Wso2 Micro Integrator
Don't miss out!
Thousands of developers use stack.watch to stay informed.Get an email whenever new security vulnerabilities are reported in Wso2 Micro Integrator.
By the Year
In 2026 there have been 0 vulnerabilities in Wso2 Micro Integrator. Last year, in 2025 Micro Integrator had 2 security vulnerabilities published. Right now, Micro Integrator is on track to have less security vulnerabilities in 2026 than it did last year.
| Year | Vulnerabilities | Average Score |
|---|---|---|
| 2026 | 0 | 0.00 |
| 2025 | 2 | 7.80 |
| 2024 | 0 | 0.00 |
| 2023 | 1 | 7.50 |
| 2022 | 1 | 6.10 |
| 2021 | 1 | 0.00 |
It may take a day or so for new Micro Integrator vulnerabilities to show up in the stats or in the list of recent security vulnerabilities. Additionally vulnerabilities may be tagged under a different product or component name.
Recent Wso2 Micro Integrator Security Vulnerabilities
WSO2 Integrator Mediator State Leakage via Improper Isolation
CVE-2024-4598
6.5 - Medium
- September 23, 2025
An information disclosure vulnerability exists in multiple WSO2 products due to improper implementation of the enrich mediator. Authenticated users may be able to view unintended business data from other mediation contexts because the internal state is not properly isolated or cleared between executions. This vulnerability does not impact user credentials or access tokens but may lead to leakage of sensitive business information handled during message flows.
Improper Restriction of Security Token Assignment
XXE in WSO2 API Manager Gateway: Unauth Remote File Read & DoS
CVE-2025-2905
9.1 - Critical
- May 05, 2025
Due to the improper configuration of XML parser, user-supplied XML is parsed without applying sufficient restrictions, enabling XML External Entity (XXE) resolution in multiple WSO2 Products. A successful XXE attack could allow a remote, unauthenticated attacker to: * Read sensitive files from the servers filesystem. * Perform denial-of-service (DoS) attacks, which can render the affected service unavailable.
XXE
XXE Vulnerability in WSO2 Products Enables Sensitive Data Disclosure
CVE-2023-6836
7.5 - High
- December 15, 2023
Multiple WSO2 products have been identified as vulnerable due to an XML External Entity (XXE) attack abuses a widely available but rarely used feature of XML parsers to access sensitive information.
XXE
A reflected XSS issue exists in the Management Console of several WSO2 products
CVE-2022-29548
6.1 - Medium
- April 21, 2022
A reflected XSS issue exists in the Management Console of several WSO2 products. This affects API Manager 2.2.0, 2.5.0, 2.6.0, 3.0.0, 3.1.0, 3.2.0, and 4.0.0; API Manager Analytics 2.2.0, 2.5.0, and 2.6.0; API Microgateway 2.2.0; Data Analytics Server 3.2.0; Enterprise Integrator 6.2.0, 6.3.0, 6.4.0, 6.5.0, and 6.6.0; IS as Key Manager 5.5.0, 5.6.0, 5.7.0, 5.9.0, and 5.10.0; Identity Server 5.5.0, 5.6.0, 5.7.0, 5.9.0, 5.10.0, and 5.11.0; Identity Server Analytics 5.5.0 and 5.6.0; and WSO2 Micro Integrator 1.0.0.
XSS
WSO2 Management Console through 5.10
CVE-2020-17453
- April 05, 2021
WSO2 Management Console through 5.10 allows XSS via the carbon/admin/login.jsp msgId parameter.
Stay on top of Security Vulnerabilities
Want an email whenever new vulnerabilities are published for Wso2 Micro Integrator or by Wso2? Click the Watch button to subscribe.
