https://vulnerability.circl.lu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Mon, 05 Oct 2026 05:16:49 +0000 https://vulnerability.circl.lu/vuln/cve-2025-12737 <p><strong>Affected:</strong> WSO2 Open Banking AM, WSO2 Open Banking IAM, WSO2 Traffic Manager, WSO2 Universal Gateway, WSO2 API Control Plane, WSO2 API Manager, WSO2 Identity Server as Key Manager, WSO2 Identity Server</p> <p>The administrative operations within the Carbon Console do not adequately validate specific user-supplied input. This oversight allows a malicious actor with administrative privileges to inject and execute arbitrary code remotely.</p> <p>Successful exploitation enables a threat actor with administrative privileges and Carbon Console access to execute remote arbitrary code through specific administrative operations, leading to a complete compromise of the affected system.</p> <p><strong>Affected:</strong> WSO2 Open Banking AM, WSO2 Open Banking IAM, WSO2 Traffic Manager, WSO2 Universal Gateway, WSO2 API Control Plane, WSO2 API Manager, WSO2 Identity Server as Key Manager, WSO2 Identity Server</p> <p>The administrative operations within the Carbon Console do not adequately validate specific user-supplied input. This oversight allows a malicious actor with administrative privileges to inject and execute arbitrary code remotely.</p> <p>Successful exploitation enables a threat actor with administrative privileges and Carbon Console access to execute remote arbitrary code through specific administrative operations, leading to a complete compromise of the affected system.</p> https://vulnerability.circl.lu/vuln/cve-2025-12737