CVE-2025-11969

Vendor

WSO2

Product

WSO2 API Manager, WSO2 Identity Server as Key Manager, WSO2 Open Banking AM, WSO2 Open Banking IAM

CVSS v3.1

9.4 AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:L

Weakness

CWE-285

Exposure class

Identity

Every item in the archive that references this CVE, highest rank first. Headlines open the publisher.

1. 45
   CVE NVD 3h ago

   The System REST APIs do not correctly enforce access control mechanisms, allowing users with lower privilege roles to execute administrative actions…

   The System REST APIs do not correctly enforce access control mechanisms, allowing users with lower privilege roles to execute administrative actions that should be restricted. This weakness permits unauthorized operations on the…

   CVSS 9.4 CVE-2025-11969 WSO2