{"metadata": {"vulnerability": "CVE-2025-11969", "count": 17, "kinds": {"milestone": 4, "sighting": 5, "kev": 0, "other": 8}}, "data": [{"timestamp": "2025-10-20T15:28:50.917Z", "date_only": false, "value": "2025-10-20T15:28:50.917Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2025-11969", "field": "cveMetadata.dateReserved"}, {"timestamp": "2026-11-02T05:53:51.375Z", "date_only": false, "value": "2026-11-02T05:53:51.375Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2025-11969", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2026-11-02T05:53:51.375Z", "date_only": false, "value": "2026-11-02T05:53:51.375Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / WSO2", "record": "CVE-2025-11969", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2026-11-02T06:01:45.909Z", "date_only": false, "value": "2026-11-02T06:01:45.909711Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/cve/statuses/117545323993440154", "record": "CVE-2025-11969", "field": "creation_timestamp", "uuid": "ffd168b6-6d24-422f-8922-1f99dea1309a", "content": "CVE-2025-11969 Broken Access Control via System REST APIs in Multiple WSO2 Products Allows Unauthorized Administrative Actions The System REST APIs do not correctly enforce access control mechanisms, allowing users with lower privilege roles to execute administrative actions that should be restricted. This weakness permits unauthorized operations on the affected product.\nSuccessful exploitation could enable a malicious actor to perform unauthorized administrative operations, including executing administrative functions. APIs exposed through the WSO2 API Manager's API Gateway are not affected by this vulnerability.\nhttps://www.cve.org/CVERecord?id=CVE-2025-11969https://security.docs.wso2.com/en/latest/security-announcements/security-advisories/2026/WSO2-2025-4733/#wso2 #WSO2 #WSO2APIManager #WSO2IdentityServerasKeyManager #WSO2OpenBankingAM #WSO2OpenBankingIAM #WSO2APIControlPlane #WSO2UniversalGateway #WSO2TrafficManager #WSO2CarbonAPIManagerRestAPIUtility #WSO2CarbonAPIManagerRestAPICommonFunctions#CVE_2025_11969#bot", "url": "https://infosec.exchange/users/cve/statuses/117545323993440154"}, {"timestamp": "2026-11-02T06:17:42Z", "date_only": false, "value": "2026-11-02T06:17:42Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-P4RQ-Q6FH-965P", "record": "GHSA-P4RQ-Q6FH-965P", "field": "database_specific.nvd_published_at", "linked_record": true}, {"timestamp": "2026-11-02T06:17:42.087Z", "date_only": false, "value": "2026-11-02T06:17:42.087", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2025-11969", "record": "FKIE_CVE-2025-11969", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2026-11-02T06:31:15Z", "date_only": false, "value": "2026-11-02T06:31:15Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-P4RQ-Q6FH-965P", "record": "GHSA-P4RQ-Q6FH-965P", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2026-11-02T06:31:15Z", "date_only": false, "value": "2026-11-02T06:31:15Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-P4RQ-Q6FH-965P", "record": "GHSA-P4RQ-Q6FH-965P", "field": "modified", "linked_record": true}, {"timestamp": "2026-11-02T06:40:04.467Z", "date_only": false, "value": "2026-11-02T06:40:04.467671Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mzcppa2lkt2z", "record": "CVE-2025-11969", "field": "creation_timestamp", "uuid": "3c180299-6289-4b89-af4c-f7ca1ee10bb8", "content": "CVE-2025-11969 - wso2 api manager\nThe system APIs in WSO2 API Manager, Identity Server (as key manager), Open Banking AM, Open Banking IAM, and API Control Plane do not properly check user permissions, so users with\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#wso2 #CVE #infosec", "url": "https://bsky.app/profile/stackflag.bsky.social/post/3mzcppa2lkt2z"}, {"timestamp": "2026-11-02T07:45:53.824Z", "date_only": false, "value": "2026-11-02T07:45:53.824725Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/fc-vulns.bsky.social/post/3mzctexjhkr22", "record": "CVE-2025-11969", "field": "creation_timestamp", "uuid": "af815ff5-210e-42f4-bf9d-f1a5f51a1efd", "content": "Watch this critical CVE.\n\nCVE-2025-11969 published 2026-11-02 \u2014 CVSS 9.4.\n\nWSO2 API Manager System REST APIs lack proper access control, so lower-privilege users can run admin actions (CWE-285).\n\nhttps://www.fc-vulns.com/cve/CVE-2025-11969/\n\n#fcvulns #WSO2", "url": "https://bsky.app/profile/fc-vulns.bsky.social/post/3mzctexjhkr22"}, {"timestamp": "2026-11-02T08:07:14.292Z", "date_only": false, "value": "2026-11-02T08:07:14.292602Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mzcul4xqix2n", "record": "CVE-2025-11969", "field": "creation_timestamp", "uuid": "574733ed-9d13-4ef3-9756-73fe47920977", "content": "\ud83d\udea8 CVE-2025-11969 \u2014 CVSS 9.4 CRITICAL\n\nThe System REST APIs do not correctly enforce access control mechanisms, allowing users with lower privileg...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2025-11969\n\n#CVE #CyberSecurity #InfoSec", "url": "https://bsky.app/profile/stemshop.bsky.social/post/3mzcul4xqix2n"}, {"timestamp": "2026-11-02T19:41:02.813Z", "date_only": false, "value": "2026-11-02T19:41:02.813424Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2025-11969", "field": "containers.adp.0.metrics.0.other.content.timestamp"}, {"timestamp": "2026-11-02T19:41:02.813Z", "date_only": false, "value": "2026-11-02T19:41:02.813424Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2025-11969", "record": "FKIE_CVE-2025-11969", "field": "metrics.ssvcV203.0.ssvcData.timestamp", "linked_record": true}, {"timestamp": "2026-11-02T19:41:15.316Z", "date_only": false, "value": "2026-11-02T19:41:15.316Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2025-11969", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2026-11-02T19:41:15.316Z", "date_only": false, "value": "2026-11-02T19:41:15.316Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2025-11969", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2026-11-02T20:17:22.200Z", "date_only": false, "value": "2026-11-02T20:17:22.200", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2025-11969", "record": "FKIE_CVE-2025-11969", "field": "lastModified", "linked_record": true}, {"timestamp": "2026-11-03T06:41:45.029Z", "date_only": false, "value": "2026-11-03T06:41:45.029684Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/cybowl.bsky.social/post/3mzf7xnb2hl27", "record": "CVE-2025-11969", "field": "creation_timestamp", "uuid": "f0b1de23-a8c7-4ffe-aec1-ec010f7f837e", "content": "Vuln\u00e9rabilit\u00e9s critiques (CVSS \u2265 9) \u00b7 4\n\u2022 LXD et MicroCloud (CVE-2026-112816), CVSS 10.0 (CERT-FR)\n\u2022 pgAdmin 4 (CVE-2026-116241), CVSS 9.4 (Cyberveille)\n\u2022 WSO2 API Manager (CVE-2025-11969), CVSS 9.4 (Cyberveille)\n\u2022 JetBrains Toolbox App et IDE JetBrains (CVE-2026-118697), CVSS 9.0 (Cyberveille)", "url": "https://bsky.app/profile/cybowl.bsky.social/post/3mzf7xnb2hl27"}], "metrics": {"as_of": "2026-11-03T12:15:00.668Z", "anchors": {"origin": {"timestamp": "2026-11-02T05:53:51.375Z", "date_only": false, "value": "2026-11-02T05:53:51.375Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2025-11969", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "discovery": null, "report": null, "acknowledgement": null, "disclosure": {"timestamp": "2026-11-02T05:53:51.375Z", "date_only": false, "value": "2026-11-02T05:53:51.375Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2025-11969", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "exploit_publication": null, "exploitation": null, "patch": null}, "vendor_response_time": {"available": false, "missing": ["start", "end"]}, "time_to_exploit": {"available": false, "missing": ["end"]}, "disclosure_to_exploit": {"available": false, "missing": ["end"]}, "disclosure_to_exploit_publication": {"available": false, "missing": ["end"]}, "time_to_patch": {"available": false, "missing": ["start", "end"]}, "total_time_to_patch": {"available": false, "missing": ["start", "end"]}, "disclosure_to_patch": {"available": false, "missing": ["end"]}, "time_unpatched": {"available": true, "seconds": 109269.293236, "hours": 30.352581454444444, "days": 1.264690893935185, "min_seconds": 109269.293236, "max_seconds": 109269.293236, "approximate": false, "ongoing": true, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2026-11-02T05:53:51.375Z", "date_only": false, "value": "2026-11-02T05:53:51.375Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2025-11969", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "end": {"timestamp": "2026-11-03T12:15:00.668Z", "date_only": false, "label": "As of", "source": "Calculation clock"}}, "exploitation_to_patch": {"available": false, "missing": ["start"]}, "exploit_publication_to_patch": {"available": false, "missing": ["start"]}}}