Product by WSO2
Wso2 Enterprise Integrator
29 known vulnerabilities in Wso2 Enterprise Integrator (WSO2), 0 of them actively exploited (CISA KEV).
Key figures
29
Vulnerabilities
0
Actively exploited (KEV)
0
Used by ransomware
4
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.
| Medium | CVE-2024-7074 | WSO2 Enterprise Integrator: Unrestricted Upload of File with Dangerous Type | 6.8 | |
| Critical | CVE-2025-2905 | An XML External Entity (XXE) vulnerability in Multiple WSO2 Products | 9.1 | |
| Critical | CVE-2024-4457 | WSO2 Enterprise Integrator: OS Command Injection | 9.1 | |
| Critical | CVE-2025-9804 | WSO2 API Manager: Improper Access Control | 9.6 | |
| High | CVE-2025-3125 | WSO2 Identity Server: Unrestricted Upload of File with Dangerous Type | 6.7 | |
| High | CVE-2025-10907 | WSO2 API Manager: Unrestricted Upload of File with Dangerous Type | 8.4 | |
| High | CVE-2024-6832 | WSO2 Enterprise Integrator: Protection Mechanism Failure | 7.5 | |
| High | CVE-2025-11093 | WSO2 Micro Integrator: Code Injection | 8.4 | |
| Medium | CVE-2024-6541 | WSO2 Micro Integrator: Improper Input Validation | 6.8 | |
| Medium | CVE-2024-5139 | WSO2 Enterprise Integrator: Cross-site Scripting | 6.1 | |
| High | CVE-2025-1862 | WSO2 Enterprise Integrator: Unrestricted Upload of File with Dangerous Type | 6.7 | |
| Medium | CVE-2025-5350 | SSRF and Reflected XSS Vulnerability in Deprecated Try-It Feature of Multiple WSO2 Products | 5.9 | |
| Medium | CVE-2025-5605 | WSO2 Identity Server: Authentication Bypass | 4.3 | |
| High | CVE-2025-6670 | Cross-Site Request Forgery (CSRF) in Multiple WSO2 Products via HTTP GET in Admin Services | 8.8 | |
| Medium | CVE-2024-2372 | Open Redirection via Unsanitized User Input in Multiple WSO2 Products Allows Phishing Attacks | 5.4 | |
| Critical | CVE-2025-10713 | WSO2 Enterprise Integrator: Improper Restriction of XML External Entity Reference | 6.5 | |
| Medium | CVE-2024-2323 | WSO2 Enterprise Integrator: Improper Restriction of Excessive Authentication Attempts | 4.8 | |
| Medium | CVE-2024-7075 | WSO2 Enterprise Integrator: Cross-site Scripting | 4.6 | |
| Medium | CVE-2024-8008 | WSO2 Enterprise Integrator: Cross-site Scripting | 5.2 | |
| Low | CVE-2024-4412 | Expression Language Injection via User Input in Multiple WSO2 Products Permits Arbitrary Operations | 2.7 | |
| Medium | CVE-2025-12317 | WSO2 Enterprise Integrator: Insufficient Session Expiration | 5.0 | |
| Medium | CVE-2025-13394 | WSO2 Identity Server: Cross-Site Request Forgery (CSRF) | 5.4 | |
| High | CVE-2023-6836 | WSO2 API Manager: Improper Restriction of XML External Entity Reference | 4.6 | |
| Medium | CVE-2025-9955 | WSO2 Enterprise Integrator: Improper Access Control | 5.7 | |
| Medium | CVE-2025-10853 | WSO2 Open Banking IAM: Cross-site Scripting | 5.2 |