Skip to content
OpenAdvisories

Product · WSO2

WSO2 Micro Integrator

7 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

4 results · Clear filters · Feed

  • Medium 6.8
    CVE-2024-6541

    Information Disclosure and Integrity Violation via Improper Message Context Handling in Multiple WSO2 Products

    The Class Mediator fails to correctly validate or sanitize `messageContext` properties when they are used to populate dynamic values. This allows authenticated users to potentially access or modify data across different system invocations that should be isola…

    WSO2 WSO2 API Manager WSO2 Enterprise Integrator WSO2 Micro Integrator
  • Medium 6.5
    CVE-2024-4598

    Information Disclosure in Multiple WSO2 Products Due to Improper Handling in Enrich Mediator

    An information disclosure vulnerability exists in multiple WSO2 products due to improper implementation of the enrich mediator. Authenticated users may be able to view unintended business data from other mediation contexts because the internal state is not pr…

    WSO2 WSO2 API Manager WSO2 Micro Integrator
  • Medium 6.8
    CVE-2024-7074 EPSS 18%

    Authenticated Arbitrary File Upload in Multiple WSO2 Products via SOAP Admin Service Leading to Remote Code Execution

    An arbitrary file upload vulnerability exists in multiple WSO2 products due to improper validation of user input in SOAP admin services. A malicious actor with administrative privileges can upload an arbitrary file to a user-controlled location on the server.…

    WSO2 WSO2 API Manager WSO2 Open Banking AM WSO2 Enterprise Integrator
  • Medium 4.6
    CVE-2023-6836

    WSO2 products vulnerable to XML External Entity attack

    Multiple WSO2 products have been identified as vulnerable due to an XML External Entity (XXE) attack abuses a widely available but rarely used feature of XML parsers to access sensitive information.

    WSO2 WSO2 API Manager WSO2 Identity Server WSO2 Enterprise Integrator Maven