How many WSO2 WSO2 Micro Integrator CVEs are in CISA KEV?

None of WSO2 WSO2 Micro Integrator's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.

Which versions of WSO2 WSO2 Micro Integrator are affected?

32 distinct WSO2 WSO2 Micro Integrator versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version.

What are the most common weakness types in WSO2 WSO2 Micro Integrator CVEs?

WSO2 WSO2 Micro Integrator's CVEs most often map to these CWE weakness types: CWE-434 (Unrestricted Upload of File with Dangerous Type), CWE-611 (Improper Restriction of XML External Entity Reference), CWE-1259 (Improper Restriction of Security Token Assignment), CWE-94 (Improper Control of Generation of Code ('Code Injection')).

How many critical WSO2 WSO2 Micro Integrator vulnerabilities are there?

WSO2 WSO2 Micro Integrator has 1 critical and 3 high-severity CVEs.

What is the average severity of WSO2 WSO2 Micro Integrator CVEs?

The average CVSS base score across WSO2 WSO2 Micro Integrator's scored CVEs is 7.8.

RadicalNotion.AI

Log in Start free

Log in

Log in Start free

WSO2

6 CVEs

WSO2 Micro Integrator Vulnerabilities

Name: WSO2 Micro Integrator vulnerability dataset (CVEs)
Creator: RadicalNotion.AI
License: https://creativecommons.org/licenses/by-nc/4.0/

CVE security advisories and vulnerability history for WSO2 Micro Integrator by WSO2.

6

Total CVEs

Published

0

In CISA KEV

Exploited in the wild

0

Public exploits

PoC or exploit code

7.8

Avg CVSS

2023–2025

Last updated November 5, 2025

Overview

WSO2 Micro Integrator has 6 published CVE records since 2023, of which 0 are in CISA's Known Exploited Vulnerabilities catalog and 0 have a known public exploit. The average CVSS base score across scored CVEs is 7.8.

This page aggregates every publicly disclosed vulnerability (CVE) affecting WSO2 Micro Integrator, with a severity breakdown, the affected and patched versions, the most common weakness types, and the full CVE list.

Severity and exploitation

How the CVSS severity of WSO2 Micro Integrator's CVEs breaks down, plus how many are exploited in the wild or have public exploit code.

Critical1

High3

Medium2

Low0

In CISA’s Known Exploited Vulnerabilities catalog

0

None of WSO2 Micro Integrator's CVEs are currently listed in CISA's KEV catalog.

Public exploits

0

No WSO2 Micro Integrator CVEs currently have a tracked public exploit.

Affected versions and CVEs

Browse every WSO2 Micro Integrator version named in a CVE, then pick one to see only the CVEs that affect it.

Specific versions

1.0.01 CVE
1.1.01 CVE

Version ranges

< 1.0.02 CVEs
< 4.0.02 CVEs
4.0.0 <= v < 4.0.0.1452 CVEs
4.1.0 <= v < 4.1.0.1472 CVEs
4.2.0 <= v < 4.2.0.1412 CVEs
< 1.0.0.01 CVE
< 1.2.01 CVE
1.0.0 <= v < 1.0.0.491 CVE
1.0.0.0 <= v < 1.0.0.11 CVE
1.2.0 <= v < 1.2.0.1571 CVE
1.2.0 <= v < 1.2.0.1621 CVE
4.0.0 <= v < 4.0.0.1321 CVE
4.1.0 <= v < 4.1.0.1151 CVE
4.1.0 <= v < 4.1.0.951 CVE
4.2.0 <= v < 4.2.0.1121 CVE
4.3.0 <= v < 4.3.0.421 CVE
4.4.0 <= v < 4.4.0.271 CVE

Fixed in

4.0.0.1452 CVEs
4.1.0.1472 CVEs
4.2.0.1412 CVEs
1.0.0.11 CVE
1.0.0.491 CVE
1.2.0.1571 CVE
1.2.0.1621 CVE
4.0.0.1321 CVE
4.1.0.1151 CVE
4.1.0.951 CVE
4.2.0.1121 CVE
4.3.0.421 CVE
4.4.0.271 CVE

Find a version

6 CVEs

Sort

Arbitrary Code Execution with higher privileged users in Multiple WSO2 Products via Script Mediator Engines (GraalJS and NashornJS)
CVE-2025-11093
Patch
CWE-94
High · CVSS 8.4
EPSS 0.4% (35th pct)2025-11-05
Authenticated Arbitrary File Upload in Multiple WSO2 Products via SOAP Admin Services Leading to Remote Code Execution
CVE-2025-10907
Patch
CWE-434
High · CVSS 8.4
EPSS 0.5% (42th pct)2025-11-05
Information Disclosure in Multiple WSO2 Products Due to Improper Handling in Enrich Mediator
CVE-2024-4598
Patch
CWE-1259
Medium · CVSS 6.5
EPSS 0.3% (22th pct)2025-09-23
Authenticated Arbitrary File Upload in Multiple WSO2 Products via SOAP Admin Service Leading to Remote Code Execution
CVE-2024-7074
Patch
CWE-434
Medium · CVSS 6.8
EPSS 10.3% (95th pct)2025-06-02
An XML External Entity (XXE) vulnerability in Multiple WSO2 Products
CVE-2025-2905
Patch
CWE-611
Critical · CVSS 9.1
EPSS 1.2% (66th pct)2025-05-05
High vulnerability · 2023-12-15
CVE-2023-6836
Patch
CWE-611
High · CVSS 7.5
EPSS 0.5% (39th pct)2023-12-15

Common weakness types

The CWE weakness categories most often found in WSO2 Micro Integrator CVEs. Follow any weakness for its full explanation.

Disclosure activity by year

How many WSO2 Micro Integrator CVEs were published each year.

2023

1

2025

5

Other WSO2 products

Browse vulnerabilities for other products by WSO2.

api manager83 CVEs identity server70 CVEs product-apim58 CVEs WSO2 API Manager51 CVEs WSO2 Identity Server48 CVEs identity server as key manager44 CVEs enterprise integrator32 CVEs WSO2 Identity Server as Key Manager30 CVEs

All WSO2 vulnerabilities

Frequently asked questions

Common questions about WSO2 Micro Integrator vulnerabilities.

How many CVEs does WSO2 WSO2 Micro Integrator have?: WSO2 WSO2 Micro Integrator has 6 published CVE records since 2023.
How many WSO2 WSO2 Micro Integrator CVEs are in CISA KEV?: None of WSO2 WSO2 Micro Integrator's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.
Are there public exploits for WSO2 WSO2 Micro Integrator vulnerabilities?: No WSO2 WSO2 Micro Integrator CVEs currently have a tracked public exploit in this dataset.
Which versions of WSO2 WSO2 Micro Integrator are affected?: 32 distinct WSO2 WSO2 Micro Integrator versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version.
What are the most common weakness types in WSO2 WSO2 Micro Integrator CVEs?: WSO2 WSO2 Micro Integrator's CVEs most often map to these CWE weakness types: CWE-434 (Unrestricted Upload of File with Dangerous Type), CWE-611 (Improper Restriction of XML External Entity Reference), CWE-1259 (Improper Restriction of Security Token Assignment), CWE-94 (Improper Control of Generation of Code ('Code Injection')).
How many critical WSO2 WSO2 Micro Integrator vulnerabilities are there?: WSO2 WSO2 Micro Integrator has 1 critical and 3 high-severity CVEs.
What is the average severity of WSO2 WSO2 Micro Integrator CVEs?: The average CVSS base score across WSO2 WSO2 Micro Integrator's scored CVEs is 7.8.

References

Vulnerability data is sourced from the CVE Program; severity, KEV, and exploit signals are aggregated by RadicalNotion.AI.

Track WSO2 Micro Integrator vulnerabilities

Monitor new WSO2 Micro Integrator vulnerabilities as they are disclosed, with AI-written analysis and remediation guidance.

Start free See pricing