Skip to content
OpenAdvisories

Product · WSO2

WSO2 Carbon API Manager Rest API Utility

5 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 6.3
    CVE-2025-8325

    Improper Access Control via Gateway API in Multiple WSO2 Products Allows Unauthorized Operations

    The software fails to enforce role-based access controls for certain Gateway API invocations. Users with the 'Internal/Everyone' role can invoke these APIs, bypassing intended permission checks. This same vulnerability also affects Internal Service APIs, pote…

    WSO2 WSO2 API Manager WSO2 API Control Plane WSO2 Traffic Manager