Shodan
Vulnerabilities
Vulnerable Software

Vulnerability Details CVE-2025-13475

In multi-tenanted deployments, the application consent management mechanism fails to correctly isolate consent scopes between tenants. Consent granted by a user for a specific SaaS application within one tenant can be incorrectly applied to SaaS applications with the same name in other tenants, leading to unintended cross-tenant consent sharing. This vulnerability may result in the exposure of user data across tenants, enabling SaaS applications in different tenants to access and modify information without explicit user authorization. This can lead to unauthorized data access and privacy violations. This vulnerability has no impact if the deployment does not support multi-tenancy.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.002
EPSS Ranking 5.4%
CVSS Severity
CVSS v3 Score 3.5
Products affected by CVE-2025-13475
  • Wso2 » Api Manager » Version: 3.2.0
    cpe:2.3:a:wso2:api_manager:3.2.0
  • Wso2 » Api Manager » Version: 3.2.0.226
    cpe:2.3:a:wso2:api_manager:3.2.0.226
  • Wso2 » Api Manager » Version: 3.2.0.278
    cpe:2.3:a:wso2:api_manager:3.2.0.278
  • Wso2 » Api Manager » Version: 3.2.0.351
    cpe:2.3:a:wso2:api_manager:3.2.0.351
  • Wso2 » Api Manager » Version: 3.2.0.368
    cpe:2.3:a:wso2:api_manager:3.2.0.368
  • Wso2 » Api Manager » Version: 3.2.0.384
    cpe:2.3:a:wso2:api_manager:3.2.0.384
  • Wso2 » Api Manager » Version: 3.2.0.397
    cpe:2.3:a:wso2:api_manager:3.2.0.397
  • Wso2 » Api Manager » Version: 3.2.0.401
    cpe:2.3:a:wso2:api_manager:3.2.0.401
  • Wso2 » Api Manager » Version: 3.2.0.408
    cpe:2.3:a:wso2:api_manager:3.2.0.408
  • Wso2 » Api Manager » Version: 3.2.0.415
    cpe:2.3:a:wso2:api_manager:3.2.0.415
  • Wso2 » Api Manager » Version: 3.2.0.422
    cpe:2.3:a:wso2:api_manager:3.2.0.422
  • Wso2 » Api Manager » Version: 3.2.0.427
    cpe:2.3:a:wso2:api_manager:3.2.0.427
  • Wso2 » Api Manager » Version: 3.2.0.432
    cpe:2.3:a:wso2:api_manager:3.2.0.432
  • Wso2 » Api Manager » Version: 3.2.0.433
    cpe:2.3:a:wso2:api_manager:3.2.0.433
  • Wso2 » Api Manager » Version: 3.2.0.434
    cpe:2.3:a:wso2:api_manager:3.2.0.434
  • Wso2 » Api Manager » Version: 3.2.0.435
    cpe:2.3:a:wso2:api_manager:3.2.0.435
  • Wso2 » Api Manager » Version: 3.2.0.446
    cpe:2.3:a:wso2:api_manager:3.2.0.446
  • Wso2 » Api Manager » Version: 3.2.0.450
    cpe:2.3:a:wso2:api_manager:3.2.0.450
  • Wso2 » Api Manager » Version: 3.2.0.453
    cpe:2.3:a:wso2:api_manager:3.2.0.453
  • Wso2 » Api Manager » Version: 3.2.0.455
    cpe:2.3:a:wso2:api_manager:3.2.0.455
  • Wso2 » Api Manager » Version: 3.2.1
    cpe:2.3:a:wso2:api_manager:3.2.1
  • Wso2 » Api Manager » Version: 3.2.1.16
    cpe:2.3:a:wso2:api_manager:3.2.1.16
  • Wso2 » Api Manager » Version: 3.2.1.27
    cpe:2.3:a:wso2:api_manager:3.2.1.27
  • Wso2 » Api Manager » Version: 3.2.1.32
    cpe:2.3:a:wso2:api_manager:3.2.1.32
  • Wso2 » Api Manager » Version: 3.2.1.39
    cpe:2.3:a:wso2:api_manager:3.2.1.39
  • Wso2 » Api Manager » Version: 3.2.1.42
    cpe:2.3:a:wso2:api_manager:3.2.1.42
  • Wso2 » Api Manager » Version: 3.2.1.52
    cpe:2.3:a:wso2:api_manager:3.2.1.52
  • Wso2 » Api Manager » Version: 3.2.1.53
    cpe:2.3:a:wso2:api_manager:3.2.1.53
  • Wso2 » Api Manager » Version: 3.2.1.54
    cpe:2.3:a:wso2:api_manager:3.2.1.54
  • Wso2 » Api Manager » Version: 3.2.1.55
    cpe:2.3:a:wso2:api_manager:3.2.1.55
  • Wso2 » Api Manager » Version: 3.2.1.66
    cpe:2.3:a:wso2:api_manager:3.2.1.66
  • Wso2 » Api Manager » Version: 3.2.1.69
    cpe:2.3:a:wso2:api_manager:3.2.1.69
  • Wso2 » Api Manager » Version: 3.2.1.70
    cpe:2.3:a:wso2:api_manager:3.2.1.70
  • Wso2 » Api Manager » Version: 3.2.1.73
    cpe:2.3:a:wso2:api_manager:3.2.1.73
  • Wso2 » Api Manager » Version: 3.2.1.74
    cpe:2.3:a:wso2:api_manager:3.2.1.74
  • Wso2 » Identity Server » Version: 5.10.0
    cpe:2.3:a:wso2:identity_server:5.10.0
  • Wso2 » Identity Server » Version: 5.10.0.284
    cpe:2.3:a:wso2:identity_server:5.10.0.284
  • Wso2 » Identity Server » Version: 5.10.0.300
    cpe:2.3:a:wso2:identity_server:5.10.0.300
  • Wso2 » Identity Server » Version: 5.10.0.379
    cpe:2.3:a:wso2:identity_server:5.10.0.379


Products
Pricing
Contact Us

Shodan ® - All rights reserved