https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 23 Oct 2026 21:06:39 +0000 https://cve.radiocsirt.org/vuln/cve-2025-9955 <p><strong>Affected:</strong> WSO2 Enterprise Integrator, WSO2 Enterprise Service Bus, WSO2 org.wso2.carbon:org.wso2.carbon.base, WSO2 org.wso2.carbon:org.wso2.carbon.server.admin</p> <p>An improper access control vulnerability exists in WSO2 Enterprise Integrator product due to insufficient permission restrictions on internal SOAP admin services related to system logs and user-store configuration. A low-privileged user can access log data and user-store configuration details that are not intended to be exposed at that privilege level.</p> <p>While no credentials or sensitive user information are exposed, this vulnerability may allow unauthorized visibility into internal operational details, which could aid in further exploitation or reconnaissance.</p> <p><strong>Affected:</strong> WSO2 Enterprise Integrator, WSO2 Enterprise Service Bus, WSO2 org.wso2.carbon:org.wso2.carbon.base, WSO2 org.wso2.carbon:org.wso2.carbon.server.admin</p> <p>An improper access control vulnerability exists in WSO2 Enterprise Integrator product due to insufficient permission restrictions on internal SOAP admin services related to system logs and user-store configuration. A low-privileged user can access log data and user-store configuration details that are not intended to be exposed at that privilege level.</p> <p>While no credentials or sensitive user information are exposed, this vulnerability may allow unauthorized visibility into internal operational details, which could aid in further exploitation or reconnaissance.</p> https://cve.radiocsirt.org/vuln/cve-2025-9955