CVE-2025-5770: api control plane 4.5.0; +5 more affected products

Affected technology

api control plane · 4.5.0
wso2

api manager · 4.2.0
wso2

api manager · 4.3.0
wso2

api manager · 4.4.0
wso2

api manager · 4.5.0
wso2

identity server · 6.0.0
wso2

identity server · 6.1.0
wso2

identity server · 7.0.0
wso2

identity server · 7.1.0
wso2

WSO2 Identity Server · 6.0.0 to before 6.0.0.247, 6.1.0 to before 6.1.0.246, 7.0.0 to before 7.0.0.122, 7.1.0 to before 7.1.0.29
WSO2

WSO2 API Manager · 4.2.0 to before 4.2.0.150, 4.3.0 to before 4.3.0.63, 4.4.0 to before 4.4.0.26, 4.5.0 to before 4.5.0.10
WSO2

WSO2 API Control Plane · 4.5.0 to before 4.5.0.11
WSO2

Component: Not specified by the source

Attack conditions (Source advisory, CVSS 3.1): Network (remote) · No privileges required · User interaction required

What an attacker can do

Source advisory’s CVSS 3.1 assessment (base score 6.1/10) rates confidentiality and integrity impact as low; availability impact as none. The description does not specify what an attacker can achieve beyond these rated impacts.