Skip to content

CVE record · 1 source

CVE-2025-14260

CVSS 8.3

Due to the improper implementation of access control rules, the WSO2 product accepts user-supplied input related to resource location without…

Vendor: WSO2
Product: WSO2 API Manager, WSO2 Identity Server as Key Manager, WSO2 Open Banking AM, WSO2 Open Banking IAM
CVSS v3.1: 8.3 AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:L
EPSS: 0.003 (p20)
Weakness: CWE-918
Exposure class: Identity

Coverage

1

Every item in the archive that references this CVE, highest rank first. Headlines open the publisher.

24

CVE NVD 3d ago

Due to the improper implementation of access control rules, the WSO2 product accepts user-supplied input related to resource location without…

Due to the improper implementation of access control rules, the WSO2 product accepts user-supplied input related to resource location without enforcing expected validation constraints. This can be exploited by an unauthenticated…

CVSS 8.3 CVE-2025-14260 WSO2