cveboard RSS feed

CVE-2025-5802

CVE.org · Published

Historical CVEsJSONAI instructions

Record status
Published
Identifier year (not publication year)
2025
Source publication
Source updated
Imported by cveboard
Source snapshot
cve_2026-10-24_midnight_baseline ·

Plain text

CNA source text (English)

Username Enumeration via Self Registration Flow in Multiple WSO2 Products Allows User Account Discovery

The self-registration flow accepts user-supplied input for usernames without adequately preventing the disclosure of username existence. When a user attempts to register with an existing username, the system responds with an error message that explicitly indicates the username is already in use. This behavior allows an attacker to discover valid usernames within the system. The discovery of valid usernames can facilitate subsequent attacks such as brute force, social engineering, and targeted phishing campaigns.

Scoped product and version facts

Fix information unknown; no fixed version is derived here. Missing information does not prove that no fix exists.

Exploitation unknown; this catalogue does not assess exploitation.

WSO2 API Manager

Vendor
WSO2
Product
WSO2 API Manager
Platforms
Unknown
Default status
unaffected
WSO2 API Manager · Scoped product and version facts
Version (version)Status (status)Version scheme (versionType)Exclusive end (lessThan)Inclusive end (lessThanOrEqual)Status changes (at → status)
0unknowncustom3.1.0UnavailableNone listed
3.1.0affectedcustom3.1.0.354UnavailableNone listed
3.2.0affectedcustom3.2.0.458UnavailableNone listed
3.2.0affectedcustom3.2.0.478UnavailableNone listed
3.2.1affectedcustom3.2.1.96UnavailableNone listed
4.0.0affectedcustom4.0.0.379UnavailableNone listed
4.1.0affectedcustom4.1.0.262UnavailableNone listed
4.2.0affectedcustom4.2.0.200UnavailableNone listed
4.3.0affectedcustom4.3.0.112UnavailableNone listed
4.4.0affectedcustom4.4.0.72UnavailableNone listed
4.5.0affectedcustom4.5.0.55UnavailableNone listed
4.6.0affectedcustom4.6.0.17UnavailableNone listed

WSO2 API Control Plane

Vendor
WSO2
Product
WSO2 API Control Plane
Platforms
Unknown
Default status
unaffected
WSO2 API Control Plane · Scoped product and version facts
Version (version)Status (status)Version scheme (versionType)Exclusive end (lessThan)Inclusive end (lessThanOrEqual)Status changes (at → status)
0unknowncustom4.5.0UnavailableNone listed
4.5.0affectedcustom4.5.0.56UnavailableNone listed
4.6.0affectedcustom4.6.0.18UnavailableNone listed

WSO2 Universal Gateway

Vendor
WSO2
Product
WSO2 Universal Gateway
Platforms
Unknown
Default status
unaffected
WSO2 Universal Gateway · Scoped product and version facts
Version (version)Status (status)Version scheme (versionType)Exclusive end (lessThan)Inclusive end (lessThanOrEqual)Status changes (at → status)
0unknowncustom4.5.0UnavailableNone listed
4.5.0affectedcustom4.5.0.55UnavailableNone listed
4.6.0affectedcustom4.6.0.17UnavailableNone listed

WSO2 Traffic Manager

Vendor
WSO2
Product
WSO2 Traffic Manager
Platforms
Unknown
Default status
unaffected
WSO2 Traffic Manager · Scoped product and version facts
Version (version)Status (status)Version scheme (versionType)Exclusive end (lessThan)Inclusive end (lessThanOrEqual)Status changes (at → status)
0unknowncustom4.5.0UnavailableNone listed
4.5.0affectedcustom4.5.0.54UnavailableNone listed
4.6.0affectedcustom4.6.0.17UnavailableNone listed

WSO2 Identity Server

Vendor
WSO2
Product
WSO2 Identity Server
Platforms
Unknown
Default status
unaffected
WSO2 Identity Server · Scoped product and version facts
Version (version)Status (status)Version scheme (versionType)Exclusive end (lessThan)Inclusive end (lessThanOrEqual)Status changes (at → status)
0unknowncustom5.10.0UnavailableNone listed
5.10.0affectedcustom5.10.0.383UnavailableNone listed
5.11.0affectedcustom5.11.0.430UnavailableNone listed
6.0.0affectedcustom6.0.0.257UnavailableNone listed
6.1.0affectedcustom6.1.0.234UnavailableNone listed
6.1.0affectedcustom6.1.0.257UnavailableNone listed
7.0.0affectedcustom7.0.0.133UnavailableNone listed
7.1.0affectedcustom7.1.0.41UnavailableNone listed
7.2.0affectedcustom7.2.0.3UnavailableNone listed

WSO2 Identity Server as Key Manager

Vendor
WSO2
Product
WSO2 Identity Server as Key Manager
Platforms
Unknown
Default status
unaffected
WSO2 Identity Server as Key Manager · Scoped product and version facts
Version (version)Status (status)Version scheme (versionType)Exclusive end (lessThan)Inclusive end (lessThanOrEqual)Status changes (at → status)
0unknowncustom5.10.0UnavailableNone listed
5.10.0affectedcustom5.10.0.374UnavailableNone listed

WSO2 Open Banking AM

Vendor
WSO2
Product
WSO2 Open Banking AM
Platforms
Unknown
Default status
unaffected
WSO2 Open Banking AM · Scoped product and version facts
Version (version)Status (status)Version scheme (versionType)Exclusive end (lessThan)Inclusive end (lessThanOrEqual)Status changes (at → status)
0unknowncustom2.0.0UnavailableNone listed
2.0.0affectedcustom2.0.0.403UnavailableNone listed

WSO2 Open Banking IAM

Vendor
WSO2
Product
WSO2 Open Banking IAM
Platforms
Unknown
Default status
unaffected
WSO2 Open Banking IAM · Scoped product and version facts
Version (version)Status (status)Version scheme (versionType)Exclusive end (lessThan)Inclusive end (lessThanOrEqual)Status changes (at → status)
0unknowncustom2.0.0UnavailableNone listed
2.0.0affectedcustom2.0.0.423UnavailableNone listed

WSO2 Carbon Identity Management Endpoint Util

Vendor
WSO2
Product
WSO2 Carbon Identity Management Endpoint Util
Platforms
Unknown
Default status
unknown
Package
org.wso2.carbon.identity.framework:org.wso2.carbon.identity.mgt.endpoint.util
WSO2 Carbon Identity Management Endpoint Util · Scoped product and version facts
Version (version)Status (status)Version scheme (versionType)Exclusive end (lessThan)Inclusive end (lessThanOrEqual)Status changes (at → status)
5.17.5affectedcustom5.17.5.332UnavailableNone listed
5.18.187affectedcustom5.18.187.330UnavailableNone listed
5.23.8affectedcustom5.23.8.213UnavailableNone listed
5.25.92affectedcustom5.25.92.167UnavailableNone listed
7.0.78affectedcustom7.0.78.162UnavailableNone listed
xunaffectedcustomUnavailable*None listed

WSO2 Carbon Identity Application Authentication Framework

Vendor
WSO2
Product
WSO2 Carbon Identity Application Authentication Framework
Platforms
Unknown
Default status
unknown
Package
org.wso2.carbon.identity.framework:org.wso2.carbon.identity.application.authentication.framework
WSO2 Carbon Identity Application Authentication Framework · Scoped product and version facts
Version (version)Status (status)Version scheme (versionType)Exclusive end (lessThan)Inclusive end (lessThanOrEqual)Status changes (at → status)
5.17.5affectedcustom5.17.5.332UnavailableNone listed
5.18.187affectedcustom5.18.187.330UnavailableNone listed
xunaffectedcustomUnavailable*None listed