Wso2 Carbon Secured Http Log4J2 Appender

Submit a proposal Propose CVE/GCVE/GHSA reference

Approved changes feed: RSS · Atom

cpe:2.3:a:wso2:wso2_carbon_secured_http_log4j2_appender:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorWso2 (a7ddf9c6-bb76-50d9-a2c9-02e60ad69877)
ProductWso2 Carbon Secured Http Log4J2 Appender (32cb9ffd-b85a-550f-83b2-7e57f20baa6e)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2025-7203 vulnerable 2026-11-03 10:03:06.668882 Sensitive Information Disclosure via Management Console and Product Files in Multiple WSO2 Products Allows Retrieval of Credentials
MEDIUM (4.9)
The Management Console and product files expose sensitive data, including remote log server credentials, truststore passwords, and keystore passwords, in plain text. This occurs because the system does not sufficiently protect or obscure these credentials when the remote logging feature is enabled. An attacker with administrative access to the Management Console or direct access to product files can retrieve these sensitive credentials. This allows for potential manipulation of log entries and compromise of the integrity and confidentiality of the remote log server.
Published: 2026-10-19T16:38:01.795Z
Updated: 2026-10-20T19:33:23.028Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.