WSO2 org.wso2.carbon:org.wso2.carbon.server.admin

• CVE-2025-9804 Critical 9.6 Improper Access Control in Multiple WSO2 Products via Internal SOAP Admin Services and System REST APIs 0.6%
• CVE-2025-9955 Medium 5.7 Improper Access Control in WSO2 Enterprise Integrator Product via SOAP Admin Services for Logs and User-Store Configuration 0.2%