CVE-2025-5605 Scanner
CVE-2025-5605 Scanner - Authentication Bypass vulnerability in WSO2 Management Console
Used 2.7k times · 5.9k assets checked · domain, subdomain, ipv4
CVE
CVE-2025-5605
4.3
CVSSmedium
Exploitable from an adjacent network · no authentication required.
Description
An authentication bypass vulnerability exists in the Management Console of multiple WSO2 products. A malicious actor with access to the console can manipulate the request URI to bypass authentication and access certain restricted resources, resulting in partial information disclosure. The known exposure from this issue is limited to memory statistics. While the vulnerability does not allow full account compromise, it still enables unauthorized access to internal system details.
Attack Vector
Adjacent
Privileges Req.
None
User Interaction
None
wso2 identity serverwso2 enterprise integratorwso2 universal gatewaywso2 traffic managerwso2 api managerwso2 api control plane
Updated Sep 26, 2026View on NVD →
S4E scanner
CVE history: wso2 identity server
Predict next CVE date with AIMonitor this CVE on your assets
S4E maps published CVEs to scanners and forecasts the next disclosure window for your stack.
Create a free account →