CVE-2025-12737: Arbitrary Code Execution via Administrative Operations in Multiple WSO2 Products Allows Remote Code Execution
The administrative operations within the Carbon Console do not adequately validate specific user-supplied input. This oversight allows a malicious actor with administrative privileges to inject and execute arbitrary code remotely.
Successful exploitation enables a threat actor with administrative privileges and Carbon Console access to execute remote arbitrary code through specific administrative operations, leading to a complete compromise of the affected system.
Affected Software
Remediation
Information
Event History
Frequently Asked Questions
Who can exploit this issue?
Exploitation requires administrative privileges and access to the Carbon Console. It is not described as exploitable by unauthenticated or lower-privileged users.
What access does an attacker gain after successful exploitation?
A successful attacker can inject and execute arbitrary code remotely through specific administrative operations. This can result in complete compromise of the affected system.
Are default installations affected?
The available information does not state whether a default configuration is affected. Exposure depends on whether an attacker has administrative privileges and Carbon Console access.