Login Request a demo
WE
Product
WSO2 Enterprise Integrator
by WSO2 · last CVE Oct 21, 2026
9
CVEs
0
On KEV
9.1
Max CVSS
4
New 30D
Vulnerabilities9In the news0Timeline
Severity mix
Critical 1High 1Medium 6Low 1
Severity
All severities9Critical1High1Medium6Low1
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add WSO2 Enterprise Integrator to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2024-6541
6.8
0%
Aug 6
Information Disclosure and Integrity Violation via Improper Message Context Handling in Multiple WSO2 Products
Affected: 6.6.0 before 6.6.0.205
CVE-2024-5139
New
6.1
0%
Oct 21
Cross-Site Scripting via Authentication Endpoint in Multiple WSO2 Products Enables UI Manipulation and Redirection
Affected: 6.6.0 before 6.6.0.204
CVE-2025-13394
5.4
0%
Aug 6
Cross-Site Request Forgery via Ajax Processor Endpoints in Multiple WSO2 Products Enables Unauthorized Actions
Affected: 6.6.0 before 6.6.0.227
CVE-2024-8008
5.2
1%
Jun 2
Reflected Cross-Site Scripting (XSS) in Multiple WSO2 Products via JDBC User Store Connection Validation
Affected: 6.6.0 before 6.6.0.211
CVE-2025-12317
5.0
0%
Aug 6
Improper Token Revocation via SOAP Services in Multiple WSO2 Products Allows Retained Access Privileges
Affected: 6.6.0 before 6.6.0.228
CVE-2024-2323
4.8
0%
Oct 20
Password Brute Force via Password History Validation in Multiple WSO2 Products Allows User Account Discovery
Affected: 6.6.0 before 6.6.0.204
Showing 6