How many WSO2 micro integrator CVEs are in CISA KEV?

None of WSO2 micro integrator's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.

Which versions of WSO2 micro integrator are affected?

15 distinct WSO2 micro integrator versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version.

What are the most common weakness types in WSO2 micro integrator CVEs?

WSO2 micro integrator's CVEs most often map to these CWE weakness types: CWE-1259 (Improper Restriction of Security Token Assignment), CWE-611 (Improper Restriction of XML External Entity Reference), CWE-94 (Improper Control of Generation of Code ('Code Injection')).

What is the average severity of WSO2 micro integrator CVEs?

The average CVSS base score across WSO2 micro integrator's scored CVEs is 6.9.

RadicalNotion.AI

Log in Start free

Log in

Log in Start free

WSO2

5 CVEs

WSO2 micro integrator Vulnerabilities

Name: WSO2 micro integrator vulnerability dataset (CVEs)
Creator: RadicalNotion.AI
License: https://creativecommons.org/licenses/by-nc/4.0/

CVE security advisories and vulnerability history for micro integrator by WSO2.

5

Total CVEs

Published

0

In CISA KEV

Exploited in the wild

2

Public exploits

PoC or exploit code

6.9

Avg CVSS

2021–2025

Last updated November 5, 2025

Overview

WSO2 micro integrator has 5 published CVE records since 2021, of which 0 are in CISA's Known Exploited Vulnerabilities catalog and 2 have a known public exploit. The average CVSS base score across scored CVEs is 6.9.

This page aggregates every publicly disclosed vulnerability (CVE) affecting WSO2 micro integrator, with a severity breakdown, the affected and patched versions, the most common weakness types, and the full CVE list.

Severity and exploitation

How the CVSS severity of WSO2 micro integrator's CVEs breaks down, plus how many are exploited in the wild or have public exploit code.

Critical0

High2

Medium3

Low0

In CISA’s Known Exploited Vulnerabilities catalog

0

None of WSO2 micro integrator's CVEs are currently listed in CISA's KEV catalog.

Public exploits

2

2 of WSO2 micro integrator's CVEs have a known public exploit available.

Affected versions and CVEs

Browse every WSO2 micro integrator version named in a CVE, then pick one to see only the CVEs that affect it.

Version ranges

1.0.0 <= v <= 1.0.03 CVEs
1.2.0 <= v < 1.2.0.1571 CVE
4.0.0 <= v < 4.0.0.1451 CVE
4.1.0 <= v < 4.1.0.1471 CVE
4.1.0 <= v < 4.1.0.951 CVE
4.2.0 <= v < 4.2.0.1411 CVE
4.3.0 <= v < 4.3.0.421 CVE
4.4.0 <= v < 4.4.0.271 CVE

Fixed in

1.2.0.1571 CVE
4.0.0.1451 CVE
4.1.0.1471 CVE
4.1.0.951 CVE
4.2.0.1411 CVE
4.3.0.421 CVE
4.4.0.271 CVE

Find a version

5 CVEs

Sort

Arbitrary Code Execution with higher privileged users in Multiple WSO2 Products via Script Mediator Engines (GraalJS and NashornJS)
CVE-2025-11093
Patch
CWE-94
High · CVSS 8.4
EPSS 0.4% (35th pct)2025-11-05
Information Disclosure in Multiple WSO2 Products Due to Improper Handling in Enrich Mediator
CVE-2024-4598
Patch
CWE-1259
Medium · CVSS 6.5
EPSS 0.3% (22th pct)2025-09-23
High vulnerability · 2023-12-15
CVE-2023-6836
Patch
CWE-611
High · CVSS 7.5
EPSS 0.5% (39th pct)2023-12-15
Medium vulnerability · 2022-04-21
CVE-2022-29548
Public exploit
Medium · CVSS 6.1
EPSS 41.1% (99th pct)2022-04-21
Medium vulnerability · 2021-04-05
CVE-2020-17453
Public exploit
Medium · CVSS 6.1
EPSS 26.1% (98th pct)2021-04-05

Common weakness types

The CWE weakness categories most often found in WSO2 micro integrator CVEs. Follow any weakness for its full explanation.

Disclosure activity by year

How many WSO2 micro integrator CVEs were published each year.

2021

1

2022

1

2023

1

2025

2

Other WSO2 products

Browse vulnerabilities for other products by WSO2.

api manager83 CVEs identity server70 CVEs product-apim58 CVEs WSO2 API Manager51 CVEs WSO2 Identity Server48 CVEs identity server as key manager44 CVEs enterprise integrator32 CVEs WSO2 Identity Server as Key Manager30 CVEs

All WSO2 vulnerabilities

Frequently asked questions

Common questions about WSO2 micro integrator vulnerabilities.

How many CVEs does WSO2 micro integrator have?: WSO2 micro integrator has 5 published CVE records since 2021.
How many WSO2 micro integrator CVEs are in CISA KEV?: None of WSO2 micro integrator's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.
Are there public exploits for WSO2 micro integrator vulnerabilities?: Yes — 2 of WSO2 micro integrator's CVEs have a known public exploit.
Which versions of WSO2 micro integrator are affected?: 15 distinct WSO2 micro integrator versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version.
What are the most common weakness types in WSO2 micro integrator CVEs?: WSO2 micro integrator's CVEs most often map to these CWE weakness types: CWE-1259 (Improper Restriction of Security Token Assignment), CWE-611 (Improper Restriction of XML External Entity Reference), CWE-94 (Improper Control of Generation of Code ('Code Injection')).
What is the average severity of WSO2 micro integrator CVEs?: The average CVSS base score across WSO2 micro integrator's scored CVEs is 6.9.

References

Vulnerability data is sourced from the CVE Program; severity, KEV, and exploit signals are aggregated by RadicalNotion.AI.

Track WSO2 micro integrator vulnerabilities

Monitor new WSO2 micro integrator vulnerabilities as they are disclosed, with AI-written analysis and remediation guidance.

Start free See pricing