Org.wso2.carbon.identity.workflow.user:org.wso2.carbon.user.mgt.workflow
by Wso2
CVEs (1)
| CVE | Vendor / Product | Sev | Risk | CVSS | EPSS | KEV | Published | Description |
|---|---|---|---|---|---|---|---|---|
| CVE-2025-9804 | 0.00 | — | 0.01 | Oct 16, 2025 | An improper access control vulnerability exists in multiple WSO2 products due to insufficient permission enforcement in certain internal SOAP Admin Services and System REST APIs. A low-privileged user may exploit this flaw to perform unauthorized operations, including accessing… |
- CVE-2025-9804Oct 16, 2025risk 0.00cvss —epss 0.01
An improper access control vulnerability exists in multiple WSO2 products due to insufficient permission enforcement in certain internal SOAP Admin Services and System REST APIs. A low-privileged user may exploit this flaw to perform unauthorized operations, including accessing…