Product by WSO2

    WSO2 Enterprise Integrator

    33 known vulnerabilities in WSO2 Enterprise Integrator (WSO2), 1 of them actively exploited (CISA KEV).

    Key figures

    33

    Vulnerabilities

    1

    Actively exploited (KEV)

    1

    Used by ransomware

    3

    Critical

    Vulnerabilities

    Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.

    Vulnerabilities in WSO2 Enterprise Integrator (WSO2)
    CriticalCVE-2022-29464

    WSO2 Multiple Products Unrestrictive Upload of File Vulnerability

    In CISA KEVRansomwarealso in 7 other products

    		9.8
    MediumCVE-2022-39810

    WSO2 Enterprise Integrator: Cross-Site Scripting (XSS)

    		6.1
    MediumCVE-2020-17453

    WSO2 Identity Server as Key Manager: Cross-Site Scripting (XSS)

    also in 7 other products

    		6.1
    MediumCVE-2022-29548

    WSO2 API Manager: Cross-Site Scripting (XSS)

    also in 8 other products

    		4.6
    MediumCVE-2017-14651

    WSO2 Data Analytics Server: Cross-Site Scripting (XSS)

    also in 6 other products

    		4.8
    HighCVE-2020-24703

    WSO2 Identity Server: security vulnerability

    also in 8 other products

    		8.8
    CriticalCVE-2025-9804

    WSO2 API Manager: Improper Access Control

    also in 24 other products

    		9.6
    HighCVE-2020-12719

    WSO2 API Manager: XML External Entity (XXE)

    also in 6 other products

    		8.7
    HighCVE-2025-3125

    WSO2 Identity Server: Unrestricted Upload of File with Dangerous Type

    also in 15 other products

    		6.7
    HighCVE-2025-10907

    WSO2 API Manager: Unrestricted Upload of File with Dangerous Type

    also in 19 other products

    		8.4
    HighCVE-2025-11093

    WSO2 Micro Integrator: Code Injection

    also in 14 other products

    		8.4
    MediumCVE-2020-24591

    WSO2 API Manager Analytics: XML External Entity (XXE)

    also in 4 other products

    		6.5
    HighCVE-2025-1862

    WSO2 Enterprise Integrator: Unrestricted Upload of File with Dangerous Type

    also in 7 other products

    		6.7
    MediumCVE-2025-5350

    SSRF and Reflected XSS Vulnerability in Deprecated Try-It Feature of Multiple WSO2 Products

    also in 18 other products

    		5.9
    MediumCVE-2025-5605

    WSO2 Identity Server: Authentication Bypass

    also in 18 other products

    		4.3
    HighCVE-2025-6670

    Cross-Site Request Forgery (CSRF) in Multiple WSO2 Products via HTTP GET in Admin Services

    also in 16 other products

    		8.8
    CriticalCVE-2025-10713

    WSO2 Enterprise Integrator: Improper Restriction of XML External Entity Reference

    also in 16 other products

    		6.5
    MediumCVE-2020-24704

    WSO2 Identity Server: Cross-Site Scripting (XSS)

    also in 8 other products

    		6.1
    MediumCVE-2024-8008

    WSO2 Enterprise Integrator: Cross-site Scripting

    also in 15 other products

    		5.2
    MediumCVE-2019-19587

    WSO2 Enterprise Integrator: Cross-Site Scripting (XSS)

    		6.1
    MediumCVE-2025-13394

    WSO2 Identity Server: Cross-Site Request Forgery (CSRF)

    also in 18 other products

    		5.4
    MediumCVE-2022-39809

    WSO2 Enterprise Integrator: Cross-Site Scripting (XSS)

    		6.1
    MediumCVE-2020-25516

    WSO2 Enterprise Integrator: Cross-Site Scripting (XSS)

    		5.4
    HighCVE-2020-11885

    WSO2 Enterprise Integrator: XML External Entity (XXE)

    		4.0
    MediumCVE-2019-20443

    WSO2 Identity Server: Cross-Site Scripting (XSS)

    also in 2 other products

    		3.5

    All vulnerabilities in search

    All products by WSO2