": {
          "name": "org.wso2.carbon.registry:org.wso2.carbon.registry.resource.ui"
        },
        "product_version": "4.7.35 <4.7.35.11"
      },
      {
        "id": "71f9a828-cdcf-3850-b8e1-e5e9cba9190b",
        "product": {
          "name": "WSO2 API Manager"
        },
        "product_version": "4.2.0 <4.2.0.167"
      },
      {
        "id": "76223660-80f0-366e-87d9-b748ac82896e",
        "product": {
          "name": "org.wso2.carbon.registry:org.wso2.carbon.registry.info.ui"
        },
        "product_version": "4.7.39 <4.7.39.9"
      },
      {
        "id": "7b7ea5af-a4b9-3e8d-8375-1bb1492cc6b4",
        "product": {
          "name": "WSO2 Open Banking IAM"
        },
        "product_version": ""
      },
      {
        "id": "7ea9e60e-1c0e-3488-8ff9-caf5afaf42d4",
        "product": {
          "name": "org.wso2.carbon.registry:org.wso2.carbon.registry.info.ui"
        },
        "product_version": "4.8.32 <4.8.32.3"
      },
      {
        "id": "8546af6b-41e6-3d74-9ee2-8144d0f88452",
        "product": {
          "name": "WSO2 Identity Server"
        },
        "product_version": "7.1.0 <7.1.0.29"
      },
      {
        "id": "8e9c3ece-8319-33e5-b743-79967c1af5a1",
        "product": {
          "name": "org.wso2.carbon.registry:org.wso2.carbon.registry.info.ui"
        },
        "product_version": "4.7.32 <4.7.32.14"
      },
      {
        "id": "919631b9-20a2-3b6e-a13d-b2cb9fec7465",
        "product": {
          "name": "WSO2 Identity Server"
        },
        "product_version": "5.11.0 <5.11.0.417"
      },
      {
        "id": "931af154-419d-3d20-bf70-baaae2b574fa",
        "product": {
          "name": "org.wso2.carbon.registry:org.wso2.carbon.registry.info.ui"
        },
        "product_version": "4.7.35 <4.7.35.11"
      },
      {
        "id": "94b16537-c28d-3316-958d-5732b5ac7878",
        "product": {
          "name": "WSO2 Identity Server"
        },
        "product_version": "5.10.0 <5.10.0.373"
      },
      {
        "id": "987dd9d9-caa6-38ac-84ba-b2dabe8914c9",
        "product": {
          "name": "org.wso2.carbon.identity.inbound.auth.oauth2:org.wso2.carbon.identity.oauth.ui"
        },
        "product_version": "6.4.180 <6.4.180.12"
      },
      {
        "id": "98b7867d-d1b9-37c3-b856-007b0409d1f3",
        "product": {
          "name": "org.wso2.carbon.identity.inbound.auth.oauth2:org.wso2.carbon.identity.oauth.ui"
        },
        "product_version": "6.4.2 <6.4.2.165"
      },
      {
        "id": "995c0856-e795-3f55-b20b-3fe7c8470780",
        "product": {
          "name": "org.wso2.carbon.registry:org.wso2.carbon.registry.info.ui"
        },
        "product_version": "4.8.13 <4.8.13.6"
      },
      {
        "id": "9b83d249-73ec-300e-a32b-fb4b78db3545",
        "product": {
          "name": "org.wso2.carbon.registry:org.wso2.carbon.registry.resource.ui"
        },
        "product_version": "4.8.36 <4.8.36.1"
      },
      {
        "id": "9bfbc2a7-2041-3050-a500-dff80e4ab1d2",
        "product": {
          "name": "org.wso2.carbon.registry:org.wso2.carbon.registry.resource.ui"
        },
        "product_version": "4.7.33 <4.7.33.13"
      },
      {
        "id": "9c18786f-09cc-396c-a0d2-759197e58d4e",
        "product": {
          "name": "WSO2 Identity Server as Key Manager"
        },
        "product_version": ""
      },
      {
        "id": "9f4be0a4-4a1f-3165-870c-610ef2edf7d6",
        "product": {
          "name": "org.wso2.carbon.registry:org.wso2.carbon.registry.resource.ui"
        },
        "product_version": "4.8.32 <4.8.32.3"
      },
      {
        "id": "a32ad5d5-8e72-34d8-a587-e2694943a27e",
        "product": {
          "name": "org.wso2.carbon.registry:org.wso2.carbon.registry.resource.ui"
        },
        "product_version": "4.7.39 <4.7.39.9"
      },
      {
        "id": "a4acdd4f-bd16-3430-99ef-3cb15a7a525c",
        "product": {
          "name": "WSO2 Enterprise Integrator"
        },
        "product_version": "6.6.0 <6.6.0.223"
      },
      {
        "id": "a8c1fa27-c50b-33fc-a1a7-86c93d1a25b0",
        "product": {
          "name": "WSO2 API Manager"
        },
        "product_version": "3.2.0 <3.2.0.445"
      },
      {
        "id": "a8d0c1ae-cced-33d6-b170-5aa87179a406",
        "product": {
          "name": "WSO2 Open Banking AM"
        },
        "product_version": ""
      },
      {
        "id": "ababaf9a-5e9e-3285-a1f5-2bc9a061a7de",
        "product": {
          "name": "org.wso2.carbon.governance:org.wso2.carbon.governance.wsdltool.ui"
        },
        "product_version": "4.8.33 <4.8.33.3"
      },
      {
        "id": "b1c63e00-9efd-35a4-95f2-2229598356da",
        "product": {
          "name": "WSO2 API Manager"
        },
        "product_version": "4.4.0 <4.4.0.43"
      },
      {
        "id": "bf73661d-b5de-3574-ae43-46e6ebfcd466",
        "product": {
          "name": "WSO2 API Manager"
        },
        "product_version": "4.0.0 <4.0.0.365"
      },
      {
        "id": "c41985ec-3c69-3f28-9b2d-eef263536e4f",
        "product": {
          "name": "org.wso2.carbon.registry:org.wso2.carbon.registry.resource.ui"
        },
        "product_version": "4.8.24 <4.8.24.3"
      },
      {
        "id": "c457c35c-36d4-367a-a915-8c7a93af87aa",
        "product": {
          "name": "WSO2 API Manager"
        },
        "product_version": "3.1.0 <3.1.0.344"
      },
      {
        "id": "c651f807-29f8-3917-a3b3-47f946011ec7",
        "product": {
          "name": "org.wso2.carbon.identity.inbound.auth.oauth2:org.wso2.carbon.identity.oauth.ui"
        },
        "product_version": "6.13.19 <6.13.19.12"
      },
      {
        "id": "c6ce936b-99c5-3aba-b335-98b9296d2f1a",
        "product": {
          "name": "org.wso2.carbon.identity.inbound.auth.oauth2:org.wso2.carbon.identity.oauth.ui"
        },
        "product_version": "6.13.27 <6.13.27.5"
      },
      {
        "id": "c8231237-e581-3984-b7dd-d2508bb197e0",
        "product": {
          "name": "org.wso2.carbon.registry:org.wso2.carbon.registry.resource.ui"
        },
        "product_version": "4.8.9 <4.8.9.5"
      },
      {
        "id": "cb5e11bf-23e3-3632-af23-3f4a446f014a",
        "product": {
          "name": "WSO2 Open Banking IAM"
        },
        "product_version": "2.0.0 <2.0.0.413"
      },
      {
        "id": "cd41cbfc-bcc2-34e5-b4f4-e5ce6a2d3c83",
        "product": {
          "name": "org.wso2.carbon.governance:org.wso2.carbon.governance.wsdltool.ui"
        },
        "product_version": "4.8.32 <4.8.32.1"
      },
      {
        "id": "d174e5d3-f299-3695-900a-e9a0ae34318f",
        "product": {
          "name": "org.wso2.carbon.identity.inbound.auth.oauth2:org.wso2.carbon.identity.oauth.ui"
        },
        "product_version": ""
      },
      {
        "id": "d680e00a-bf10-30b9-9d7d-94e2be274b22",
        "product": {
          "name": "org.wso2.carbon.registry:org.wso2.carbon.registry.resource.ui"
        },
        "product_version": "4.7.24 <4.7.24.7"
      },
      {
        "id": "d83a33f1-bc69-342b-8a3e-33f2f9df4929",
        "product": {
          "name": "org.wso2.carbon.identity.inbound.auth.oauth2:org.wso2.carbon.identity.oauth.ui"
        },
        "product_version": "6.9.6 <6.9.6.26"
      },
      {
        "id": "da4f4056-8ac9-39e5-8a84-632ec7ce550b",
        "product": {
          "name": "WSO2 API Manager"
        },
        "product_version": "4.1.0 <4.1.0.227"
      },
      {
        "id": "ddd73ce1-ace8-36de-be4f-21a836008b67",
        "product": {
          "name": "org.wso2.carbon.registry:org.wso2.carbon.registry.info.ui"
        },
        "product_version": ""
      },
      {
        "id": "df345e80-6802-32d8-b0af-ad1db44a38a8",
        "product": {
          "name": "WSO2 API Manager"
        },
        "product_version": "3.2.1 <3.2.1.65"
      },
      {
        "id": "e754c59e-be53-374d-bf84-bc326fdbf5c7",
        "product": {
          "name": "org.wso2.carbon.governance:org.wso2.carbon.governance.wsdltool.ui"
        },
        "product_version": "4.8.34 <4.8.34.3"
      },
      {
        "id": "e8577ffc-52b8-3d25-b563-6c4a4325e169",
        "product": {
          "name": "org.wso2.carbon.registry:org.wso2.carbon.registry.resource.ui"
        },
        "product_version": ""
      },
      {
        "id": "ec1b74dc-8044-3166-bb9b-7dfc0cf2f1d6",
        "product": {
          "name": "WSO2 Universal Gateway"
        },
        "product_version": "4.5.0 <4.5.0.25"
      },
      {
        "id": "f3b303ed-045e-3238-b680-dee4b5f476aa",
        "product": {
          "name": "WSO2 Identity Server as Key Manager"
        },
        "product_version": "5.10.0 <5.10.0.363"
      },
      {
        "id": "f7c57e1b-2d15-304f-aa06-de02211db0ae",
        "product": {
          "name": "org.wso2.carbon.registry:org.wso2.carbon.registry.info.ui"
        },
        "product_version": "4.8.43 <4.8.43.1"
      }
    ]
  }
]

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

05 Nov 2025 19:58Current
5.3Medium risk
Vulners AI Score5.3
CVSS 3.15.2
EPSS0.00025
SSVC
3