CVE-2025-11093

🗓️ 05 Nov 2025 19:15:49Reported by [email protected]Type

nvd

nvd🔗 web.nvd.nist.gov👁 3 Views

Arbitrary code execution in WSO2 products via GraalJS and NashornJS Script Mediator engines by privileged users.

Reporter	Title	Published	Views	Family All 11
Circl	CVE-2025-11093	5 Nov 202521:41	–	circl
CNNVD	WSO2多款产品安全漏洞	5 Nov 202500:00	–	cnnvd
CVE	CVE-2025-11093	5 Nov 202518:31	–	cve
Cvelist	CVE-2025-11093 Arbitrary Code Execution with higher privileged users in Multiple WSO2 Products via Script Mediator Engines (GraalJS and NashornJS)	5 Nov 202518:31	–	cvelist
EUVD	EUVD-2025-37932	5 Nov 202518:31	–	euvd
OSV	CVE-2025-11093	5 Nov 202519:15	–	osv
Positive Technologies	PT-2025-45148	5 Nov 202500:00	–	ptsecurity
RedhatCVE	CVE-2025-11093	6 Nov 202518:37	–	redhatcve
Snyk	Arbitrary Code Injection	5 Nov 202519:46	–	snyk
Snyk	Arbitrary Code Injection	5 Nov 202519:46	–	snyk

NVD

Node

wso2 api_control_planeRange4.5.0–4.5.0.29

OR

wso2 api_managerRange3.1.0–3.1.0.345

OR

wso2 api_managerRange3.2.0–3.2.0.446

OR

wso2 api_managerRange3.2.1–3.2.1.66

OR

wso2 api_managerRange4.1.0–4.1.0.228

OR

wso2 api_managerRange4.2.0–4.2.0.169

OR

wso2 api_managerRange4.3.0–4.3.0.81

OR

wso2 api_managerRange4.4.0–4.4.0.45

OR

wso2 api_managerRange4.5.0–4.5.0.28

OR

wso2 enterprise_integratorRange6.6.0–6.6.0.224

OR

wso2 micro_integratorRange4.0.0–4.0.0.145

OR

wso2 micro_integratorRange4.1.0–4.1.0.147

OR

wso2 micro_integratorRange4.2.0–4.2.0.141

OR

wso2 micro_integratorRange4.3.0–4.3.0.42

OR

wso2 micro_integratorRange4.4.0–4.4.0.27

OR

wso2 traffic_managerRange4.5.0–4.5.0.27

OR

wso2 universal_gatewayRange4.5.0–4.5.0.27

Source	Link
security	www.security.docs.wso2.com/en/latest/security-announcements/security-advisories/2025/WSO2-2025-4510/

17 Jun 2026 08:29Current

CVSS 3.17.2 - 8.4

EPSS0.00417

product suite graaljs engine nashornjs engine script mediator privileged users integration runtime api manager administrator access