CVE-2025-5717

{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2025-5717", "assignerOrgId": "ed10eef1-636d-4fbe-9993-6890dfa878f8", "state": "PUBLISHED", "assignerShortName": "WSO2", "dateReserved": "2025-06-05T06:06:53.039Z", "datePublished": "2025-09-23T16:05:19.923Z", "dateUpdated": "2025-10-31T15:06:22.088Z"}, "containers": {"cna": {"affected": [{"defaultStatus": "unaffected", "product": "WSO2 API Manager", "vendor": "WSO2", "versions": [{"lessThan": "3.0.0", "status": "unknown", "version": "0", "versionType": "custom"}, {"lessThan": "3.0.0.174", "status": "affected", "version": "3.0.0", "versionType": "custom"}, {"lessThan": "3.1.0.330", "status": "affected", "version": "3.1.0", "versionType": "custom"}, {"lessThan": "3.2.0.426", "status": "affected", "version": "3.2.0", "versionType": "custom"}, {"lessThan": "3.2.1.46", "status": "affected", "version": "3.2.1", "versionType": "custom"}, {"lessThan": "4.0.0.344", "status": "affected", "version": "4.0.0", "versionType": "custom"}, {"lessThan": "4.1.0.208", "status": "affected", "version": "4.1.0", "versionType": "custom"}, {"lessThan": "4.2.0.147", "status": "affected", "version": "4.2.0", "versionType": "custom"}, {"lessThan": "4.3.0.59", "status": "affected", "version": "4.3.0", "versionType": "custom"}, {"lessThan": "4.4.0.22", "status": "affected", "version": "4.4.0", "versionType": "custom"}, {"lessThan": "4.5.0.6", "status": "affected", "version": "4.5.0", "versionType": "custom"}]}, {"defaultStatus": "unaffected", "product": "WSO2 Open Banking AM", "vendor": "WSO2", "versions": [{"lessThan": "2.0.0", "status": "unknown", "version": "0", "versionType": "custom"}, {"lessThan": "2.0.0.379", "status": "affected", "version": "2.0.0", "versionType": "custom"}]}, {"defaultStatus": "unaffected", "product": "WSO2 Traffic Manager", "vendor": "WSO2", "versions": [{"lessThan": "4.5.0.6", "status": "affected", "version": "4.5.0", "versionType": "custom"}]}, {"defaultStatus": "unaffected", "product": "WSO2 API Control Plane", "vendor": "WSO2", "versions": [{"lessThan": "4.5.0.6", "status": "affected", "version": "4.5.0", "versionType": "custom"}]}, {"defaultStatus": "unknown", "packageName": "org.wso2.siddhi:siddhi-extension-eval-scriptApache", "product": "Siddhi Extension Evaluate Scripts", "vendor": "WSO2", "versions": [{"lessThan": "3.2.6.8", "status": "affected", "version": "3.2.6", "versionType": "custom"}, {"lessThan": "3.2.7.6", "status": "affected", "version": "3.2.7", "versionType": "custom"}, {"lessThan": "3.2.8.3", "status": "affected", "version": "3.2.8", "versionType": "custom"}, {"lessThan": "3.2.10.1", "status": "affected", "version": "3.2.10", "versionType": "custom"}, {"lessThan": "3.2.13.2", "status": "affected", "version": "3.2.13", "versionType": "custom"}, {"lessThan": "3.2.14.1", "status": "affected", "version": "3.2.14", "versionType": "custom"}, {"lessThanOrEqual": "*", "status": "unaffected", "version": "3.2.15", "versionType": "custom"}]}], "credits": [{"lang": "en", "type": "reporter", "value": "No\u00ebl MACCARY"}], "descriptions": [{"lang": "en", "supportingMedia": [{"base64": false, "type": "text/html", "value": "An authenticated remote code execution (RCE) vulnerability exists in multiple WSO2 products due to improper input validation in the event processor admin service. A user with administrative access to the SOAP admin services can exploit this flaw by deploying a Siddhi execution plan containing malicious Java code, resulting in arbitrary code execution on the server.<br><br>Exploitation of this vulnerability requires a valid user account with administrative privileges, limiting the attack surface to authenticated but potentially malicious users.<br>"}], "value": "An authenticated remote code execution (RCE) vulnerability exists in multiple WSO2 products due to improper input validation in the event processor admin service. A user with administrative access to the SOAP admin services can exploit this flaw by deploying a Siddhi execution plan containing malicious Java code, resulting in arbitrary code execution on the server.\n\nExploitation of this vulnerability requires a valid user account with administrative privileges, limiting the attack surface to authenticated but potentially malicious users."}], "metrics": [{"cvssV3_1": {"attackComplexity": "LOW", "attackVector": "ADJACENT_NETWORK", "availabilityImpact": "HIGH", "baseScore": 6.8, "baseSeverity": "MEDIUM", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "HIGH", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:A/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H", "version": "3.1"}, "format": "CVSS", "scenarios": [{"lang": "en", "value": "GENERAL"}]}], "problemTypes": [{"descriptions": [{"cweId": "CWE-94", "description": "CWE-94 Improper Control of Generation of Code ('Code Injection')", "lang": "en", "type": "CWE"}]}], "providerMetadata": {"orgId": "ed10eef1-636d-4fbe-9993-6890dfa878f8", "shortName": "WSO2", "dateUpdated": "2025-10-31T15:06:22.088Z"}, "references": [{"tags": ["vendor-advisory"], "url": "https://security.docs.wso2.com/en/latest/security-announcements/security-advisories/2025/WSO2-2025-4119/"}], "solutions": [{"lang": "en", "supportingMedia": [{"base64": false, "type": "text/html", "value": "<span style=\"background-color: transparent;\">Follow the instructions given on </span><a target=\"_blank\" rel=\"nofollow\" href=\"https://security.docs.wso2.com/en/latest/security-announcements/security-advisories/2025/WSO2-2025-4119/#solution\"><span style=\"background-color: transparent;\">https://security.docs.wso2.com/en/latest/security-announcements/security-advisories/2025/WSO2-2025-4119/#solution</span></a> <br>"}], "value": "Follow the instructions given on https://security.docs.wso2.com/en/latest/security-announcements/security-advisories/2025/WSO2-2025-4119/#solution https://security.docs.wso2.com/en/latest/security-announcements/security-advisories/2025/WSO2-2025-4119/#solution"}], "source": {"advisory": "WSO2-2025-4119", "discovery": "EXTERNAL"}, "title": "Authenticated Remote Code Execution in Multiple WSO2 Products via Event Processor Admin Service", "x_generator": {"engine": "Vulnogram 0.2.0"}}, "adp": [{"metrics": [{"other": {"type": "ssvc", "content": {"timestamp": "2025-09-23T18:31:28.992929Z", "id": "CVE-2025-5717", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "total"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2025-09-23T18:37:55.308Z"}}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2025-5717", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "total"}], "version": "2.0.3", "timestamp": "2025-09-23T18:31:28.992929Z"}}}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2025-09-23T18:31:31.819Z"}}], "cna": {"title": "Authenticated Remote Code Execution in Multiple WSO2 Products via Event Processor Admin Service", "source": {"advisory": "WSO2-2025-4119", "discovery": "EXTERNAL"}, "credits": [{"lang": "en", "type": "reporter", "value": "No\u00ebl MACCARY"}], "metrics": [{"format": "CVSS", "cvssV3_1": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 6.8, "attackVector": "ADJACENT_NETWORK", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:A/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "HIGH", "confidentialityImpact": "HIGH"}, "scenarios": [{"lang": "en", "value": "GENERAL"}]}], "affected": [{"vendor": "WSO2", "product": "WSO2 API Manager", "versions": [{"status": "unknown", "version": "0", "lessThan": "3.0.0", "versionType": "custom"}, {"status": "affected", "version": "3.0.0", "lessThan": "3.0.0.174", "versionType": "custom"}, {"status": "affected", "version": "3.1.0", "lessThan": "3.1.0.330", "versionType": "custom"}, {"status": "affected", "version": "3.2.0", "lessThan": "3.2.0.426", "versionType": "custom"}, {"status": "affected", "version": "3.2.1", "lessThan": "3.2.1.46", "versionType": "custom"}, {"status": "affected", "version": "4.0.0", "lessThan": "4.0.0.344", "versionType": "custom"}, {"status": "affected", "version": "4.1.0", "lessThan": "4.1.0.208", "versionType": "custom"}, {"status": "affected", "version": "4.2.0", "lessThan": "4.2.0.147", "versionType": "custom"}, {"status": "affected", "version": "4.3.0", "lessThan": "4.3.0.59", "versionType": "custom"}, {"status": "affected", "version": "4.4.0", "lessThan": "4.4.0.22", "versionType": "custom"}, {"status": "affected", "version": "4.5.0", "lessThan": "4.5.0.6", "versionType": "custom"}], "defaultStatus": "unaffected"}, {"vendor": "WSO2", "product": "WSO2 Open Banking AM", "versions": [{"status": "unknown", "version": "0", "lessThan": "2.0.0", "versionType": "custom"}, {"status": "affected", "version": "2.0.0", "lessThan": "2.0.0.379", "versionType": "custom"}], "defaultStatus": "unaffected"}, {"vendor": "WSO2", "product": "WSO2 Traffic Manager", "versions": [{"status": "affected", "version": "4.5.0", "lessThan": "4.5.0.6", "versionType": "custom"}], "defaultStatus": "unaffected"}, {"vendor": "WSO2", "product": "WSO2 API Control Plane", "versions": [{"status": "affected", "version": "4.5.0", "lessThan": "4.5.0.6", "versionType": "custom"}], "defaultStatus": "unaffected"}, {"vendor": "WSO2", "product": "Siddhi Extension Evaluate Scripts", "versions": [{"status": "affected", "version": "3.2.6", "lessThan": "3.2.6.8", "versionType": "custom"}, {"status": "affected", "version": "3.2.7", "lessThan": "3.2.7.6", "versionType": "custom"}, {"status": "affected", "version": "3.2.8", "lessThan": "3.2.8.3", "versionType": "custom"}, {"status": "affected", "version": "3.2.10", "lessThan": "3.2.10.1", "versionType": "custom"}, {"status": "affected", "version": "3.2.13", "lessThan": "3.2.13.2", "versionType": "custom"}, {"status": "affected", "version": "3.2.14", "lessThan": "3.2.14.1", "versionType": "custom"}, {"status": "unaffected", "version": "3.2.15", "versionType": "custom", "lessThanOrEqual": "*"}], "packageName": "org.wso2.siddhi:siddhi-extension-eval-scriptApache", "defaultStatus": "unknown"}], "solutions": [{"lang": "en", "value": "Follow the instructions given on https://security.docs.wso2.com/en/latest/security-announcements/security-advisories/2025/WSO2-2025-4119/#solution https://security.docs.wso2.com/en/latest/security-announcements/security-advisories/2025/WSO2-2025-4119/#solution", "supportingMedia": [{"type": "text/html", "value": "<span style=\"background-color: transparent;\">Follow the instructions given on </span><a target=\"_blank\" rel=\"nofollow\" href=\"https://security.docs.wso2.com/en/latest/security-announcements/security-advisories/2025/WSO2-2025-4119/#solution\"><span style=\"background-color: transparent;\">https://security.docs.wso2.com/en/latest/security-announcements/security-advisories/2025/WSO2-2025-4119/#solution</span></a> <br>", "base64": false}]}], "references": [{"url": "https://security.docs.wso2.com/en/latest/security-announcements/security-advisories/2025/WSO2-2025-4119/", "tags": ["vendor-advisory"]}], "x_generator": {"engine": "Vulnogram 0.2.0"}, "descriptions": [{"lang": "en", "value": "An authenticated remote code execution (RCE) vulnerability exists in multiple WSO2 products due to improper input validation in the event processor admin service. A user with administrative access to the SOAP admin services can exploit this flaw by deploying a Siddhi execution plan containing malicious Java code, resulting in arbitrary code execution on the server.\n\nExploitation of this vulnerability requires a valid user account with administrative privileges, limiting the attack surface to authenticated but potentially malicious users.", "supportingMedia": [{"type": "text/html", "value": "An authenticated remote code execution (RCE) vulnerability exists in multiple WSO2 products due to improper input validation in the event processor admin service. A user with administrative access to the SOAP admin services can exploit this flaw by deploying a Siddhi execution plan containing malicious Java code, resulting in arbitrary code execution on the server.<br><br>Exploitation of this vulnerability requires a valid user account with administrative privileges, limiting the attack surface to authenticated but potentially malicious users.<br>", "base64": false}]}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-94", "description": "CWE-94 Improper Control of Generation of Code ('Code Injection')"}]}], "providerMetadata": {"orgId": "ed10eef1-636d-4fbe-9993-6890dfa878f8", "shortName": "WSO2", "dateUpdated": "2025-10-31T15:06:22.088Z"}}}, "cveMetadata": {"cveId": "CVE-2025-5717", "state": "PUBLISHED", "dateUpdated": "2025-10-31T15:06:22.088Z", "dateReserved": "2025-06-05T06:06:53.039Z", "assignerOrgId": "ed10eef1-636d-4fbe-9993-6890dfa878f8", "datePublished": "2025-09-23T16:05:19.923Z", "assignerShortName": "WSO2"}, "dataVersion": "5.2"}

{"affected": [{"affectedData": [{"defaultStatus": "unaffected", "product": "WSO2 API Manager", "vendor": "WSO2", "versions": [{"lessThan": "3.0.0", "status": "unknown", "version": "0", "versionType": "custom"}, {"lessThan": "3.0.0.174", "status": "affected", "version": "3.0.0", "versionType": "custom"}, {"lessThan": "3.1.0.330", "status": "affected", "version": "3.1.0", "versionType": "custom"}, {"lessThan": "3.2.0.426", "status": "affected", "version": "3.2.0", "versionType": "custom"}, {"lessThan": "3.2.1.46", "status": "affected", "version": "3.2.1", "versionType": "custom"}, {"lessThan": "4.0.0.344", "status": "affected", "version": "4.0.0", "versionType": "custom"}, {"lessThan": "4.1.0.208", "status": "affected", "version": "4.1.0", "versionType": "custom"}, {"lessThan": "4.2.0.147", "status": "affected", "version": "4.2.0", "versionType": "custom"}, {"lessThan": "4.3.0.59", "status": "affected", "version": "4.3.0", "versionType": "custom"}, {"lessThan": "4.4.0.22", "status": "affected", "version": "4.4.0", "versionType": "custom"}, {"lessThan": "4.5.0.6", "status": "affected", "version": "4.5.0", "versionType": "custom"}]}, {"defaultStatus": "unaffected", "product": "WSO2 Open Banking AM", "vendor": "WSO2", "versions": [{"lessThan": "2.0.0", "status": "unknown", "version": "0", "versionType": "custom"}, {"lessThan": "2.0.0.379", "status": "affected", "version": "2.0.0", "versionType": "custom"}]}, {"defaultStatus": "unaffected", "product": "WSO2 Traffic Manager", "vendor": "WSO2", "versions": [{"lessThan": "4.5.0.6", "status": "affected", "version": "4.5.0", "versionType": "custom"}]}, {"defaultStatus": "unaffected", "product": "WSO2 API Control Plane", "vendor": "WSO2", "versions": [{"lessThan": "4.5.0.6", "status": "affected", "version": "4.5.0", "versionType": "custom"}]}, {"defaultStatus": "unknown", "packageName": "org.wso2.siddhi:siddhi-extension-eval-scriptApache", "product": "Siddhi Extension Evaluate Scripts", "vendor": "WSO2", "versions": [{"lessThan": "3.2.6.8", "status": "affected", "version": "3.2.6", "versionType": "custom"}, {"lessThan": "3.2.7.6", "status": "affected", "version": "3.2.7", "versionType": "custom"}, {"lessThan": "3.2.8.3", "status": "affected", "version": "3.2.8", "versionType": "custom"}, {"lessThan": "3.2.10.1", "status": "affected", "version": "3.2.10", "versionType": "custom"}, {"lessThan": "3.2.13.2", "status": "affected", "version": "3.2.13", "versionType": "custom"}, {"lessThan": "3.2.14.1", "status": "affected", "version": "3.2.14", "versionType": "custom"}, {"lessThanOrEqual": "*", "status": "unaffected", "version": "3.2.15", "versionType": "custom"}]}], "source": "ed10eef1-636d-4fbe-9993-6890dfa878f8"}], "configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:wso2:api_control_plane:4.5.0:-:*:*:*:*:*:*", "matchCriteriaId": "DEEA7DB5-BBF7-44A4-9FB6-0D235A44C680", "vulnerable": true}, {"criteria": "cpe:2.3:a:wso2:api_manager:3.0.0:*:*:*:*:*:*:*", "matchCriteriaId": "8FF14774-8935-4FC9-B5C8-9771B3D6EBFD", "vulnerable": true}, {"criteria": "cpe:2.3:a:wso2:api_manager:3.1.0:*:*:*:*:*:*:*", "matchCriteriaId": "1344FB79-0796-445C-A8F3-C03E995925D1", "vulnerable": true}, {"criteria": "cpe:2.3:a:wso2:api_manager:3.2.0:*:*:*:*:*:*:*", "matchCriteriaId": "E31E32CD-497E-4EF5-B3FC-8718EE06EDAD", "vulnerable": true}, {"criteria": "cpe:2.3:a:wso2:api_manager:3.2.1:*:*:*:*:*:*:*", "matchCriteriaId": "B58251E8-606B-47C8-8E50-9F9FC8C179BD", "vulnerable": true}, {"criteria": "cpe:2.3:a:wso2:api_manager:4.0.0:*:*:*:*:*:*:*", "matchCriteriaId": "E21D7ABF-C328-425D-B914-618C7628220B", "vulnerable": true}, {"criteria": "cpe:2.3:a:wso2:api_manager:4.1.0:-:*:*:*:*:*:*", "matchCriteriaId": "51465410-6B7C-40FD-A1AB-A14F650A6AC8", "vulnerable": true}, {"criteria": "cpe:2.3:a:wso2:api_manager:4.2.0:-:*:*:*:*:*:*", "matchCriteriaId": "851470CC-22AB-43E4-9CC6-5E22D49B3572", "vulnerable": true}, {"criteria": "cpe:2.3:a:wso2:api_manager:4.3.0:-:*:*:*:*:*:*", "matchCriteriaId": "9EBAB99E-6F0F-4CE9-A954-E8878826304C", "vulnerable": true}, {"criteria": "cpe:2.3:a:wso2:api_manager:4.4.0:-:*:*:*:*:*:*", "matchCriteriaId": "0B3E6207-B2CF-487C-9CB8-906248B665C9", "vulnerable": true}, {"criteria": "cpe:2.3:a:wso2:api_manager:4.5.0:-:*:*:*:*:*:*", "matchCriteriaId": "D47B760D-5418-4FB0-88F0-3F78BAFF63E1", "vulnerable": true}, {"criteria": "cpe:2.3:a:wso2:open_banking_am:2.0.0:*:*:*:*:*:*:*", "matchCriteriaId": "94347800-04D2-48C4-ACF0-078A5ACBB063", "vulnerable": true}, {"criteria": "cpe:2.3:a:wso2:traffic_manager:4.5.0:*:*:*:*:*:*:*", "matchCriteriaId": "C7413107-D7B2-49AE-AC46-52E7BFCD6ED8", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "cveTags": [], "descriptions": [{"lang": "en", "value": "An authenticated remote code execution (RCE) vulnerability exists in multiple WSO2 products due to improper input validation in the event processor admin service. A user with administrative access to the SOAP admin services can exploit this flaw by deploying a Siddhi execution plan containing malicious Java code, resulting in arbitrary code execution on the server.\n\nExploitation of this vulnerability requires a valid user account with administrative privileges, limiting the attack surface to authenticated but potentially malicious users."}, {"lang": "es", "value": "Existe una vulnerabilidad de ejecuci\u00f3n remota de c\u00f3digo (RCE) autenticada en m\u00faltiples productos WSO2 debido a una validaci\u00f3n de entrada incorrecta en el servicio de administraci\u00f3n del procesador de eventos. Un usuario con acceso administrativo a los servicios de administraci\u00f3n SOAP puede explotar esta falla mediante el despliegue de un plan de ejecuci\u00f3n Siddhi que contenga c\u00f3digo Java malicioso, lo que resulta en ejecuci\u00f3n de c\u00f3digo arbitrario en el servidor.\n\nLa explotaci\u00f3n de esta vulnerabilidad requiere una cuenta de usuario v\u00e1lida con privilegios administrativos, lo que limita la superficie de ataque a usuarios autenticados pero potencialmente maliciosos."}], "id": "CVE-2025-5717", "lastModified": "2026-10-18T21:10:00.120", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "ADJACENT_NETWORK", "availabilityImpact": "HIGH", "baseScore": 6.8, "baseSeverity": "MEDIUM", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "HIGH", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:A/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H", "version": "3.1"}, "exploitabilityScore": 0.9, "impactScore": 5.9, "source": "ed10eef1-636d-4fbe-9993-6890dfa878f8", "type": "Secondary"}, {"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 7.2, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "HIGH", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H", "version": "3.1"}, "exploitabilityScore": 1.2, "impactScore": 5.9, "source": "nvd@nist.gov", "type": "Primary"}], "ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2025-5717", "options": [{"exploitation": "none"}, {"automatable": "no"}, {"technicalImpact": "total"}], "role": "CISA Coordinator", "timestamp": "2025-09-23T18:31:28.992929Z", "version": "2.0.3"}}]}, "published": "2025-09-23T16:15:33.620", "references": [{"source": "ed10eef1-636d-4fbe-9993-6890dfa878f8", "tags": ["Vendor Advisory"], "url": "https://security.docs.wso2.com/en/latest/security-announcements/security-advisories/2025/WSO2-2025-4119/"}], "sourceIdentifier": "ed10eef1-636d-4fbe-9993-6890dfa878f8", "vulnStatus": "Analyzed", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-94"}], "source": "ed10eef1-636d-4fbe-9993-6890dfa878f8", "type": "Secondary"}]}

{}

{"created": "2025-09-25T08:22:19.031240+00:00", "updated": "2025-09-25T08:22:19.031342+00:00", "vendors": ["wso2", "wso2$PRODUCT$api_control_plane", "wso2$PRODUCT$api_manager", "wso2$PRODUCT$open_banking_am", "wso2$PRODUCT$siddhi_extension_evaluate_scripts", "wso2$PRODUCT$traffic_manager"]}