agentprime: wso2-enterprise-integratorEvery new CVE for wso2-enterprise-integrator.https://agentprime.io/CVE-2024-2372: Open Redirection via Unsanitized User Input in Multiple WSO2 Products Allows Phishing Attackshttps://agentprime.io/advisories/CVE-2024-2372/https://agentprime.io/advisories/CVE-2024-2372/CVSS 5.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Mon, 02 Nov 2026 11:00:23 GMTCVECVE-2024-7075: Reflected Cross-Site Scripting via User Search Function in Management Console of Multiple WSO2 Productshttps://agentprime.io/advisories/CVE-2024-7075/https://agentprime.io/advisories/CVE-2024-7075/CVSS 4.6 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Mon, 02 Nov 2026 09:11:32 GMTCVECVE-2024-5139: Cross-Site Scripting via Authentication Endpoint in Multiple WSO2 Products Enables UI Manipulation and Redirectionhttps://agentprime.io/advisories/CVE-2024-5139/https://agentprime.io/advisories/CVE-2024-5139/CVSS 6.1 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 21 Oct 2026 13:36:49 GMTCVECVE-2024-2323: Password Brute Force via Password History Validation in Multiple WSO2 Products Allows User Account Discoveryhttps://agentprime.io/advisories/CVE-2024-2323/https://agentprime.io/advisories/CVE-2024-2323/CVSS 4.8 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 20 Oct 2026 07:46:37 GMTCVECVE-2024-4412: Expression Language Injection via User Input in Multiple WSO2 Products Permits Arbitrary Operationshttps://agentprime.io/advisories/CVE-2024-4412/https://agentprime.io/advisories/CVE-2024-4412/CVSS 2.7 (Low). Published by the CVE Program. Not analysed by agentprime yet.Mon, 19 Oct 2026 16:59:05 GMTCVECVE-2024-4457: Remote Code Execution via JDBC User Store Configuration in Multiple WSO2 Products Allows Arbitrary Code Executionhttps://agentprime.io/advisories/CVE-2024-4457/https://agentprime.io/advisories/CVE-2024-4457/CVSS 9.1 (Critical). Critical: CVSS score 9.1: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Sun, 18 Oct 2026 18:05:34 GMTCVEcriticalCVE-2025-12317: Improper Token Revocation via SOAP Services in Multiple WSO2 Products Allows Retained Access Privilegeshttps://agentprime.io/advisories/CVE-2025-12317/https://agentprime.io/advisories/CVE-2025-12317/CVSS 5.0 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 06 Aug 2026 17:32:05 GMTCVECVE-2024-6541: Information Disclosure and Integrity Violation via Improper Message Context Handling in Multiple WSO2 Productshttps://agentprime.io/advisories/CVE-2024-6541/https://agentprime.io/advisories/CVE-2024-6541/CVSS 6.8 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 06 Aug 2026 17:31:59 GMTCVECVE-2025-13394: Cross-Site Request Forgery via Ajax Processor Endpoints in Multiple WSO2 Products Enables Unauthorized Actionshttps://agentprime.io/advisories/CVE-2025-13394/https://agentprime.io/advisories/CVE-2025-13394/CVSS 5.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 06 Aug 2026 07:33:17 GMTCVECVE-2024-6832: Account Lockout Failure via Secondary User Store Inaccessibility in Multiple WSO2 Products Allows Brute Force Attackshttps://agentprime.io/advisories/CVE-2024-6832/https://agentprime.io/advisories/CVE-2024-6832/CVSS 5.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 06 Aug 2026 07:32:59 GMTCVECVE-2025-6670: Cross-Site Request Forgery (CSRF) in Multiple WSO2 Products via HTTP GET in Admin Serviceshttps://agentprime.io/advisories/CVE-2025-6670/https://agentprime.io/advisories/CVE-2025-6670/CVSS 8.8 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 18 Nov 2025 11:28:37 GMTCVECVE-2025-10853: Reflected Cross-Site Scripting (XSS) in Management Console of Multiple WSO2 Products Due to Improper Output Encodinghttps://agentprime.io/advisories/CVE-2025-10853/https://agentprime.io/advisories/CVE-2025-10853/CVSS 5.2 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 05 Nov 2025 19:21:32 GMTCVECVE-2025-11093: Arbitrary Code Execution with higher privileged users in Multiple WSO2 Products via Script Mediator Engines (GraalJS and NashornJS)https://agentprime.io/advisories/CVE-2025-11093/https://agentprime.io/advisories/CVE-2025-11093/CVSS 8.4 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 05 Nov 2025 18:31:17 GMTCVECVE-2025-10907: Authenticated Arbitrary File Upload in Multiple WSO2 Products via SOAP Admin Services Leading to Remote Code Executionhttps://agentprime.io/advisories/CVE-2025-10907/https://agentprime.io/advisories/CVE-2025-10907/CVSS 8.4 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 05 Nov 2025 18:03:49 GMTCVECVE-2025-3125: Authenticated Arbitrary File Upload in Multiple WSO2 Products via CarbonAppUploader Admin Service Leading to Remote Code Executionhttps://agentprime.io/advisories/CVE-2025-3125/https://agentprime.io/advisories/CVE-2025-3125/CVSS 6.7 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 05 Nov 2025 14:49:44 GMTCVECVE-2025-5605: Authentication Bypass via URI Manipulation in Multiple WSO2 Products' Management Console Leading to Partial Information Disclosurehttps://agentprime.io/advisories/CVE-2025-5605/https://agentprime.io/advisories/CVE-2025-5605/CVSS 4.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Fri, 24 Oct 2025 10:09:59 GMTCVECVE-2025-5350: SSRF and Reflected XSS Vulnerability in Deprecated Try-It Feature of Multiple WSO2 Productshttps://agentprime.io/advisories/CVE-2025-5350/https://agentprime.io/advisories/CVE-2025-5350/CVSS 5.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Fri, 24 Oct 2025 10:08:07 GMTCVECVE-2025-9804: Improper Access Control in Multiple WSO2 Products via Internal SOAP Admin Services and System REST APIshttps://agentprime.io/advisories/CVE-2025-9804/https://agentprime.io/advisories/CVE-2025-9804/CVSS 9.6 (Critical). Critical: CVSS score 9.6: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Thu, 16 Oct 2025 12:33:45 GMTCVEcriticalCVE-2025-9955: Improper Access Control in WSO2 Enterprise Integrator Product via SOAP Admin Services for Logs and User-Store Configurationhttps://agentprime.io/advisories/CVE-2025-9955/https://agentprime.io/advisories/CVE-2025-9955/CVSS 5.7 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 16 Oct 2025 12:14:56 GMTCVECVE-2025-1862: Authenticated Arbitrary File Upload in Multiple WSO2 Products via BPEL Uploader SOAP Service Leading to Remote Code Executionhttps://agentprime.io/advisories/CVE-2025-1862/https://agentprime.io/advisories/CVE-2025-1862/CVSS 6.7 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Fri, 26 Sep 2025 08:18:21 GMTCVECVE-2024-3511: Incorrect Authorization in Multiple WSO2 Products Allows Unauthorized Access to Registry Versioned Fileshttps://agentprime.io/advisories/CVE-2024-3511/https://agentprime.io/advisories/CVE-2024-3511/CVSS 4.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Mon, 23 Jun 2025 08:47:55 GMTCVECVE-2024-3509: Stored Cross-Site Scripting (XSS) in Management Console of Multiple WSO2 Products via Rich Text Editorhttps://agentprime.io/advisories/CVE-2024-3509/https://agentprime.io/advisories/CVE-2024-3509/CVSS 4.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Mon, 02 Jun 2025 16:44:28 GMTCVECVE-2024-7074: Authenticated Arbitrary File Upload in Multiple WSO2 Products via SOAP Admin Service Leading to Remote Code Executionhttps://agentprime.io/advisories/CVE-2024-7074/https://agentprime.io/advisories/CVE-2024-7074/CVSS 6.8 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Mon, 02 Jun 2025 16:42:19 GMTCVECVE-2024-0392: Cross-Site Request Forgery (CSRF) in WSO2 Enterprise Integrator 6.6.0 Management Console Due to Missing CSRF Token Validationhttps://agentprime.io/advisories/CVE-2024-0392/https://agentprime.io/advisories/CVE-2024-0392/CVSS 5.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 27 Feb 2025 07:04:53 GMTCVE