Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Release: WSO2 API Control Plane, WSO2 Enterprise Integrator and 5 more products 2.0.0, 2.0.0.394 and 7 more versions Clear all filters
TI-2025-10161 CVE-2025-11093 · GHSA-qfqc-4pqq-rfmh

Code injection in WSO2 Micro Integrator

Priority LOW 39

An arbitrary code execution vulnerability exists in multiple WSO2 products due to insufficient restrictions in the GraalJS and NashornJS Script Mediator engines.

CVSS 3.1HIGH 8.4 Adjacent network High privileges No interaction EPSS 0.00471 Published 2025-11-05 Fixed in 4.0.0.145, 4.1.0.147 +30 CWE-94
TI-2025-09987 CVE-2025-10907 · GHSA-fc89-q8rg-m49m

Authenticated Arbitrary File Upload in Multiple WSO2 Products via SOAP Admin Services Leading to Remote Code Execution

Priority LOW 39

An arbitrary file upload vulnerability exists in multiple WSO2 products due to insufficient validation of uploaded content and destination in SOAP admin services.

CVSS 3.1HIGH 8.4 Adjacent network High privileges No interaction EPSS 0.00596 Published 2025-11-05 Fixed in 3.1.0.345, 3.2.0.448 +66 CWE-434