wso2 enterprise integrator

Name: wso2 enterprise integrator
Brand: wso2

productUS

cpe:2.3:a:wso2:enterprise_integrator:*:*:*:*:*:*:*:*

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

by severity

2critical8high16medium0low

updated 2026-10-27

vulnerabilities (33)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2022-29464US	critical9.8OT critical	100.0% (100th)	KEV	no fix	2022-04-18	6.2.0 → 6.6.0
CVE-2022-29548US	medium6.1	41.1% (99th)	Exploit	no fix	2022-04-21	5 versions
CVE-2020-17453US	medium6.1	26.2% (98th)	Exploit	no fix	2021-04-05	≤ 6.6.0
CVE-2022-39810US	medium6.1	57.5% (99th)	—	no fix	2022-09-09	= 6.4.0
CVE-2017-14651US	medium4.8	3.84% (90th)	—	no fix	2017-09-21	= 6.1.1
CVE-2020-24703US	high8.8	1.05% (64th)	—	no fix	2020-08-27	≤ 6.6.0
CVE-2020-12719US	high7.2	1.03% (64th)	—	no fix	2020-05-08	≤ 6.4.0
CVE-2020-24591US	medium6.5	1.03% (64th)	—	no fix	2020-08-21	2 versions
CVE-2025-3125US	high7.2	0.91% (60th)	—	no fix	2025-11-05	= 6.6.0
CVE-2025-5605US	medium5.3	0.85% (58th)	—	no fix	2025-10-24	= 6.6.0
CVE-2019-20443US	medium4.8	0.80% (56th)	—	no fix	2020-01-28	= 6.5.0
CVE-2020-11885US	high7.2	0.78% (56th)	—	no fix	2020-04-17	≤ 6.6.0
CVE-2019-20442US	medium4.8	0.73% (54th)	—	no fix	2020-01-28	= 6.5.0
CVE-2020-24704US	medium6.1	0.72% (54th)	—	no fix	2020-08-27	≤ 6.6.0
CVE-2019-19587US	medium6.1	0.65% (51st)	—	no fix	2019-12-05	= 6.5.0
CVE-2025-5350US	medium4.8	0.62% (49th)	—	no fix	2025-10-24	= 6.6.0
CVE-2025-10907US	high7.2	0.60% (48th)	—	no fix	2025-11-05	= 6.6.0
CVE-2020-25516US	medium5.4	0.59% (48th)	—	no fix	2020-10-29	≤ 6.6.0
CVE-2025-9804US	medium6.5	0.56% (46th)	—	no fix	2025-10-16	2 versions
CVE-2022-39809US	medium6.1	0.55% (46th)	—	no fix	2022-09-09	= 6.4.0
CVE-2025-1862US	high7.2	0.54% (45th)	—	no fix	2025-09-26	= 6.6.0
CVE-2024-8008US	—	0.53% (45th)	—	no fix	2025-06-02	= 6.6.0
CVE-2023-6836US	high7.5	0.48% (41st)	—	no fix	2023-12-15	≤ 6.6.0
CVE-2025-11093US	high7.2	0.47% (41st)	—	6.6.0.224	2025-11-05	6.6.0 → 6.6.0.224
CVE-2025-10713US	critical9.1	0.46% (39th)	—	no fix	2025-11-05	= 6.6.0
CVE-2023-6911US	medium4.8	0.41% (35th)	—	no fix	2023-12-18	7 versions
CVE-2025-6670US	—	0.25% (16th)	—	no fix	2025-11-18	= 6.6.0
CVE-2024-3511US	—OT elevated	0.21% (11th)	—	no fix	2025-06-23	= 6.6.0
CVE-2025-9955US	—OT elevated	0.21% (11th)	—	no fix	2025-10-16	8 versions
CVE-2024-3509US	—	0.20% (10th)	—	no fix	2025-06-02	= 6.6.0
CVE-2025-10853US	medium6.1	0.19% (9th)	—	no fix	2025-11-05	= 6.6.0
CVE-2024-0392US	—	0.15% (4th)	—	no fix	2025-02-27	= 6.6.0
CVE-2025-13394US	—	0.14% (3rd)	—	6.6.0.227	2026-08-06	6.6.0 → 6.6.0.227

weaknesses (8)

The flaw types (CWEs) most of these CVEs share.

CWE-79Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')15 CVEs
CWE-611Improper Restriction of XML External Entity Reference5 CVEs
CWE-352Cross-Site Request Forgery (CSRF)4 CVEs
CWE-434Unrestricted Upload of File with Dangerous Type4 CVEs
CWE-863Incorrect Authorization2 CVEs
CWE-918Server-Side Request Forgery (SSRF)2 CVEs
CWE-22Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')1 CVEs
CWE-284Improper Access Control1 CVEs

sources (1)

Which sources assert this record, and when.

USNVD / CVE33 CVEs

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.

Free scan