CVE-2025-5717 | WSO2 API Manager Event Processor Admin Service code injection

A vulnerability was found in WSO2 API Manager, Open Banking AM, Traffic Manager, API Control Plane and Siddhi Extension Evaluate Scripts. It has been rated as critical. Affected by this vulnerability is an unknown functionality of the component Event Processor Admin Service. This manipulation causes code injection.

This vulnerability appears as CVE-2025-5717. The attack may be initiated remotely. There is no available exploit.

Upgrading the affected component is advised.VulDB Recent EntriesRead More