CVE-2025-5717
Code injection in Wso2 API Control Plane
CVSS score
7.2
EPSS probability
%0.7
Risk score
0.0
Published
1 y ago
Public Exploits · GitHub and Metasploit Intelligence
This tab scans the sources that NVD labels as exploits, GitHub repositories matching the CVE identifier and Rapid7 Metasploit Framework modules. Only links to sources that were actually found are shown.
GitHub
CVE-2025-57174 Unauthenticated Remote Command Execution
Makefile Go / Python
GitHub
CVE-2025-57176 - Siklu EtherHaul Series - Unauthenticated Arbitrary File Upload
Makefile Go / Python
Similar Vulnerabilities
9.1
9.8
CVE-2025-9152Missing authentication in Wso2 API Manager
Patch status unknownEPSS %1
9.1
CVE-2026-3418Arbitrary File Upload via System REST API in Multiple WSO2 Products Allows Remote Code Execution
Patch status unknownEPSS %1
9.4
CVE-2025-15039Account Takeover via Conditional Authentication Script Logic in Multiple WSO2 Products
Patch status unknownEPSS %1
7.2
CVE-2025-12107Command injection in Wso2 Identity Server
Patch status unknownEPSS %1
Get this vulnerability through the API
Affected products, version ranges, exploitation status and patch information in a single request, with a free key.
curl -H "x-api-key: $DAYBREACH_API_KEY" \ "https://api.daybreach.dev/api/v1/intel/cves/CVE-2025-5717"