Wso2 Micro Integrator — known CVE vulnerabilities

Every CVE whose affected-product data names Wso2 Micro Integrator, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (5)

• CVE-2025-11093 — CVSS 8.4 (high): An arbitrary code execution vulnerability exists in multiple WSO2 products due to insufficient restrictions in the GraalJS and NashornJS…
• CVE-2024-4598 — CVSS 6.5 (medium): An information disclosure vulnerability exists in multiple WSO2 products due to improper implementation of the enrich mediator…
• CVE-2020-17453 — CVSS 6.1 (medium): WSO2 Management Console through 5.10 allows XSS via the carbon/admin/login.jsp msgId parameter.
• CVE-2022-29548 — CVSS 4.6 (medium): A reflected XSS issue exists in the Management Console of several WSO2 products. This affects API Manager 2.2.0, 2.5.0, 2.6.0, 3.0.0…
• CVE-2023-6836 — CVSS 4.6 (medium): Multiple WSO2 products have been identified as vulnerable due to an XML External Entity (XXE) attack abuses a widely available but rarely…