CVE-2025-11969 | WSO2 API Control Plane access control

SecurityVulns

A vulnerability was found in WSO2 API Control Plane, API Manager, API Manager Rest API Common Functions, API Manager Rest API Utility, Carbon API Manager Rest API Common Functions, Carbon API Manager Rest API Utility, Identity Server as Key Manager, Open Banking AM, Open Banking IAM, Traffic Manager and Universal Gateway and classified as critical. This vulnerability affects unknown code. The manipulation results in improper access controls.

This vulnerability is reported as CVE-2025-11969. The attack can be launched remotely. No exploit exists.VulDB Recent EntriesRead More