Skip to content
OpenAdvisories

Product · WSO2

API Manager Analytics

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 8.9
    CVE-2025-9804

    Improper Access Control in Multiple WSO2 Products via Internal SOAP Admin Services and System REST APIs

    An improper access control vulnerability exists in multiple WSO2 products due to insufficient permission enforcement in certain internal SOAP Admin Services and System REST APIs. A low-privileged user may exploit this flaw to perform unauthorized operations, …

    WSO2 WSO2 API Manager WSO2 Identity Server WSO2 Identity Server as Key Manager