CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2025-12737

The administrative operations within the Carbon Console do not adequately validate specific user-supplied input. This oversight allows a malicious actor with administrative privileges to inject and execute arbitrary code remotely. Successful exploitation enables a threat actor with administrative privileges and Carbon Console access to execute remote arbitrary code through specific administrative operations, leading to a complete compromise of the affected system.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.002

EPSS Ranking 12.9%

CVSS Severity

CVSS v3 Score 8.4

References

https://security.docs.wso2.com/en/latest/security-announcements/security-advisories/2026/WSO2-2025-4771/

Products affected by CVE-2025-12737

Wso2 » Api Control Plane » Version: 4.5.0

cpe:2.3:a:wso2:api_control_plane:4.5.0
Wso2 » Api Control Plane » Version: 4.5.0.10

cpe:2.3:a:wso2:api_control_plane:4.5.0.10
Wso2 » Api Control Plane » Version: 4.5.0.18

cpe:2.3:a:wso2:api_control_plane:4.5.0.18
Wso2 » Api Control Plane » Version: 4.5.0.21

cpe:2.3:a:wso2:api_control_plane:4.5.0.21
Wso2 » Api Control Plane » Version: 4.5.0.29

cpe:2.3:a:wso2:api_control_plane:4.5.0.29
Wso2 » Api Control Plane » Version: 4.6.0

cpe:2.3:a:wso2:api_control_plane:4.6.0
Wso2 » Api Manager » Version: 3.1.0

cpe:2.3:a:wso2:api_manager:3.1.0
Wso2 » Api Manager » Version: 3.1.0.181

cpe:2.3:a:wso2:api_manager:3.1.0.181
Wso2 » Api Manager » Version: 3.1.0.267

cpe:2.3:a:wso2:api_manager:3.1.0.267
Wso2 » Api Manager » Version: 3.1.0.278

cpe:2.3:a:wso2:api_manager:3.1.0.278
Wso2 » Api Manager » Version: 3.1.0.293

cpe:2.3:a:wso2:api_manager:3.1.0.293
Wso2 » Api Manager » Version: 3.1.0.320

cpe:2.3:a:wso2:api_manager:3.1.0.320
Wso2 » Api Manager » Version: 3.1.0.322

cpe:2.3:a:wso2:api_manager:3.1.0.322
Wso2 » Api Manager » Version: 3.1.0.331

cpe:2.3:a:wso2:api_manager:3.1.0.331
Wso2 » Api Manager » Version: 3.1.0.345

cpe:2.3:a:wso2:api_manager:3.1.0.345
Wso2 » Api Manager » Version: 3.1.0.347

cpe:2.3:a:wso2:api_manager:3.1.0.347
Wso2 » Api Manager » Version: 3.2.0

cpe:2.3:a:wso2:api_manager:3.2.0
Wso2 » Api Manager » Version: 3.2.0.226

cpe:2.3:a:wso2:api_manager:3.2.0.226
Wso2 » Api Manager » Version: 3.2.0.278

cpe:2.3:a:wso2:api_manager:3.2.0.278
Wso2 » Api Manager » Version: 3.2.0.351

cpe:2.3:a:wso2:api_manager:3.2.0.351
Wso2 » Api Manager » Version: 3.2.0.368

cpe:2.3:a:wso2:api_manager:3.2.0.368
Wso2 » Api Manager » Version: 3.2.0.384

cpe:2.3:a:wso2:api_manager:3.2.0.384
Wso2 » Api Manager » Version: 3.2.0.397

cpe:2.3:a:wso2:api_manager:3.2.0.397
Wso2 » Api Manager » Version: 3.2.0.401

cpe:2.3:a:wso2:api_manager:3.2.0.401
Wso2 » Api Manager » Version: 3.2.0.408

cpe:2.3:a:wso2:api_manager:3.2.0.408
Wso2 » Api Manager » Version: 3.2.0.413

cpe:2.3:a:wso2:api_manager:3.2.0.413
Wso2 » Api Manager » Version: 3.2.0.415

cpe:2.3:a:wso2:api_manager:3.2.0.415
Wso2 » Api Manager » Version: 3.2.0.422

cpe:2.3:a:wso2:api_manager:3.2.0.422
Wso2 » Api Manager » Version: 3.2.0.427

cpe:2.3:a:wso2:api_manager:3.2.0.427
Wso2 » Api Manager » Version: 3.2.0.432

cpe:2.3:a:wso2:api_manager:3.2.0.432
Wso2 » Api Manager » Version: 3.2.0.433

cpe:2.3:a:wso2:api_manager:3.2.0.433
Wso2 » Api Manager » Version: 3.2.0.434

cpe:2.3:a:wso2:api_manager:3.2.0.434
Wso2 » Api Manager » Version: 3.2.0.435

cpe:2.3:a:wso2:api_manager:3.2.0.435
Wso2 » Api Manager » Version: 3.2.0.446

cpe:2.3:a:wso2:api_manager:3.2.0.446
Wso2 » Api Manager » Version: 3.2.0.450

cpe:2.3:a:wso2:api_manager:3.2.0.450
Wso2 » Api Manager » Version: 3.2.1

cpe:2.3:a:wso2:api_manager:3.2.1
Wso2 » Api Manager » Version: 3.2.1.16

cpe:2.3:a:wso2:api_manager:3.2.1.16
Wso2 » Api Manager » Version: 3.2.1.27

cpe:2.3:a:wso2:api_manager:3.2.1.27
Wso2 » Api Manager » Version: 3.2.1.32

cpe:2.3:a:wso2:api_manager:3.2.1.32
Wso2 » Api Manager » Version: 3.2.1.39

cpe:2.3:a:wso2:api_manager:3.2.1.39
Wso2 » Api Manager » Version: 3.2.1.42

cpe:2.3:a:wso2:api_manager:3.2.1.42
Wso2 » Api Manager » Version: 3.2.1.52

cpe:2.3:a:wso2:api_manager:3.2.1.52
Wso2 » Api Manager » Version: 3.2.1.53

cpe:2.3:a:wso2:api_manager:3.2.1.53
Wso2 » Api Manager » Version: 3.2.1.54

cpe:2.3:a:wso2:api_manager:3.2.1.54
Wso2 » Api Manager » Version: 3.2.1.55

cpe:2.3:a:wso2:api_manager:3.2.1.55
Wso2 » Api Manager » Version: 3.2.1.66

cpe:2.3:a:wso2:api_manager:3.2.1.66
Wso2 » Api Manager » Version: 3.2.1.69

cpe:2.3:a:wso2:api_manager:3.2.1.69
Wso2 » Api Manager » Version: 3.2.1.70

cpe:2.3:a:wso2:api_manager:3.2.1.70
Wso2 » Api Manager » Version: 4.0.0

cpe:2.3:a:wso2:api_manager:4.0.0
Wso2 » Api Manager » Version: 4.0.0.168

cpe:2.3:a:wso2:api_manager:4.0.0.168
Wso2 » Api Manager » Version: 4.0.0.217

cpe:2.3:a:wso2:api_manager:4.0.0.217
Wso2 » Api Manager » Version: 4.0.0.269

cpe:2.3:a:wso2:api_manager:4.0.0.269
Wso2 » Api Manager » Version: 4.0.0.280

cpe:2.3:a:wso2:api_manager:4.0.0.280
Wso2 » Api Manager » Version: 4.0.0.293

cpe:2.3:a:wso2:api_manager:4.0.0.293
Wso2 » Api Manager » Version: 4.0.0.305

cpe:2.3:a:wso2:api_manager:4.0.0.305
Wso2 » Api Manager » Version: 4.0.0.310

cpe:2.3:a:wso2:api_manager:4.0.0.310
Wso2 » Api Manager » Version: 4.0.0.318

cpe:2.3:a:wso2:api_manager:4.0.0.318
Wso2 » Api Manager » Version: 4.0.0.319

cpe:2.3:a:wso2:api_manager:4.0.0.319
Wso2 » Api Manager » Version: 4.0.0.334

cpe:2.3:a:wso2:api_manager:4.0.0.334
Wso2 » Api Manager » Version: 4.0.0.355

cpe:2.3:a:wso2:api_manager:4.0.0.355
Wso2 » Api Manager » Version: 4.0.0.368

cpe:2.3:a:wso2:api_manager:4.0.0.368
Wso2 » Api Manager » Version: 4.0.0.370

cpe:2.3:a:wso2:api_manager:4.0.0.370
Wso2 » Api Manager » Version: 4.1.0

cpe:2.3:a:wso2:api_manager:4.1.0
Wso2 » Api Manager » Version: 4.1.0.136

cpe:2.3:a:wso2:api_manager:4.1.0.136
Wso2 » Api Manager » Version: 4.1.0.152

cpe:2.3:a:wso2:api_manager:4.1.0.152
Wso2 » Api Manager » Version: 4.1.0.166

cpe:2.3:a:wso2:api_manager:4.1.0.166
Wso2 » Api Manager » Version: 4.1.0.169

cpe:2.3:a:wso2:api_manager:4.1.0.169
Wso2 » Api Manager » Version: 4.1.0.171

cpe:2.3:a:wso2:api_manager:4.1.0.171
Wso2 » Api Manager » Version: 4.1.0.187

cpe:2.3:a:wso2:api_manager:4.1.0.187
Wso2 » Api Manager » Version: 4.1.0.200

cpe:2.3:a:wso2:api_manager:4.1.0.200
Wso2 » Api Manager » Version: 4.1.0.206

cpe:2.3:a:wso2:api_manager:4.1.0.206
Wso2 » Api Manager » Version: 4.1.0.215

cpe:2.3:a:wso2:api_manager:4.1.0.215
Wso2 » Api Manager » Version: 4.1.0.216

cpe:2.3:a:wso2:api_manager:4.1.0.216
Wso2 » Api Manager » Version: 4.1.0.218

cpe:2.3:a:wso2:api_manager:4.1.0.218
Wso2 » Api Manager » Version: 4.1.0.219

cpe:2.3:a:wso2:api_manager:4.1.0.219
Wso2 » Api Manager » Version: 4.1.0.228

cpe:2.3:a:wso2:api_manager:4.1.0.228
Wso2 » Api Manager » Version: 4.1.0.231

cpe:2.3:a:wso2:api_manager:4.1.0.231
Wso2 » Api Manager » Version: 4.1.0.233

cpe:2.3:a:wso2:api_manager:4.1.0.233
Wso2 » Api Manager » Version: 4.2.0

cpe:2.3:a:wso2:api_manager:4.2.0
Wso2 » Api Manager » Version: 4.2.0.100

cpe:2.3:a:wso2:api_manager:4.2.0.100
Wso2 » Api Manager » Version: 4.2.0.108

cpe:2.3:a:wso2:api_manager:4.2.0.108
Wso2 » Api Manager » Version: 4.2.0.127

cpe:2.3:a:wso2:api_manager:4.2.0.127
Wso2 » Api Manager » Version: 4.2.0.138

cpe:2.3:a:wso2:api_manager:4.2.0.138
Wso2 » Api Manager » Version: 4.2.0.144

cpe:2.3:a:wso2:api_manager:4.2.0.144
Wso2 » Api Manager » Version: 4.2.0.150

cpe:2.3:a:wso2:api_manager:4.2.0.150
Wso2 » Api Manager » Version: 4.2.0.153

cpe:2.3:a:wso2:api_manager:4.2.0.153
Wso2 » Api Manager » Version: 4.2.0.156

cpe:2.3:a:wso2:api_manager:4.2.0.156
Wso2 » Api Manager » Version: 4.2.0.157

cpe:2.3:a:wso2:api_manager:4.2.0.157
Wso2 » Api Manager » Version: 4.2.0.164

cpe:2.3:a:wso2:api_manager:4.2.0.164
Wso2 » Api Manager » Version: 4.2.0.169

cpe:2.3:a:wso2:api_manager:4.2.0.169
Wso2 » Api Manager » Version: 4.2.0.171

cpe:2.3:a:wso2:api_manager:4.2.0.171
Wso2 » Api Manager » Version: 4.2.0.173

cpe:2.3:a:wso2:api_manager:4.2.0.173
Wso2 » Api Manager » Version: 4.2.0.80

cpe:2.3:a:wso2:api_manager:4.2.0.80
Wso2 » Api Manager » Version: 4.3.0

cpe:2.3:a:wso2:api_manager:4.3.0
Wso2 » Api Manager » Version: 4.3.0.16

cpe:2.3:a:wso2:api_manager:4.3.0.16
Wso2 » Api Manager » Version: 4.3.0.39

cpe:2.3:a:wso2:api_manager:4.3.0.39
Wso2 » Api Manager » Version: 4.3.0.51

cpe:2.3:a:wso2:api_manager:4.3.0.51
Wso2 » Api Manager » Version: 4.3.0.55

cpe:2.3:a:wso2:api_manager:4.3.0.55
Wso2 » Api Manager » Version: 4.3.0.57

cpe:2.3:a:wso2:api_manager:4.3.0.57
Wso2 » Api Manager » Version: 4.3.0.65

cpe:2.3:a:wso2:api_manager:4.3.0.65
Wso2 » Api Manager » Version: 4.3.0.66

cpe:2.3:a:wso2:api_manager:4.3.0.66
Wso2 » Api Manager » Version: 4.3.0.67

cpe:2.3:a:wso2:api_manager:4.3.0.67
Wso2 » Api Manager » Version: 4.3.0.70

cpe:2.3:a:wso2:api_manager:4.3.0.70
Wso2 » Api Manager » Version: 4.3.0.74

cpe:2.3:a:wso2:api_manager:4.3.0.74
Wso2 » Api Manager » Version: 4.3.0.81

cpe:2.3:a:wso2:api_manager:4.3.0.81
Wso2 » Api Manager » Version: 4.3.0.83

cpe:2.3:a:wso2:api_manager:4.3.0.83
Wso2 » Api Manager » Version: 4.3.0.85

cpe:2.3:a:wso2:api_manager:4.3.0.85
Wso2 » Api Manager » Version: 4.4.0

cpe:2.3:a:wso2:api_manager:4.4.0
Wso2 » Api Manager » Version: 4.4.0.28

cpe:2.3:a:wso2:api_manager:4.4.0.28
Wso2 » Api Manager » Version: 4.4.0.29

cpe:2.3:a:wso2:api_manager:4.4.0.29
Wso2 » Api Manager » Version: 4.4.0.30

cpe:2.3:a:wso2:api_manager:4.4.0.30
Wso2 » Api Manager » Version: 4.4.0.33

cpe:2.3:a:wso2:api_manager:4.4.0.33
Wso2 » Api Manager » Version: 4.4.0.38

cpe:2.3:a:wso2:api_manager:4.4.0.38
Wso2 » Api Manager » Version: 4.4.0.45

cpe:2.3:a:wso2:api_manager:4.4.0.45
Wso2 » Api Manager » Version: 4.4.0.47

cpe:2.3:a:wso2:api_manager:4.4.0.47
Wso2 » Api Manager » Version: 4.4.0.49

cpe:2.3:a:wso2:api_manager:4.4.0.49
Wso2 » Api Manager » Version: 4.5.0

cpe:2.3:a:wso2:api_manager:4.5.0
Wso2 » Api Manager » Version: 4.5.0.11

cpe:2.3:a:wso2:api_manager:4.5.0.11
Wso2 » Api Manager » Version: 4.5.0.12

cpe:2.3:a:wso2:api_manager:4.5.0.12
Wso2 » Api Manager » Version: 4.5.0.14

cpe:2.3:a:wso2:api_manager:4.5.0.14
Wso2 » Api Manager » Version: 4.5.0.17

cpe:2.3:a:wso2:api_manager:4.5.0.17
Wso2 » Api Manager » Version: 4.5.0.20

cpe:2.3:a:wso2:api_manager:4.5.0.20
Wso2 » Api Manager » Version: 4.5.0.28

cpe:2.3:a:wso2:api_manager:4.5.0.28
Wso2 » Api Manager » Version: 4.5.0.30

cpe:2.3:a:wso2:api_manager:4.5.0.30
Wso2 » Api Manager » Version: 4.5.0.32

cpe:2.3:a:wso2:api_manager:4.5.0.32
Wso2 » Api Manager » Version: 4.5.0.9

cpe:2.3:a:wso2:api_manager:4.5.0.9
Wso2 » Api Manager » Version: 4.6.0

cpe:2.3:a:wso2:api_manager:4.6.0
Wso2 » Identity Server » Version: 5.10.0

cpe:2.3:a:wso2:identity_server:5.10.0
Wso2 » Identity Server » Version: 5.10.0.284

cpe:2.3:a:wso2:identity_server:5.10.0.284
Wso2 » Identity Server » Version: 5.10.0.300

cpe:2.3:a:wso2:identity_server:5.10.0.300
Wso2 » Identity Server » Version: 5.10.0.338

cpe:2.3:a:wso2:identity_server:5.10.0.338
Wso2 » Identity Server » Version: 5.10.0.358

cpe:2.3:a:wso2:identity_server:5.10.0.358
Wso2 » Identity Server » Version: 5.11.0

cpe:2.3:a:wso2:identity_server:5.11.0
Wso2 » Identity Server » Version: 5.11.0.321

cpe:2.3:a:wso2:identity_server:5.11.0.321
Wso2 » Identity Server » Version: 5.11.0.329

cpe:2.3:a:wso2:identity_server:5.11.0.329
Wso2 » Identity Server » Version: 5.11.0.379

cpe:2.3:a:wso2:identity_server:5.11.0.379
Wso2 » Identity Server » Version: 5.11.0.395

cpe:2.3:a:wso2:identity_server:5.11.0.395
Wso2 » Identity Server » Version: 6.0.0

cpe:2.3:a:wso2:identity_server:6.0.0
Wso2 » Identity Server » Version: 6.0.0.171

cpe:2.3:a:wso2:identity_server:6.0.0.171
Wso2 » Identity Server » Version: 6.0.0.179

cpe:2.3:a:wso2:identity_server:6.0.0.179
Wso2 » Identity Server » Version: 6.0.0.229

cpe:2.3:a:wso2:identity_server:6.0.0.229
Wso2 » Identity Server » Version: 6.0.0.249

cpe:2.3:a:wso2:identity_server:6.0.0.249
Wso2 » Identity Server » Version: 6.1.0

cpe:2.3:a:wso2:identity_server:6.1.0
Wso2 » Identity Server » Version: 6.1.0.128

cpe:2.3:a:wso2:identity_server:6.1.0.128
Wso2 » Identity Server » Version: 6.1.0.136

cpe:2.3:a:wso2:identity_server:6.1.0.136
Wso2 » Identity Server » Version: 6.1.0.208

cpe:2.3:a:wso2:identity_server:6.1.0.208
Wso2 » Identity Server » Version: 6.1.0.248

cpe:2.3:a:wso2:identity_server:6.1.0.248
Wso2 » Identity Server » Version: 7.1.0

cpe:2.3:a:wso2:identity_server:7.1.0
Wso2 » Identity Server » Version: 7.1.0.26

cpe:2.3:a:wso2:identity_server:7.1.0.26
Wso2 » Identity Server » Version: 7.1.0.28

cpe:2.3:a:wso2:identity_server:7.1.0.28
Wso2 » Identity Server » Version: 7.1.0.31

cpe:2.3:a:wso2:identity_server:7.1.0.31
Wso2 » Identity Server » Version: 7.2.0

cpe:2.3:a:wso2:identity_server:7.2.0
Wso2 » Identity Server As Key Manager » Version: 5.10.0

cpe:2.3:a:wso2:identity_server_as_key_manager:5.10.0
Wso2 » Identity Server As Key Manager » Version: 5.10.0.280

cpe:2.3:a:wso2:identity_server_as_key_manager:5.10.0.280
Wso2 » Identity Server As Key Manager » Version: 5.10.0.296

cpe:2.3:a:wso2:identity_server_as_key_manager:5.10.0.296
Wso2 » Identity Server As Key Manager » Version: 5.10.0.338

cpe:2.3:a:wso2:identity_server_as_key_manager:5.10.0.338
Wso2 » Identity Server As Key Manager » Version: 5.10.0.351

cpe:2.3:a:wso2:identity_server_as_key_manager:5.10.0.351
Wso2 » Open Banking Am » Version: 2.0.0

cpe:2.3:a:wso2:open_banking_am:2.0.0
Wso2 » Open Banking Am » Version: 2.0.0.313

cpe:2.3:a:wso2:open_banking_am:2.0.0.313
Wso2 » Open Banking Am » Version: 2.0.0.328

cpe:2.3:a:wso2:open_banking_am:2.0.0.328
Wso2 » Open Banking Am » Version: 2.0.0.342

cpe:2.3:a:wso2:open_banking_am:2.0.0.342
Wso2 » Open Banking Am » Version: 2.0.0.369

cpe:2.3:a:wso2:open_banking_am:2.0.0.369
Wso2 » Open Banking Iam » Version: 2.0.0

cpe:2.3:a:wso2:open_banking_iam:2.0.0
Wso2 » Open Banking Iam » Version: 2.0.0.318

cpe:2.3:a:wso2:open_banking_iam:2.0.0.318
Wso2 » Open Banking Iam » Version: 2.0.0.333

cpe:2.3:a:wso2:open_banking_iam:2.0.0.333
Wso2 » Open Banking Iam » Version: 2.0.0.348

cpe:2.3:a:wso2:open_banking_iam:2.0.0.348
Wso2 » Open Banking Iam » Version: 2.0.0.389

cpe:2.3:a:wso2:open_banking_iam:2.0.0.389
Wso2 » Open Banking Iam » Version: 2.0.0.400

cpe:2.3:a:wso2:open_banking_iam:2.0.0.400
Wso2 » Traffic Manager » Version: 4.5.0

cpe:2.3:a:wso2:traffic_manager:4.5.0
Wso2 » Traffic Manager » Version: 4.5.0.17

cpe:2.3:a:wso2:traffic_manager:4.5.0.17
Wso2 » Traffic Manager » Version: 4.5.0.19

cpe:2.3:a:wso2:traffic_manager:4.5.0.19
Wso2 » Traffic Manager » Version: 4.5.0.27

cpe:2.3:a:wso2:traffic_manager:4.5.0.27
Wso2 » Traffic Manager » Version: 4.5.0.9

cpe:2.3:a:wso2:traffic_manager:4.5.0.9
Wso2 » Traffic Manager » Version: 4.6.0

cpe:2.3:a:wso2:traffic_manager:4.6.0
Wso2 » Universal Gateway » Version: 4.5.0

cpe:2.3:a:wso2:universal_gateway:4.5.0
Wso2 » Universal Gateway » Version: 4.5.0.17

cpe:2.3:a:wso2:universal_gateway:4.5.0.17
Wso2 » Universal Gateway » Version: 4.5.0.19

cpe:2.3:a:wso2:universal_gateway:4.5.0.19
Wso2 » Universal Gateway » Version: 4.5.0.27

cpe:2.3:a:wso2:universal_gateway:4.5.0.27
Wso2 » Universal Gateway » Version: 4.5.0.9

cpe:2.3:a:wso2:universal_gateway:4.5.0.9
Wso2 » Universal Gateway » Version: 4.6.0

cpe:2.3:a:wso2:universal_gateway:4.6.0

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2025-12737

Products

Pricing

Contact Us