EI
Product
Enterprise Integrator
On CISA KEVExploited in the wildRansomware-linked
33
CVEs
1
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 2High 9Medium 22Low 0
Watch
Add Enterprise Integrator to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2025-9804 | 6.5 | Oct 16 | Improper Access Control in Multiple WSO2 Products via Internal SOAP Admin Services and System REST APIs Affected: 6.2.0; 6.3.0 |
| CVE-2020-24591 | 6.5 | Aug 21 | The Management Console in certain WSO2 products allows XXE attacks during EventReceiver updates Affected: 6.2.0; 6.3.0 |
| CVE-2025-10853 | 6.1 | Nov 5 | Reflected Cross-Site Scripting (XSS) in Management Console of Multiple WSO2 Products Due to Improper Output Encoding Affected: 6.6.0 |
| CVE-2022-39810 | 6.1 | Sep 9 | An issue was discovered in WSO2 Enterprise Integrator 6.4.0 Affected: 6.4.0 |
| CVE-2022-39809 | 6.1 | Sep 9 | An issue was discovered in WSO2 Enterprise Integrator 6.4.0 Affected: 6.4.0 |
| CVE-2022-29548 | 6.1 | Apr 21 | A reflected XSS issue exists in the Management Console of several WSO2 products Affected: 6.2.0; 6.3.0; 6.4.0; 6.5.0; 6.6.0 |
| CVE-2020-17453 | 6.1 | Apr 5 | WSO2 Management Console through 5.10 allows XSS via the carbon/admin/login.jsp msgId parameter Affected: through 6.6.0 |
| CVE-2020-24704 | 6.1 | Aug 27 | An issue was discovered in certain WSO2 products Affected: through 6.6.0 |
| CVE-2019-19587 | 6.1 | Dec 5 | In WSO2 Enterprise Integrator 6.5.0, reflected XSS occurs when updating the message processor configuration from the source view in the Management Console Affected: 6.5.0 |
| CVE-2025-9955 | 5.7 | Oct 16 | Improper Access Control in WSO2 Enterprise Integrator Product via SOAP Admin Services for Logs and User-Store Configuration Affected: 6.0.0; 6.1.0; 6.1.1; 6.2.0; 6.3.0; 6.4.0; +2 more |
| CVE-2025-13394 | 5.4 | Aug 6 | Cross-Site Request Forgery via Ajax Processor Endpoints in Multiple WSO2 Products Enables Unauthorized Actions Affected: 6.6.0 before 6.6.0.227 |
| CVE-2024-0392 | 5.4 | Feb 27 | A Cross-Site Request Forgery (CSRF) vulnerability exists in the management console of WSO2 Enterprise Integrator 6.6.0 due to the absence of CSRF token validation Affected: 6.6.0 |
| CVE-2020-25516 | 5.4 | Oct 29 | WSO2 Enterprise Integrator 6.6.0 or earlier contains a stored cross-site scripting (XSS) vulnerability in BPMN explorer tasks Affected: through 6.6.0 |
| CVE-2025-5605 | 5.3 | Oct 24 | Authentication Bypass via URI Manipulation in Multiple WSO2 Products' Management Console Leading to Partial Information Disclosure Affected: 6.6.0 |
| CVE-2024-8008 | 5.2 | Jun 2 | Reflected Cross-Site Scripting (XSS) in Multiple WSO2 Products via JDBC User Store Connection Validation Affected: 6.6.0 |
| CVE-2025-5350 | 4.8 | Oct 24 | SSRF and Reflected XSS Vulnerability in Deprecated Try-It Feature of Multiple WSO2 Products Affected: 6.6.0 |
| CVE-2023-6911 | 4.8 | Dec 18 | Multiple WSO2 products have been identified as vulnerable due to improper output encoding, a Stored Cross Site Scripting (XSS) attack can be carried out by an attacker injecting a… Affected: 6.1.0; 6.1.1; 6.2.0; 6.3.0; 6.4.0; 6.5.0; +1 more |
| CVE-2019-20443 | 4.8 | Jan 28 | An issue was discovered in WSO2 API Manager 2.6.0, WSO2 Enterprise Integrator 6.5.0, WSO2 IS as Key Manager 5.7.0, and WSO2 Identity Server 5.8.0 Affected: 6.5.0 |
| CVE-2019-20442 | 4.8 | Jan 28 | An issue was discovered in WSO2 API Manager 2.6.0, WSO2 Enterprise Integrator 6.5.0, WSO2 IS as Key Manager 5.7.0, and WSO2 Identity Server 5.8.0 Affected: 6.5.0 |
| CVE-2017-14651 | 4.8 | Sep 21 | WSO2 Data Analytics Server 3.1.0 has XSS in carbon/resources/add_collection_ajaxprocessor.jsp via the collectionName or parentPath parameter Affected: 6.1.1 |
| CVE-2024-3511 | 4.3 | Jun 23 | Incorrect Authorization in Multiple WSO2 Products Allows Unauthorized Access to Registry Versioned Files Affected: 6.6.0 |
| CVE-2024-3509 | 4.3 | Jun 2 | Stored Cross-Site Scripting (XSS) in Management Console of Multiple WSO2 Products via Rich Text Editor Affected: 6.6.0 |
Showing 22