Known Vulnerabilities for Enterprise Integrator by Wso2
Listed below are 10 of the newest known vulnerabilities associated with "Enterprise Integrator" by "Wso2".
These CVEs are retrieved based on exact matches on listed software, hardware, and vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed software information are still displayed.
Data on known vulnerable versions is also displayed based on information from known CPEs
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2022-39810 json | An issue was discovered in WSO2 Enterprise Integrator 6.4.0. A Reflected Cross-Site Scripting (XSS) vulnerability has been id... | 6.1 - MEDIUM | 2022-09-09 | 2022-09-14 |
| CVE-2022-39809 json | An issue was discovered in WSO2 Enterprise Integrator 6.4.0. A Reflected Cross-Site Scripting (XSS) vulnerability has been id... | 6.1 - MEDIUM | 2022-09-09 | 2022-09-14 |
| CVE-2022-29548 json | A reflected XSS issue exists in the Management Console of several WSO2 products. This affects API Manager 2.2.0, 2.5.0, 2.6.0... | 6.1 - MEDIUM | 2022-04-21 | 2023-11-03 |
| CVE-2022-29464 json | Certain WSO2 products allow unrestricted file upload with resultant remote code execution. The attacker must use a /fileuploa... | 9.8 - CRITICAL | 2022-04-18 | 2023-10-23 |
| CVE-2020-25516 json | WSO2 Enterprise Integrator 6.6.0 or earlier contains a stored cross-site scripting (XSS) vulnerability in BPMN explorer tasks... | 5.4 - MEDIUM | 2020-10-29 | 2020-11-03 |
| CVE-2020-24704 json | An issue was discovered in certain WSO2 products. The Try It tool allows Reflected XSS. This affects API Manager 2.2.0, API M... | 6.1 - MEDIUM | 2020-08-27 | 2024-01-11 |
| CVE-2020-24703 json | An issue was discovered in certain WSO2 products. A valid Carbon Management Console session cookie may be sent to an attacker... | 8.8 - HIGH | 2020-08-27 | 2024-01-11 |
| CVE-2020-24591 json | The Management Console in certain WSO2 products allows XXE attacks during EventReceiver updates. This affects API Manager thr... | 6.5 - MEDIUM | 2020-08-21 | 2022-04-19 |
| CVE-2020-17453 json | WSO2 Management Console through 5.10 allows XSS via the carbon/admin/login.jsp msgId parameter. | 6.1 - MEDIUM | 2021-04-05 | 2024-01-11 |
| CVE-2020-12719 json | XXE during an EventPublisher update can occur in Management Console in WSO2 API Manager 3.0.0 and earlier, API Manager Analyt... | 7.2 - HIGH | 2020-05-08 | 2020-05-14 |