https://db.gcve.eu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Thu, 01 Oct 2026 17:57:52 +0000 https://db.gcve.eu/vuln/cve-2025-2905 <p><strong>Affected:</strong> WSO2 API Manager, WSO2 Enterprise Integrator, WSO2 Enterprise Service Bus, WSO2 Micro integrator, WSO2 Open Banking AM</p> <p>Due to the improper configuration of XML parser, user-supplied XML is parsed without applying sufficient restrictions, enabling XML External Entity (XXE) resolution in multiple WSO2 Products.</p> <p>A successful XXE attack could allow a remote, unauthenticated attacker to: * Read sensitive files from the server’s filesystem. * Perform denial-of-service (DoS) attacks, which can render the affected service unavailable.</p> <p><strong>Affected:</strong> WSO2 API Manager, WSO2 Enterprise Integrator, WSO2 Enterprise Service Bus, WSO2 Micro integrator, WSO2 Open Banking AM</p> <p>Due to the improper configuration of XML parser, user-supplied XML is parsed without applying sufficient restrictions, enabling XML External Entity (XXE) resolution in multiple WSO2 Products.</p> <p>A successful XXE attack could allow a remote, unauthenticated attacker to: * Read sensitive files from the server’s filesystem. * Perform denial-of-service (DoS) attacks, which can render the affected service unavailable.</p> https://db.gcve.eu/vuln/cve-2025-2905