WSO2 Enterprise Integrator — Vulnerabilities & Security Advisories 10

All 10 CVE vulnerabilities found in WSO2 Enterprise Integrator, with AI-generated Chinese analysis, references, and POCs.

Vendor: WSO2

CVE ID	Title	CVSS	Severity	Published
CVE-2025-12317	Improper Token Revocation via SOAP Services in Multiple WSO2 Products Allows Retained Access Privileges CWE-613	5.0	Medium	2026-08-06
CVE-2024-6832	Account Lockout Failure via Secondary User Store Inaccessibility in Multiple WSO2 Products Allows Brute Force Attacks CWE-693	5.9	Medium	2026-08-06
CVE-2025-10713	XML External Entity (XXE) Vulnerability in Multiple WSO2 Products Due to Improper XML Parser Configuration CWE-611	6.5	Medium	2025-11-05
CVE-2025-9955	Improper Access Control in WSO2 Enterprise Integrator Product via SOAP Admin Services for Logs and User-Store Configuration	5.7	Medium	2025-10-16
CVE-2025-1862	Authenticated Arbitrary File Upload in Multiple WSO2 Products via BPEL Uploader SOAP Service Leading to Remote Code Execution CWE-434	6.7	Medium	2025-09-26
CVE-2024-3511	Incorrect Authorization in Multiple WSO2 Products Allows Unauthorized Access to Registry Versioned Files CWE-863	4.3	Medium	2025-06-23
CVE-2024-8008	Reflected Cross-Site Scripting (XSS) in Multiple WSO2 Products via JDBC User Store Connection Validation CWE-79	5.2	Medium	2025-06-02
CVE-2024-3509	Stored Cross-Site Scripting (XSS) in Management Console of Multiple WSO2 Products via Rich Text Editor CWE-79	4.3	Medium	2025-06-02
CVE-2024-7074	Authenticated Arbitrary File Upload in Multiple WSO2 Products via SOAP Admin Service Leading to Remote Code Execution CWE-434	6.8	Medium	2025-06-02
CVE-2024-0392	Cross-Site Request Forgery (CSRF) in WSO2 Enterprise Integrator 6.6.0 Management Console Due to Missing CSRF Token Validation CWE-352	5.4	Medium	2025-02-27

All 10 known CVE vulnerabilities affecting WSO2 Enterprise Integrator with full Chinese analysis, references, and POCs where available.