Login Request a demo
WE
Product
WSO2 Enterprise Integrator
by WSO2 · last CVE Oct 21, 2026
25
CVEs
0
On KEV
9.1
Max CVSS
4
New 30D
Vulnerabilities25In the news0Timeline
Severity mix
Critical 3High 6Medium 15Low 1
Severity
All severities25Critical3High6Medium15Low1
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add WSO2 Enterprise Integrator to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2025-6670
8.8
0%
Nov 18
Cross-Site Request Forgery (CSRF) in Multiple WSO2 Products via HTTP GET in Admin Services
Affected: 6.6.0 before 6.6.0.226
CVE-2024-6832
7.5
0%
Aug 6
Account Lockout Failure via Secondary User Store Inaccessibility in Multiple WSO2 Products Allows Brute Force Attacks
Affected: 6.6.0 before 6.6.0.229
CVE-2025-11093
7.2
0%
Nov 5
Arbitrary Code Execution with higher privileged users in Multiple WSO2 Products via Script Mediator Engines (GraalJS and NashornJS)
Affected: 6.6.0 before 6.6.0.224
CVE-2025-10907
7.2
1%
Nov 5
Authenticated Arbitrary File Upload in Multiple WSO2 Products via SOAP Admin Services Leading to Remote Code Execution
Affected: 6.6.0 before 6.6.0.224
CVE-2025-3125
7.2
1%
Nov 5
Authenticated Arbitrary File Upload in Multiple WSO2 Products via CarbonAppUploader Admin Service Leading to Remote Code Execution
Affected: 6.6.0 before 6.6.0.217
CVE-2025-1862
7.2
1%
Sep 26
Authenticated Arbitrary File Upload in Multiple WSO2 Products via BPEL Uploader SOAP Service Leading to Remote Code Execution
Affected: 6.6.0 before 6.6.0.215
Showing 6