Login Request a demo
WM
Product
WSO2 Micro integrator
by WSO2 · last CVE Aug 6, 2026
6
CVEs
0
On KEV
9.1
Max CVSS
0
New 30D
Vulnerabilities6In the news0Timeline
Severity mix
Critical 1High 2Medium 3Low 0
Severity
All severities6Critical1High2Medium3Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add WSO2 Micro integrator to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2025-2905
9.1
1%
May 5
An XML External Entity (XXE) vulnerability in Multiple WSO2 Products
Affected: 1.0.0; 1.1.0; 1.2.0 before 1.2.0.162; 4.0.0 before 4.0.0.132; 4.1.0 before 4.1.0.115; 4.2.0 before 4.2.0.112
CVE-2025-11093
7.2
0%
Nov 5
Arbitrary Code Execution with higher privileged users in Multiple WSO2 Products via Script Mediator Engines (GraalJS and NashornJS)
Affected: 4.0.0 before 4.0.0.145; 4.1.0 before 4.1.0.147; 4.2.0 before 4.2.0.141; 4.3.0 before 4.3.0.42; 4.4.0 before 4.4.0.27
CVE-2025-10907
7.2
1%
Nov 5
Authenticated Arbitrary File Upload in Multiple WSO2 Products via SOAP Admin Services Leading to Remote Code Execution
Affected: 4.0.0 before 4.0.0.145; 4.1.0 before 4.1.0.147; 4.2.0 before 4.2.0.141
CVE-2024-6541
6.8
0%
Aug 6
Information Disclosure and Integrity Violation via Improper Message Context Handling in Multiple WSO2 Products
Affected: 1.2.0 before 1.2.0.163; 4.1.0 before 4.1.0.103; 4.3.0 before 4.3.0.7
CVE-2024-7074
6.8
17%
Jun 2
Authenticated Arbitrary File Upload in Multiple WSO2 Products via SOAP Admin Service Leading to Remote Code Execution
Affected: 1.0.0 before 1.0.0.49
CVE-2024-4598
6.5
0%
Sep 23
Information Disclosure in Multiple WSO2 Products Due to Improper Handling in Enrich Mediator
Affected: 1.2.0 before 1.2.0.157; 4.1.0 before 4.1.0.95
Showing 6