CVE-2025-7203Published
Sensitive Information Disclosure via Management Console and Product Files in Multiple WSO2 Products Allows Retrieval of Credentials
cve-program · CVE-2025-7203
PublishedWSO2 Universal Gateway
Vendor product
Original vendor version evidence · not evaluated as a NuGet range
{
"vendor": "WSO2",
"product": "WSO2 Universal Gateway",
"versions": [
{
"status": "unknown",
"version": "0",
"lessThan": "4.5.0",
"versionType": "custom"
},
{
"status": "affected",
"version": "4.5.0",
"lessThan": "4.5.0.46",
"versionType": "custom"
},
{
"status": "affected",
"version": "4.6.0",
"lessThan": "4.6.0.14",
"versionType": "custom"
}
],
"defaultStatus": "unaffected"
}WSO2 Traffic Manager
Vendor product
Original vendor version evidence · not evaluated as a NuGet range
{
"vendor": "WSO2",
"product": "WSO2 Traffic Manager",
"versions": [
{
"status": "unknown",
"version": "0",
"lessThan": "4.5.0",
"versionType": "custom"
},
{
"status": "affected",
"version": "4.5.0",
"lessThan": "4.5.0.45",
"versionType": "custom"
},
{
"status": "affected",
"version": "4.6.0",
"lessThan": "4.6.0.14",
"versionType": "custom"
}
],
"defaultStatus": "unaffected"
}WSO2 API Control Plane
Vendor product
Original vendor version evidence · not evaluated as a NuGet range
{
"vendor": "WSO2",
"product": "WSO2 API Control Plane",
"versions": [
{
"status": "unknown",
"version": "0",
"lessThan": "4.5.0",
"versionType": "custom"
},
{
"status": "affected",
"version": "4.5.0",
"lessThan": "4.5.0.47",
"versionType": "custom"
},
{
"status": "affected",
"version": "4.6.0",
"lessThan": "4.6.0.15",
"versionType": "custom"
}
],
"defaultStatus": "unaffected"
}WSO2 API Manager
Vendor product
Original vendor version evidence · not evaluated as a NuGet range
{
"vendor": "WSO2",
"product": "WSO2 API Manager",
"versions": [
{
"status": "unknown",
"version": "0",
"lessThan": "4.3.0",
"versionType": "custom"
},
{
"status": "affected",
"version": "4.3.0",
"lessThan": "4.3.0.97",
"versionType": "custom"
},
{
"status": "affected",
"version": "4.4.0",
"lessThan": "4.4.0.61",
"versionType": "custom"
},
{
"status": "affected",
"version": "4.5.0",
"lessThan": "4.5.0.46",
"versionType": "custom"
},
{
"status": "affected",
"version": "4.6.0",
"lessThan": "4.6.0.14",
"versionType": "custom"
}
],
"defaultStatus": "unaffected"
}WSO2 Identity Server
Vendor product
Original vendor version evidence · not evaluated as a NuGet range
{
"vendor": "WSO2",
"product": "WSO2 Identity Server",
"versions": [
{
"status": "unknown",
"version": "0",
"lessThan": "7.0.0",
"versionType": "custom"
},
{
"status": "affected",
"version": "7.0.0",
"lessThan": "7.0.0.111",
"versionType": "custom"
},
{
"status": "affected",
"version": "7.1.0",
"lessThan": "7.1.0.19",
"versionType": "custom"
}
],
"defaultStatus": "unaffected"
}org.wso2.carbon.commons:org.wso2.carbon.logging.appender.http
Vendor product
Original vendor version evidence · not evaluated as a NuGet range
{
"vendor": "WSO2",
"product": "WSO2 Carbon Secured HTTP Log4j2 Appender",
"packageName": "org.wso2.carbon.commons:org.wso2.carbon.logging.appender.http",
"versions": [
{
"status": "affected",
"version": "4.9.11",
"lessThan": "4.9.11.4",
"versionType": "custom"
},
{
"status": "affected",
"version": "4.9.18",
"lessThan": "4.9.18.2",
"versionType": "custom"
},
{
"status": "affected",
"version": "4.10.9",
"lessThan": "4.10.9.2",
"versionType": "custom"
},
{
"status": "affected",
"version": "4.10.19",
"lessThan": "4.10.19.1",
"versionType": "custom"
}
],
"defaultStatus": "unknown"
}org.wso2.carbon.commons:org.wso2.carbon.logging.service
Vendor product
Original vendor version evidence · not evaluated as a NuGet range
{
"vendor": "WSO2",
"product": "WSO2 Carbon Logging Services",
"packageName": "org.wso2.carbon.commons:org.wso2.carbon.logging.service",
"versions": [
{
"status": "affected",
"version": "4.9.11",
"lessThan": "4.9.11.4",
"versionType": "custom"
},
{
"status": "affected",
"version": "4.9.18",
"lessThan": "4.9.18.2",
"versionType": "custom"
},
{
"status": "affected",
"version": "4.10.9",
"lessThan": "4.10.9.2",
"versionType": "custom"
},
{
"status": "affected",
"version": "4.10.19",
"lessThan": "4.10.19.1",
"versionType": "custom"
},
{
"status": "unaffected",
"version": "x",
"lessThanOrEqual": "*",
"versionType": "custom"
}
],
"defaultStatus": "unknown"
}org.wso2.carbon.identity.server.api:org.wso2.carbon.identity.api.server.configs.v1
Vendor product
Original vendor version evidence · not evaluated as a NuGet range
{
"vendor": "WSO2",
"product": "WSO2 Carbon Identity API Server Configs V1",
"packageName": "org.wso2.carbon.identity.server.api:org.wso2.carbon.identity.api.server.configs.v1",
"versions": [
{
"status": "affected",
"version": "1.2.176",
"lessThan": "1.2.176.16",
"versionType": "custom"
},
{
"status": "affected",
"version": "1.3.83",
"lessThan": "1.3.83.7",
"versionType": "custom"
}
],
"defaultStatus": "unknown"
}Original source record · Cite this exact observation · Complete original publisher JSON