U.S. flag   An official website of the United States government
Dot gov

Official websites use .gov
A .gov website belongs to an official government organization in the United States.

Https

Secure .gov websites use HTTPS
A lock (Dot gov) or https:// means you've safely connected to the .gov website. Share sensitive information only on official, secure websites.

National Vulnerability Database

National Vulnerability Database

NVD

National Vulnerability Database

Vulnerability Change Records for CVE-2025-10611

Change History

CVE Modified by CISA-ADP 6/17/2026 4:28:37 AM

Action Type Old Value New Value
Added SSVC 

                  
                
              		

              
                
                  
                  
                    
{"timestamp":"2025-10-16T13:24:33.931504Z","id":"CVE-2025-10611","options":[{"exploitation":"none"},{"automatable":"yes"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}

                  
                
              		
            

          
        

      

      

        

          CVE Modified by WSO2 LLC
            6/17/2026 4:28:37 AM
        


        

          
            

              Action
              Type
              Old Value
              New Value
            

          

          
            

              Added
              Affected

              
                
                  
                  
                    

                  
                
              		

              
                
                  
                  
                    
[{"vendor":"WSO2","product":"WSO2 API Manager","defaultStatus":"unaffected","versions":[{"version":"0","lessThan":"2.1.0","versionType":"custom","status":"unknown"},{"version":"2.1.0","lessThan":"2.1.0.42","versionType":"custom","status":"affected"},{"version":"2.2.0","lessThan":"2.2.0.61","versionType":"custom","status":"affected"},{"version":"2.5.0","lessThan":"2.5.0.87","versionType":"custom","status":"affected"},{"version":"2.6.0","lessThan":"2.6.0.148","versionType":"custom","status":"affected"},{"version":"3.0.0","lessThan":"3.0.0.178","versionType":"custom","status":"affected"},{"version":"3.1.0","lessThan":"3.1.0.345","versionType":"custom","status":"affected"},{"version":"3.2.0","lessThan":"3.2.0.446","versionType":"custom","status":"affected"},{"version":"3.2.1","lessThan":"3.2.1.66","versionType":"custom","status":"affected"},{"version":"4.0.0","lessThan":"4.0.0.366","versionType":"custom","status":"affected"},{"version":"4.1.0","lessThan":"4.1.0.228","versionType":"custom","status":"affected"},{"version":"4.2.0","lessThan":"4.2.0.169","versionType":"custom","status":"affected"},{"version":"4.3.0","lessThan":"4.3.0.81","versionType":"custom","status":"affected"},{"version":"4.4.0","lessThan":"4.4.0.45","versionType":"custom","status":"affected"},{"version":"4.5.0","lessThan":"4.5.0.28","versionType":"custom","status":"affected"}]},{"vendor":"WSO2","product":"WSO2 API Control Plane","defaultStatus":"unaffected","versions":[{"version":"4.5.0","lessThan":"4.5.0.29","versionType":"custom","status":"affected"}]},{"vendor":"WSO2","product":"WSO2 Open Banking AM","defaultStatus":"unaffected","versions":[{"version":"0","lessThan":"1.4.0","versionType":"custom","status":"unknown"},{"version":"1.4.0","lessThan":"1.4.0.141","versionType":"custom","status":"affected"},{"version":"1.5.0","lessThan":"1.5.0.142","versionType":"custom","status":"affected"},{"version":"2.0.0","lessThan":"2.0.0.394","versionType":"custom","status":"affected"}]},{"vendor":"WSO2","product":"WSO2 Open Banking IAM","defaultStatus":"unaffected","versions":[{"version":"0","lessThan":"2.0.0","versionType":"custom","status":"unknown"},{"version":"2.0.0","lessThan":"2.0.0.414","versionType":"custom","status":"affected"}]},{"vendor":"WSO2","product":"WSO2 Identity Server","defaultStatus":"unaffected","versions":[{"version":"0","lessThan":"5.3.0","versionType":"custom","status":"unknown"},{"version":"5.3.0","lessThan":"5.3.0.39","versionType":"custom","status":"affected"},{"version":"5.5.0","lessThan":"5.5.0.54","versionType":"custom","status":"affected"},{"version":"5.6.0","lessThan":"5.6.0.62","versionType":"custom","status":"affected"},{"version":"5.7.0","lessThan":"5.7.0.128","versionType":"custom","status":"affected"},{"version":"5.8.0","lessThan":"5.8.0.112","versionType":"custom","status":"affected"},{"version":"5.9.0","lessThan":"5.9.0.171","versionType":"custom","status":"affected"},{"version":"5.10.0","lessThan":"5.10.0.375","versionType":"custom","status":"affected"},{"version":"5.11.0","lessThan":"5.11.0.419","versionType":"custom","status":"affected"},{"version":"6.0.0","lessThan":"6.0.0.248","versionType":"custom","status":"affected"},{"version":"6.1.0","lessThan":"6.1.0.248","versionType":"custom","status":"affected"},{"version":"7.0.0","lessThan":"7.0.0.124","versionType":"custom","status":"affected"},{"version":"7.1.0","lessThan":"7.1.0.31","versionType":"custom","status":"affected"}]},{"vendor":"WSO2","product":"WSO2 Identity Server as Key Manager","defaultStatus":"unaffected","versions":[{"version":"0","lessThan":"5.3.0","versionType":"custom","status":"unknown"},{"version":"5.3.0","lessThan":"5.3.0.44","versionType":"custom","status":"affected"},{"version":"5.5.0","lessThan":"5.5.0.55","versionType":"custom","status":"affected"},{"version":"5.6.0","lessThan":"5.6.0.77","versionType":"custom","status":"affected"},{"version":"5.7.0","lessThan":"5.7.0.127","versionType":"custom","status":"affected"},{"version":"5.9.0","lessThan":"5.9.0.178","versionType":"custom","status":"affected"},{"version":"5.10.0","lessThan":"5.10.0.365","versionType":"custom","status":"affected"}]},{"vendor":"WSO2","product":"WSO2 Open Banking KM","defaultStatus":"unaffected","versions":[{"version":"0","lessThan":"1.4.0","versionType":"custom","status":"unknown"},{"version":"1.4.0","lessThan":"1.4.0.135","versionType":"custom","status":"affected"},{"version":"1.5.0","lessThan":"1.5.0.125","versionType":"custom","status":"affected"}]},{"vendor":"WSO2","product":"WSO2 Universal Gateway","defaultStatus":"unaffected","versions":[{"version":"4.5.0","lessThan":"4.5.0.27","versionType":"custom","status":"affected"}]},{"vendor":"WSO2","product":"WSO2 Traffic Manager","defaultStatus":"unaffected","versions":[{"version":"4.5.0","lessThan":"4.5.0.27","versionType":"custom","status":"affected"}]},{"vendor":"WSO2","product":"org.wso2.carbon.identity.auth.rest:org.wso2.carbon.identity.auth.service","defaultStatus":"unknown","packageName":"org.wso2.carbon.identity.auth.rest:org.wso2.carbon.identity.auth.service","versions":[{"version":"1.1.1","lessThan":"1.1.1.7","versionType":"custom","status":"affected"},{"version":"1.1.16","lessThan":"1.1.16.6","versionType":"custom","status":"affected"},{"version":"1.1.18","lessThan":"1.1.18.7","versionType":"custom","status":"affected"},{"version":"1.1.20","lessThan":"1.1.20.9","versionType":"custom","status":"affected"},{"version":"1.1.26","lessThan":"1.1.26.11","versionType":"custom","status":"affected"},{"version":"1.3.6","lessThan":"1.3.6.11","versionType":"custom","status":"affected"},{"version":"1.4.0","lessThan":"1.4.0.21","versionType":"custom","status":"affected"},{"version":"1.4.25","lessThan":"1.4.25.27","versionType":"custom","status":"affected"},{"version":"1.4.52","lessThan":"1.4.52.6","versionType":"custom","status":"affected"},{"version":"1.6.1","lessThan":"1.6.1.12","versionType":"custom","status":"affected"},{"version":"1.7.1","lessThan":"1.7.1.7","versionType":"custom","status":"affected"},{"version":"1.8.11","lessThan":"1.8.11.8","versionType":"custom","status":"affected"},{"version":"1.8.41","lessThan":"1.8.41.4","versionType":"custom","status":"affected"},{"version":"1.9.4","lessThan":"1.9.4.9","versionType":"custom","status":"affected"},{"version":"1.9.18","lessThan":"1.9.18.7","versionType":"custom","status":"affected"},{"version":"1.8","lessThan":"1.8.48","versionType":"custom","status":"affected"},{"version":"1.9.46","lessThanOrEqual":"*","versionType":"custom","status":"unaffected"}]},{"vendor":"WSO2","product":"org.wso2.carbon.identity.auth.rest:org.wso2.carbon.identity.auth.valve","defaultStatus":"unknown","packageName":"org.wso2.carbon.identity.auth.rest:org.wso2.carbon.identity.auth.valve","versions":[{"version":"1.1.1","lessThan":"1.1.1.7","versionType":"custom","status":"affected"},{"version":"1.1.16","lessThan":"1.1.16.6","versionType":"custom","status":"affected"},{"version":"1.1.18","lessThan":"1.1.18.7","versionType":"custom","status":"affected"},{"version":"1.1.20","lessThan":"1.1.20.9","versionType":"custom","status":"affected"},{"version":"1.1.26","lessThan":"1.1.26.11","versionType":"custom","status":"affected"},{"version":"1.3.6","lessThan":"1.3.6.11","versionType":"custom","status":"affected"},{"version":"1.4.0","lessThan":"1.4.0.21","versionType":"custom","status":"affected"},{"version":"1.4.25","lessThan":"1.4.25.27","versionType":"custom","status":"affected"},{"version":"1.4.52","lessThan":"1.4.52.6","versionType":"custom","status":"affected"},{"version":"1.6.1","lessThan":"1.6.1.12","versionType":"custom","status":"affected"},{"version":"1.7.1","lessThan":"1.7.1.7","versionType":"custom","status":"affected"},{"version":"1.8.11","lessThan":"1.8.11.8","versionType":"custom","status":"affected"},{"version":"1.8.41","lessThan":"1.8.41.4","versionType":"custom","status":"affected"},{"version":"1.9.4","lessThan":"1.9.4.9","versionType":"custom","status":"affected"},{"version":"1.9.18","lessThan":"1.9.18.7","versionType":"custom","status":"affected"},{"version":"1.8","lessThan":"1.8.48","versionType":"custom","status":"affected"},{"version":"1.9.46","lessThanOrEqual":"*","versionType":"custom","status":"unaffected"}]}]