U.S. flag   An official website of the United States government
Dot gov

Official websites use .gov
A .gov website belongs to an official government organization in the United States.

Https

Secure .gov websites use HTTPS
A lock (Dot gov) or https:// means you've safely connected to the .gov website. Share sensitive information only on official, secure websites.

National Vulnerability Database

National Vulnerability Database

NVD

National Vulnerability Database

Vulnerability Change Records for CVE-2025-10907

Change History

CVE Modified by CISA-ADP 6/17/2026 4:29:14 AM

Action Type Old Value New Value
Added SSVC 

                  
                
              		

              
                
                  
                  
                    
{"timestamp":"2025-11-05T18:49:26.232581Z","id":"CVE-2025-10907","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}

                  
                
              		
            

          
        

      

      

        

          CVE Modified by WSO2 LLC
            6/17/2026 4:29:14 AM
        


        

          
            

              Action
              Type
              Old Value
              New Value
            

          

          
            

              Added
              Affected

              
                
                  
                  
                    

                  
                
              		

              
                
                  
                  
                    
[{"vendor":"WSO2","product":"WSO2 API Manager","defaultStatus":"unaffected","versions":[{"version":"0","lessThan":"3.1.0","versionType":"custom","status":"unknown"},{"version":"3.1.0","lessThan":"3.1.0.345","versionType":"custom","status":"affected"},{"version":"3.2.0","lessThan":"3.2.0.448","versionType":"custom","status":"affected"},{"version":"3.2.1","lessThan":"3.2.1.66","versionType":"custom","status":"affected"},{"version":"4.0.0","lessThan":"4.0.0.367","versionType":"custom","status":"affected"},{"version":"4.1.0","lessThan":"4.1.0.230","versionType":"custom","status":"affected"},{"version":"4.2.0","lessThan":"4.2.0.169","versionType":"custom","status":"affected"},{"version":"4.3.0","lessThan":"4.3.0.81","versionType":"custom","status":"affected"},{"version":"4.4.0","lessThan":"4.4.0.45","versionType":"custom","status":"affected"},{"version":"4.5.0","lessThan":"4.5.0.28","versionType":"custom","status":"affected"}]},{"vendor":"WSO2","product":"WSO2 Open Banking IAM","defaultStatus":"unaffected","versions":[{"version":"0","lessThan":"2.0.0","versionType":"custom","status":"unknown"},{"version":"2.0.0","lessThan":"2.0.0.414","versionType":"custom","status":"affected"}]},{"vendor":"WSO2","product":"WSO2 Open Banking AM","defaultStatus":"unaffected","versions":[{"version":"0","lessThan":"2.0.0","versionType":"custom","status":"unknown"},{"version":"2.0.0","lessThan":"2.0.0.394","versionType":"custom","status":"affected"}]},{"vendor":"WSO2","product":"WSO2 API Control Plane","defaultStatus":"unaffected","versions":[{"version":"4.5.0","lessThan":"4.5.0.29","versionType":"custom","status":"affected"}]},{"vendor":"WSO2","product":"WSO2 Universal Gateway","defaultStatus":"unaffected","versions":[{"version":"4.5.0","lessThan":"4.5.0.27","versionType":"custom","status":"affected"}]},{"vendor":"WSO2","product":"WSO2 Traffic Manager","defaultStatus":"unaffected","versions":[{"version":"4.5.0","lessThan":"4.5.0.27","versionType":"custom","status":"affected"}]},{"vendor":"WSO2","product":"WSO2 Micro Integrator","defaultStatus":"unaffected","versions":[{"version":"0","lessThan":"4.0.0","versionType":"custom","status":"unknown"},{"version":"4.0.0","lessThan":"4.0.0.145","versionType":"custom","status":"affected"},{"version":"4.1.0","lessThan":"4.1.0.147","versionType":"custom","status":"affected"},{"version":"4.2.0","lessThan":"4.2.0.141","versionType":"custom","status":"affected"}]},{"vendor":"WSO2","product":"WSO2 Identity Server","defaultStatus":"unaffected","versions":[{"version":"0","lessThan":"5.10.0","versionType":"custom","status":"unknown"},{"version":"5.10.0","lessThan":"5.10.0.375","versionType":"custom","status":"affected"},{"version":"5.11.0","lessThan":"5.11.0.419","versionType":"custom","status":"affected"},{"version":"6.0.0","lessThan":"6.0.0.248","versionType":"custom","status":"affected"},{"version":"6.1.0","lessThan":"6.1.0.248","versionType":"custom","status":"affected"},{"version":"7.0.0","lessThan":"7.0.0.124","versionType":"custom","status":"affected"},{"version":"7.1.0","lessThan":"7.1.0.31","versionType":"custom","status":"affected"}]},{"vendor":"WSO2","product":"WSO2 Identity Server as Key Manager","defaultStatus":"unaffected","versions":[{"version":"0","lessThan":"5.10.0","versionType":"custom","status":"unknown"},{"version":"5.10.0","lessThan":"5.10.0.365","versionType":"custom","status":"affected"}]},{"vendor":"WSO2","product":"WSO2 Enterprise Integrator","defaultStatus":"unaffected","versions":[{"version":"0","lessThan":"6.6.0","versionType":"custom","status":"unknown"},{"version":"6.6.0","lessThan":"6.6.0.224","versionType":"custom","status":"affected"}]},{"vendor":"WSO2","product":"org.jaggeryjs:org.jaggeryjs.jaggery.app.mgt","defaultStatus":"unknown","packageName":"org.jaggeryjs:org.jaggeryjs.jaggery.app.mgt","versions":[{"version":"0.14.13","lessThan":"0.14.13.8","versionType":"custom","status":"affected"},{"version":"0.14.16","lessThan":"0.14.16.1","versionType":"custom","status":"affected"}]},{"vendor":"WSO2","product":"org.wso2.carbon.event-processing:org.wso2.carbon.event.simulator.core","defaultStatus":"unknown","packageName":"org.wso2.carbon.event-processing:org.wso2.carbon.event.simulator.core","versions":[{"version":"2.2.14","lessThan":"2.2.14.7","versionType":"custom","status":"affected"},{"version":"2.2.17","lessThan":"2.2.17.2","versionType":"custom","status":"affected"},{"version":"2.3.1","lessThan":"2.3.1.3","versionType":"custom","status":"affected"},{"version":"2.3.19","lessThanOrEqual":"*","versionType":"custom","status":"unaffected"}]},{"vendor":"WSO2","product":"org.wso2.carbon.mediation:org.wso2.carbon.mediation.library","defaultStatus":"unknown","packageName":"org.wso2.carbon.mediation:org.wso2.carbon.mediation.library","versions":[{"version":"4.7.30","lessThan":"4.7.30.47","versionType":"custom","status":"affected"},{"version":"4.7.61","lessThan":"4.7.61.62","versionType":"custom","status":"affected"},{"version":"4.7.99","lessThan":"4.7.99.304","versionType":"custom","status":"affected"},{"version":"4.7.131","lessThan":"4.7.131.22","versionType":"custom","status":"affected"},{"version":"4.7.175","lessThan":"4.7.175.30","versionType":"custom","status":"affected"},{"version":"4.7.188","lessThan":"4.7.188.12","versionType":"custom","status":"affected"},{"version":"4.7.204","lessThan":"4.7.204.13","versionType":"custom","status":"affected"},{"version":"4.7.221","lessThan":"4.7.221.7","versionType":"custom","status":"affected"},{"version":"4.7.245","lessThan":"4.7.245.7","versionType":"custom","status":"affected"},{"version":"4.7.262","lessThanOrEqual":"*","versionType":"custom","status":"unaffected"}]},{"vendor":"WSO2","product":"org.wso2.carbon.deployment:org.wso2.carbon.module.mgt","defaultStatus":"unknown","packageName":"org.wso2.carbon.deployment:org.wso2.carbon.module.mgt","versions":[{"version":"4.9.15","lessThan":"4.9.15.2","versionType":"custom","status":"affected"},{"version":"4.10.1","lessThan":"4.10.1.1","versionType":"custom","status":"affected"},{"version":"4.10.9","lessThan":"4.10.9.2","versionType":"custom","status":"affected"},{"version":"4.11.1","lessThan":"4.11.1.3","versionType":"custom","status":"affected"},{"version":"4.11.3","lessThan":"4.11.3.3","versionType":"custom","status":"affected"},{"version":"4.11.7","lessThan":"4.11.7.5","versionType":"custom","status":"affected"},{"version":"4.11.14","lessThan":"4.11.14.2","versionType":"custom","status":"affected"},{"version":"4.11.17","lessThan":"4.11.17.3","versionType":"custom","status":"affected"},{"version":"4.11.18","lessThan":"4.11.18.1","versionType":"custom","status":"affected"},{"version":"4.11.24","lessThanOrEqual":"*","versionType":"custom","status":"unaffected"}]},{"vendor":"WSO2","product":"org.wso2.carbon.deployment:org.wso2.carbon.webapp.mgt","defaultStatus":"unknown","packageName":"org.wso2.carbon.deployment:org.wso2.carbon.webapp.mgt","versions":[{"version":"4.10.1","lessThan":"4.10.1.1","versionType":"custom","status":"affected"},{"version":"4.10.9","lessThan":"4.10.9.2","versionType":"custom","status":"affected"},{"version":"4.11.1","lessThan":"4.11.1.3","versionType":"custom","status":"affected"},{"version":"4.11.3","lessThan":"4.11.3.3","versionType":"custom","status":"affected"},{"version":"4.11.7","lessThan":"4.11.7.5","versionType":"custom","status":"affected"},{"version":"4.11.14","lessThan":"4.11.14.2","versionType":"custom","status":"affected"},{"version":"4.11.17","lessThan":"4.11.17.3","versionType":"custom","status":"affected"},{"version":"4.11.18","lessThan":"4.11.18.1","versionType":"custom","status":"affected"},{"version":"4.11.24","lessThanOrEqual":"*","versionType":"custom","status":"unaffected"}]},{"vendor":"WSO2","product":"org.apache.ws.commons.axiom.wso2:axiom","defaultStatus":"unknown","packageName":"org.apache.ws.commons.axiom.wso2:axiom","versions":[{"version":"1.2.11","lessThan":"1.2.11.wso2v17_5","versionType":"custom","status":"affected"},{"version":"1.2.11-wso2v21","lessThanOrEqual":"*","versionType":"custom","status":"unaffected"}]},{"vendor":"WSO2","product":"org.wso2.carbon:org.wso2.carbon.base","defaultStatus":"unknown","packageName":"org.wso2.carbon:org.wso2.carbon.base","versions":[{"version":"4.5.3","lessThan":"4.5.3.46","versionType":"custom","status":"affected"},{"version":"4.6.0","lessThan":"4.6.0.2005","versionType":"custom","status":"affected"},{"version":"4.6.1","lessThan":"4.6.1.153","versionType":"custom","status":"affected"},{"version":"4.6.2","lessThan":"4.6.2.668","versionType":"custom","status":"affected"},{"version":"4.6.3","lessThan":"4.6.3.37","versionType":"custom","status":"affected"},{"version":"4.6.4","lessThan":"4.6.4.15","versionType":"custom","status":"affected"},{"version":"4.7.1","lessThan":"4.7.1.72","versionType":"custom","status":"affected"},{"version":"4.8.1","lessThan":"4.8.1.40","versionType":"custom","status":"affected"},{"version":"4.9.0","lessThan":"4.9.0.103","versionType":"custom","status":"affected"},{"version":"4.9.26","lessThan":"4.9.26.26","versionType":"custom","status":"affected"},{"version":"4.9.27","lessThan":"4.9.27.11","versionType":"custom","status":"affected"},{"version":"4.9.28","lessThan":"4.9.28.12","versionType":"custom","status":"affected"},{"version":"4.10.9","lessThan":"4.10.9.71","versionType":"custom","status":"affected"},{"version":"4.10.42","lessThan":"4.10.42.14","versionType":"custom","status":"affected"},{"version":"4.9.30","lessThanOrEqual":"4.9.*","versionType":"custom","status":"unaffected"},{"version":"4.10.95","lessThanOrEqual":"*","versionType":"custom","status":"unaffected"}]},{"vendor":"WSO2","product":"org.wso2.carbon:org.wso2.carbon.utils","defaultStatus":"unknown","packageName":"org.wso2.carbon:org.wso2.carbon.utils","versions":[{"version":"4.5.3","lessThan":"4.5.3.46","versionType":"custom","status":"affected"},{"version":"4.6.0","lessThan":"4.6.0.2005","versionType":"custom","status":"affected"},{"version":"4.6.1","lessThan":"4.6.1.153","versionType":"custom","status":"affected"},{"version":"4.6.2","lessThan":"4.6.2.668","versionType":"custom","status":"affected"},{"version":"4.6.3","lessThan":"4.6.3.37","versionType":"custom","status":"affected"},{"version":"4.6.4","lessThan":"4.6.4.15","versionType":"custom","status":"affected"},{"version":"4.7.1","lessThan":"4.7.1.72","versionType":"custom","status":"affected"},{"version":"4.8.1","lessThan":"4.8.1.40","versionType":"custom","status":"affected"},{"version":"4.9.0","lessThan":"4.9.0.103","versionType":"custom","status":"affected"},{"version":"4.9.26","lessThan":"4.9.26.26","versionType":"custom","status":"affected"},{"version":"4.9.27","lessThan":"4.9.27.11","versionType":"custom","status":"affected"},{"version":"4.9.28","lessThan":"4.9.28.12","versionType":"custom","status":"affected"},{"version":"4.10.9","lessThan":"4.10.9.71","versionType":"custom","status":"affected"},{"version":"4.10.42","lessThan":"4.10.42.14","versionType":"custom","status":"affected"},{"version":"4.9.30","lessThanOrEqual":"4.9.*","versionType":"custom","status":"unaffected"},{"version":"4.10.95","lessThanOrEqual":"*","versionType":"custom","status":"unaffected"}]}]