WE
Product
WSO2 Enterprise Integrator
9
CVEs
0
On KEV
9.1
Max CVSS
4
New 30D
Severity mix
Critical 1High 1Medium 6Low 1
Watch
Add WSO2 Enterprise Integrator to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2024-4457 | 9.1 | Oct 18 | Remote Code Execution via JDBC User Store Configuration in Multiple WSO2 Products Allows Arbitrary Code Execution Affected: 6.6.0 before 6.6.0.204 |
| CVE-2024-6832 | 7.5 | Aug 6 | Account Lockout Failure via Secondary User Store Inaccessibility in Multiple WSO2 Products Allows Brute Force Attacks Affected: 6.6.0 before 6.6.0.229 |
| CVE-2024-6541 | 6.8 | Aug 6 | Information Disclosure and Integrity Violation via Improper Message Context Handling in Multiple WSO2 Products Affected: 6.6.0 before 6.6.0.205 |
| CVE-2024-5139 New | 6.1 | Oct 21 | Cross-Site Scripting via Authentication Endpoint in Multiple WSO2 Products Enables UI Manipulation and Redirection Affected: 6.6.0 before 6.6.0.204 |
| CVE-2025-13394 | 5.4 | Aug 6 | Cross-Site Request Forgery via Ajax Processor Endpoints in Multiple WSO2 Products Enables Unauthorized Actions Affected: 6.6.0 before 6.6.0.227 |
| CVE-2024-8008 | 5.2 | Jun 2 | Reflected Cross-Site Scripting (XSS) in Multiple WSO2 Products via JDBC User Store Connection Validation Affected: 6.6.0 before 6.6.0.211 |
| CVE-2025-12317 | 5.0 | Aug 6 | Improper Token Revocation via SOAP Services in Multiple WSO2 Products Allows Retained Access Privileges Affected: 6.6.0 before 6.6.0.228 |
| CVE-2024-2323 | 4.8 | Oct 20 | Password Brute Force via Password History Validation in Multiple WSO2 Products Allows User Account Discovery Affected: 6.6.0 before 6.6.0.204 |
| CVE-2024-4412 | 2.7 | Oct 19 | Expression Language Injection via User Input in Multiple WSO2 Products Permits Arbitrary Operations Affected: 6.6.0 before 6.6.0.205 |
Showing 9