CVE-2025-9804
Published Oct 16, 2025An improper access control vulnerability exists in multiple WSO2 products due to insufficient permission enforcement in certain internal SOAP Admin Services and System REST APIs.…
Vendor/product archive
2 CVEs tagged to wso2 / enterprise_mobility_manager — 1 Critical, 0 High, 1 Medium, 0 Low, 0 Unrated.
An improper access control vulnerability exists in multiple WSO2 products due to insufficient permission enforcement in certain internal SOAP Admin Services and System REST APIs.…
WSO2 Data Analytics Server 3.1.0 has XSS in carbon/resources/add_collection_ajaxprocessor.jsp via the collectionName or parentPath parameter.