Advisories · Technology

WSO2 Micro Integrator.

Every CVE that names WSO2 Micro Integrator among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2024-6541 CVE record

CVSS 6.8 Medium

Information Disclosure and Integrity Violation via Improper Message Context Handling in Multiple WSO2 Products
- WSO2 Micro Integrator
- WSO2 Enterprise Integrator
- CWE-20
Not analysed yet 6 Aug 2026
CVE-2025-11093 CVE record

CVSS 8.4 High

Arbitrary Code Execution with higher privileged users in Multiple WSO2 Products via Script Mediator Engines (GraalJS and NashornJS)
- WSO2 Micro Integrator
- WSO2 API Manager
- Code injection
Not analysed yet 5 Nov 2025
CVE-2025-10907 CVE record

CVSS 8.4 High

Authenticated Arbitrary File Upload in Multiple WSO2 Products via SOAP Admin Services Leading to Remote Code Execution
- WSO2 API Manager
- WSO2 Open Banking IAM
- Unrestricted file upload
Not analysed yet 5 Nov 2025
CVE-2024-4598 CVE record

CVSS 6.5 Medium

Information Disclosure in Multiple WSO2 Products Due to Improper Handling in Enrich Mediator
- WSO2 API Manager
- WSO2 Micro Integrator
- CWE-1259
Not analysed yet 23 Sept 2025
CVE-2024-7074 CVE record

CVSS 6.8 Medium

Authenticated Arbitrary File Upload in Multiple WSO2 Products via SOAP Admin Service Leading to Remote Code Execution
- WSO2 Enterprise Integrator
- WSO2 API Manager
- Unrestricted file upload
Not analysed yet 2 Jun 2025