{"api_version":"1","generated_at":"2026-11-07T05:07:55+00:00","cve":"CVE-2025-13647","urls":{"html":"https://cve.report/CVE-2025-13647","api":"https://cve.report/api/cve/CVE-2025-13647.json","docs":"https://cve.report/api","cve_org":"https://www.cve.org/CVERecord?id=CVE-2025-13647","nvd":"https://nvd.nist.gov/vuln/detail/CVE-2025-13647"},"summary":{"title":"Information Disclosure in Multiple WSO2 Products Allows Exposure of Certificate File Paths","description":"The affected component fails to enforce expected validation constraints on the `content-type` header when processing certain requests. This allows an attacker to submit a crafted request with a manipulated `content-type` header.\n\nSuccessful exploitation can lead to the unintended exposure of the file paths for certificate files. This information disclosure could potentially be leveraged in subsequent attacks or compromise the confidentiality of the system.","state":"PUBLISHED","assigner":"WSO2","published_at":"2026-11-02 10:17:10","updated_at":"2026-11-04 20:10:00"},"problem_types":["CWE-200","CWE-200 CWE-200: Exposure of Sensitive Information to an Unauthorized Actor"],"metrics":[{"version":"3.1","source":"ed10eef1-636d-4fbe-9993-6890dfa878f8","type":"Secondary","score":"5.8","severity":"MEDIUM","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:N/A:N","data":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:N/A:N","baseScore":5.8,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"CHANGED","confidentialityImpact":"LOW","integrityImpact":"NONE","availabilityImpact":"NONE"}},{"version":"3.1","source":"CNA","type":"CVSS","score":"5.8","severity":"MEDIUM","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:N/A:N","data":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"NONE","baseScore":5.8,"baseSeverity":"MEDIUM","confidentialityImpact":"LOW","integrityImpact":"NONE","privilegesRequired":"NONE","scope":"CHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:N/A:N","version":"3.1"}}],"references":[{"url":"https://security.docs.wso2.com/en/latest/security-announcements/security-advisories/2026/WSO2-2025-4751/","name":"https://security.docs.wso2.com/en/latest/security-announcements/security-advisories/2026/WSO2-2025-4751/","refsource":"ed10eef1-636d-4fbe-9993-6890dfa878f8","tags":[],"title":"","mime":"","httpstatus":"","archivestatus":"0"},{"url":"https://www.cve.org/CVERecord?id=CVE-2025-13647","name":"CVE Program record","refsource":"CVE.ORG","tags":["canonical"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-13647","name":"NVD vulnerability detail","refsource":"NVD","tags":["canonical","analysis"]}],"affected":[{"source":"CNA","vendor":"WSO2","product":"WSO2 Identity Server","version":"unknown 5.10.0 custom","platforms":[]},{"source":"CNA","vendor":"WSO2","product":"WSO2 Identity Server","version":"affected 5.10.0 5.10.0.381 custom","platforms":[]},{"source":"CNA","vendor":"WSO2","product":"WSO2 Identity Server","version":"affected 5.11.0 5.11.0.428 custom","platforms":[]},{"source":"CNA","vendor":"WSO2","product":"WSO2 Identity Server","version":"affected 6.0.0 6.0.0.255 custom","platforms":[]},{"source":"CNA","vendor":"WSO2","product":"WSO2 Identity Server","version":"affected 6.1.0 6.1.0.255 custom","platforms":[]},{"source":"CNA","vendor":"WSO2","product":"WSO2 Identity Server","version":"affected 7.0.0 7.0.0.133 custom","platforms":[]},{"source":"CNA","vendor":"WSO2","product":"WSO2 Identity Server","version":"affected 7.1.0 7.1.0.41 custom","platforms":[]},{"source":"CNA","vendor":"WSO2","product":"WSO2 Identity Server","version":"affected 7.2.0 7.2.0.3 custom","platforms":[]},{"source":"CNA","vendor":"WSO2","product":"WSO2 Open Banking IAM","version":"unknown 2.0.0 custom","platforms":[]},{"source":"CNA","vendor":"WSO2","product":"WSO2 Open Banking IAM","version":"affected 2.0.0 2.0.0.421 custom","platforms":[]},{"source":"CNA","vendor":"WSO2","product":"WSO2 Identity Server as Key Manager","version":"unknown 5.10.0 custom","platforms":[]},{"source":"CNA","vendor":"WSO2","product":"WSO2 Identity Server as Key Manager","version":"affected 5.10.0 5.10.0.372 custom","platforms":[]},{"source":"CNA","vendor":"WSO2","product":"WSO2 Identity Server Keystore Rest API Commons","version":"affected 1.0.82 1.0.82.25 custom","platforms":[]},{"source":"CNA","vendor":"WSO2","product":"WSO2 Identity Server Keystore Rest API Commons","version":"affected 1.0.190 1.0.190.17 custom","platforms":[]},{"source":"CNA","vendor":"WSO2","product":"WSO2 Identity Server Keystore Rest API Commons","version":"affected 1.2.3 1.2.3.6 custom","platforms":[]},{"source":"CNA","vendor":"WSO2","product":"WSO2 Identity Server Keystore Rest API Commons","version":"affected 1.2.23 1.2.23.10 custom","platforms":[]},{"source":"CNA","vendor":"WSO2","product":"WSO2 Identity Server Keystore Rest API Commons","version":"affected 1.2.176 1.2.176.18 custom","platforms":[]},{"source":"CNA","vendor":"WSO2","product":"WSO2 Identity Server Keystore Rest API Commons","version":"affected 1.3.83 1.3.83.10 custom","platforms":[]},{"source":"CNA","vendor":"WSO2","product":"WSO2 Identity Server Keystore Rest API Commons","version":"affected 1.3.213 1.3.213.1 custom","platforms":[]},{"source":"CNA","vendor":"WSO2","product":"WSO2 Identity Server Keystore Rest API Commons","version":"unaffected 1.3.221 * custom","platforms":[]},{"source":"CNA","vendor":"WSO2","product":"WSO2 Identity Server Keystore Rest API V1","version":"affected 1.0.82 1.0.82.25 custom","platforms":[]},{"source":"CNA","vendor":"WSO2","product":"WSO2 Identity Server Keystore Rest API V1","version":"affected 1.0.190 1.0.190.17 custom","platforms":[]},{"source":"CNA","vendor":"WSO2","product":"WSO2 Identity Server Keystore Rest API V1","version":"affected 1.2.3 1.2.3.6 custom","platforms":[]},{"source":"CNA","vendor":"WSO2","product":"WSO2 Identity Server Keystore Rest API V1","version":"affected 1.2.23 1.2.23.10 custom","platforms":[]},{"source":"CNA","vendor":"WSO2","product":"WSO2 Identity Server Keystore Rest API V1","version":"affected 1.2.176 1.2.176.18 custom","platforms":[]},{"source":"CNA","vendor":"WSO2","product":"WSO2 Identity Server Keystore Rest API V1","version":"affected 1.3.83 1.3.83.10 custom","platforms":[]},{"source":"CNA","vendor":"WSO2","product":"WSO2 Identity Server Keystore Rest API V1","version":"affected 1.3.213 1.3.213.1 custom","platforms":[]},{"source":"CNA","vendor":"WSO2","product":"WSO2 Identity Server Keystore Rest API V1","version":"unaffected 1.3.221 * custom","platforms":[]}],"timeline":[],"solutions":[{"source":"CNA","title":"","value":"Follow the instructions given on https://security.docs.wso2.com/en/latest/security-announcements/security-advisories/2026/WSO2-2025-4751/#solution","time":"","lang":"en"}],"workarounds":[],"exploits":[],"credits":[],"nvd_cpes":[],"vendor_comments":[],"enrichments":{"kev":null,"epss":{"cve_year":"2025","cve_id":"13647","cve":"CVE-2025-13647","epss":"0.001830000","percentile":"0.079530000","score_date":"2026-11-04","updated_at":"2026-11-05 00:04:16"},"legacy_qids":[]},"source_records":{"cve_program":{"containers":{"adp":[{"metrics":[{"other":{"content":{"id":"CVE-2025-13647","options":[{"Exploitation":"none"},{"Automatable":"yes"},{"Technical Impact":"partial"}],"role":"CISA Coordinator","timestamp":"2026-11-02T19:20:07.726881Z","version":"2.0.3"},"type":"ssvc"}}],"providerMetadata":{"dateUpdated":"2026-11-02T19:20:26.022Z","orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP"},"title":"CISA ADP Vulnrichment"}],"cna":{"affected":[{"defaultStatus":"unaffected","product":"WSO2 Identity Server","vendor":"WSO2","versions":[{"lessThan":"5.10.0","status":"unknown","version":"0","versionType":"custom"},{"lessThan":"5.10.0.381","status":"affected","version":"5.10.0","versionType":"custom"},{"lessThan":"5.11.0.428","status":"affected","version":"5.11.0","versionType":"custom"},{"lessThan":"6.0.0.255","status":"affected","version":"6.0.0","versionType":"custom"},{"lessThan":"6.1.0.255","status":"affected","version":"6.1.0","versionType":"custom"},{"lessThan":"7.0.0.133","status":"affected","version":"7.0.0","versionType":"custom"},{"lessThan":"7.1.0.41","status":"affected","version":"7.1.0","versionType":"custom"},{"lessThan":"7.2.0.3","status":"affected","version":"7.2.0","versionType":"custom"}]},{"defaultStatus":"unaffected","product":"WSO2 Open Banking IAM","vendor":"WSO2","versions":[{"lessThan":"2.0.0","status":"unknown","version":"0","versionType":"custom"},{"lessThan":"2.0.0.421","status":"affected","version":"2.0.0","versionType":"custom"}]},{"defaultStatus":"unaffected","product":"WSO2 Identity Server as Key Manager","vendor":"WSO2","versions":[{"lessThan":"5.10.0","status":"unknown","version":"0","versionType":"custom"},{"lessThan":"5.10.0.372","status":"affected","version":"5.10.0","versionType":"custom"}]},{"defaultStatus":"unknown","packageName":"org.wso2.carbon.identity.api.server.keystore.management.common","product":"WSO2 Identity Server Keystore Rest API Commons","vendor":"WSO2","versions":[{"lessThan":"1.0.82.25","status":"affected","version":"1.0.82","versionType":"custom"},{"lessThan":"1.0.190.17","status":"affected","version":"1.0.190","versionType":"custom"},{"lessThan":"1.2.3.6","status":"affected","version":"1.2.3","versionType":"custom"},{"lessThan":"1.2.23.10","status":"affected","version":"1.2.23","versionType":"custom"},{"lessThan":"1.2.176.18","status":"affected","version":"1.2.176","versionType":"custom"},{"lessThan":"1.3.83.10","status":"affected","version":"1.3.83","versionType":"custom"},{"lessThan":"1.3.213.1","status":"affected","version":"1.3.213","versionType":"custom"},{"lessThanOrEqual":"*","status":"unaffected","version":"1.3.221","versionType":"custom"}]},{"defaultStatus":"unknown","packageName":"org.wso2.carbon.identity.server.api:org.wso2.carbon.identity.api.server.keystore.management.v1","product":"WSO2 Identity Server Keystore Rest API V1","vendor":"WSO2","versions":[{"lessThan":"1.0.82.25","status":"affected","version":"1.0.82","versionType":"custom"},{"lessThan":"1.0.190.17","status":"affected","version":"1.0.190","versionType":"custom"},{"lessThan":"1.2.3.6","status":"affected","version":"1.2.3","versionType":"custom"},{"lessThan":"1.2.23.10","status":"affected","version":"1.2.23","versionType":"custom"},{"lessThan":"1.2.176.18","status":"affected","version":"1.2.176","versionType":"custom"},{"lessThan":"1.3.83.10","status":"affected","version":"1.3.83","versionType":"custom"},{"lessThan":"1.3.213.1","status":"affected","version":"1.3.213","versionType":"custom"},{"lessThanOrEqual":"*","status":"unaffected","version":"1.3.221","versionType":"custom"}]}],"descriptions":[{"lang":"en","supportingMedia":[{"base64":false,"type":"text/html","value":"The affected component fails to enforce expected validation constraints on the `content-type` header when processing certain requests. This allows an attacker to submit a crafted request with a manipulated `content-type` header.\n\nSuccessful exploitation can lead to the unintended exposure of the file paths for certificate files. This information disclosure could potentially be leveraged in subsequent attacks or compromise the confidentiality of the system."}],"value":"The affected component fails to enforce expected validation constraints on the `content-type` header when processing certain requests. This allows an attacker to submit a crafted request with a manipulated `content-type` header.\n\nSuccessful exploitation can lead to the unintended exposure of the file paths for certificate files. This information disclosure could potentially be leveraged in subsequent attacks or compromise the confidentiality of the system."}],"impacts":[{"capecId":"CAPEC-173","descriptions":[{"lang":"en","value":"CAPEC-173 CAPEC-173: Information Gathering"}]}],"metrics":[{"cvssV3_1":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"NONE","baseScore":5.8,"baseSeverity":"MEDIUM","confidentialityImpact":"LOW","integrityImpact":"NONE","privilegesRequired":"NONE","scope":"CHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:N/A:N","version":"3.1"},"format":"CVSS","scenarios":[{"lang":"en","value":"GENERAL"}]}],"problemTypes":[{"descriptions":[{"cweId":"CWE-200","description":"CWE-200: Exposure of Sensitive Information to an Unauthorized Actor","lang":"en","type":"CWE"}]}],"providerMetadata":{"dateUpdated":"2026-11-02T09:20:52.186Z","orgId":"ed10eef1-636d-4fbe-9993-6890dfa878f8","shortName":"WSO2"},"references":[{"tags":["vendor-advisory"],"url":"https://security.docs.wso2.com/en/latest/security-announcements/security-advisories/2026/WSO2-2025-4751/"}],"solutions":[{"lang":"en","supportingMedia":[{"base64":false,"type":"text/html","value":"<span style=\"background-color: transparent;\">Follow the instructions given on </span><a target=\"_blank\" rel=\"nofollow\" href=\"https://security.docs.wso2.com/en/latest/security-announcements/security-advisories/2026/WSO2-2025-4751/#solution\"><span style=\"background-color: transparent;\">https://security.docs.wso2.com/en/latest/security-announcements/security-advisories/2026/WSO2-2025-4751/#solution</span></a> <br>"}],"value":"Follow the instructions given on https://security.docs.wso2.com/en/latest/security-announcements/security-advisories/2026/WSO2-2025-4751/#solution"}],"source":{"advisory":"WSO2-2025-4751","discovery":"INTERNAL"},"title":"Information Disclosure in Multiple WSO2 Products Allows Exposure of Certificate File Paths","x_generator":{"engine":"Vulnogram 0.2.0"}}},"cveMetadata":{"assignerOrgId":"ed10eef1-636d-4fbe-9993-6890dfa878f8","assignerShortName":"WSO2","cveId":"CVE-2025-13647","datePublished":"2026-11-02T09:20:52.186Z","dateReserved":"2025-11-25T09:37:21.342Z","dateUpdated":"2026-11-02T19:20:26.022Z","state":"PUBLISHED"},"dataType":"CVE_RECORD","dataVersion":"5.2"},"nvd":{"publishedDate":"2026-11-02 10:17:10","lastModifiedDate":"2026-11-04 20:10:00","problem_types":["CWE-200","CWE-200 CWE-200: Exposure of Sensitive Information to an Unauthorized Actor"],"metrics":{"cvssMetricV31":[{"source":"ed10eef1-636d-4fbe-9993-6890dfa878f8","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:N/A:N","baseScore":5.8,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"CHANGED","confidentialityImpact":"LOW","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":3.9,"impactScore":1.4}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2026-11-02T19:20:07.726881Z","id":"CVE-2025-13647","options":[{"exploitation":"none"},{"automatable":"yes"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"configurations":[]},"legacy_mitre":{"record":{"CveYear":"2025","CveId":"13647","Ordinal":"1","Title":"Information Disclosure in Multiple WSO2 Products Allows Exposure","CVE":"CVE-2025-13647","Year":"2025"},"notes":[{"CveYear":"2025","CveId":"13647","Ordinal":"1","NoteData":"The affected component fails to enforce expected validation constraints on the `content-type` header when processing certain requests. This allows an attacker to submit a crafted request with a manipulated `content-type` header.\n\nSuccessful exploitation can lead to the unintended exposure of the file paths for certificate files. This information disclosure could potentially be leveraged in subsequent attacks or compromise the confidentiality of the system.","Type":"Description","Title":"Information Disclosure in Multiple WSO2 Products Allows Exposure"}]}}}