Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1000 CNY

100.0%
Buy Us a Coffee

WSO2 Enterprise Integrator — Vulnerabilities & Security Advisories 8

All 8 CVE vulnerabilities found in WSO2 Enterprise Integrator, with AI-generated Chinese analysis, references, and POCs.

Vendor: WSO2

CVE IDTitleCVSSSeverityPublished
CVE-2025-10713 XML External Entity (XXE) Vulnerability in Multiple WSO2 Products Due to Improper XML Parser Configuration CWE-611 6.5 Medium2025-11-05
CVE-2025-9955 Improper Access Control in WSO2 Enterprise Integrator Product via SOAP Admin Services for Logs and User-Store Configuration 5.7 Medium2025-10-16
CVE-2025-1862 Authenticated Arbitrary File Upload in Multiple WSO2 Products via BPEL Uploader SOAP Service Leading to Remote Code Execution CWE-434 6.7 Medium2025-09-26
CVE-2024-3511 Incorrect Authorization in Multiple WSO2 Products Allows Unauthorized Access to Registry Versioned Files CWE-863 4.3 Medium2025-06-23
CVE-2024-8008 Reflected Cross-Site Scripting (XSS) in Multiple WSO2 Products via JDBC User Store Connection Validation CWE-79 5.2 Medium2025-06-02
CVE-2024-3509 Stored Cross-Site Scripting (XSS) in Management Console of Multiple WSO2 Products via Rich Text Editor CWE-79 4.3 Medium2025-06-02
CVE-2024-7074 Authenticated Arbitrary File Upload in Multiple WSO2 Products via SOAP Admin Service Leading to Remote Code Execution CWE-434 6.8 Medium2025-06-02
CVE-2024-0392 Cross-Site Request Forgery (CSRF) in WSO2 Enterprise Integrator 6.6.0 Management Console Due to Missing CSRF Token Validation CWE-352 5.4 Medium2025-02-27

All 8 known CVE vulnerabilities affecting WSO2 Enterprise Integrator with full Chinese analysis, references, and POCs where available.