Name: Vietnam CyStack Joint Stock Company
Address: Tan Hong Ha Complex, 317 Truong Chinh Street, Hanoi, Vietnam, 100000, VN
Telephone: (+84) 247 109 9656
Price range: Negotiable

Products & ServicesProducts & Services
SolutionsSolutions
PricingPricing
CompanyCompany
ResourcesResources

VulnScan

enterprise_integrator Security Vulnerabilities | CyStack CVE Database

CVE	Exploitation status	Fix	Published	Severity
`CVE-2025-13394`Cross-Site Request Forgery via Ajax Processor Endpoints in Multiple WSO2 Products Enables Unauthorized Actions	Exploitation statusNot known exploited	FixYes	Published08/06/2026	SeverityMedium
`CVE-2025-6670`Cross-Site Request Forgery (CSRF) in Multiple WSO2 Products via HTTP GET in Admin Services	Exploitation statusNot known exploited	FixYes	Published11/18/2025	SeverityHigh
`CVE-2025-10853`Reflected Cross-Site Scripting (XSS) in Management Console of Multiple WSO2 Products Due to Improper Output Encoding	Exploitation statusNot known exploited	FixYes	Published11/05/2025	SeverityMedium
`CVE-2025-11093`Arbitrary Code Execution with higher privileged users in Multiple WSO2 Products via Script Mediator Engines (GraalJS and NashornJS)	Exploitation statusNot known exploited	FixYes	Published11/05/2025	SeverityHigh
`CVE-2025-10907`Authenticated Arbitrary File Upload in Multiple WSO2 Products via SOAP Admin Services Leading to Remote Code Execution	Exploitation statusNot known exploited	FixYes	Published11/05/2025	SeverityHigh
`CVE-2025-10713`XML External Entity (XXE) Vulnerability in Multiple WSO2 Products Due to Improper XML Parser Configuration	Exploitation statusNot known exploited	FixYes	Published11/05/2025	SeverityMedium
`CVE-2025-3125`Authenticated Arbitrary File Upload in Multiple WSO2 Products via CarbonAppUploader Admin Service Leading to Remote Code Execution	Exploitation statusNot known exploited	FixYes	Published11/05/2025	SeverityMedium
`CVE-2025-5605`Authentication Bypass via URI Manipulation in Multiple WSO2 Products' Management Console Leading to Partial Information Disclosure	Exploitation statusNot known exploited	FixYes	Published10/24/2025	SeverityMedium
`CVE-2025-5350`SSRF and Reflected XSS Vulnerability in Deprecated Try-It Feature of Multiple WSO2 Products	Exploitation statusNot known exploited	FixYes	Published10/24/2025	SeverityMedium
`CVE-2025-9804`Improper Access Control in Multiple WSO2 Products via Internal SOAP Admin Services and System REST APIs	Exploitation statusNot known exploited	FixYes	Published10/16/2025	SeverityCritical
`CVE-2025-9955`Improper Access Control in WSO2 Enterprise Integrator Product via SOAP Admin Services for Logs and User-Store Configuration	Exploitation statusNot known exploited	FixYes	Published10/16/2025	SeverityMedium
`CVE-2025-1862`Authenticated Arbitrary File Upload in Multiple WSO2 Products via BPEL Uploader SOAP Service Leading to Remote Code Execution	Exploitation statusNot known exploited	FixYes	Published09/26/2025	SeverityMedium
`CVE-2024-3511`Incorrect Authorization in Multiple WSO2 Products Allows Unauthorized Access to Registry Versioned Files	Exploitation statusNot known exploited	FixYes	Published06/23/2025	SeverityMedium
`CVE-2024-8008`Reflected Cross-Site Scripting (XSS) in Multiple WSO2 Products via JDBC User Store Connection Validation	Exploitation statusNot known exploited	FixYes	Published06/02/2025	SeverityMedium
`CVE-2024-3509`Stored Cross-Site Scripting (XSS) in Management Console of Multiple WSO2 Products via Rich Text Editor	Exploitation statusNot known exploited	FixYes	Published06/02/2025	SeverityMedium
`CVE-2024-0392`Cross-Site Request Forgery (CSRF) in WSO2 Enterprise Integrator 6.6.0 Management Console Due to Missing CSRF Token Validation	Exploitation statusNot known exploited	FixYes	Published02/27/2025	SeverityMedium
`CVE-2023-6911`CVE-2023-6911	Exploitation statusNot confirmed	FixYes	Published12/18/2023	SeverityMedium
`CVE-2023-6836`CVE-2023-6836	Exploitation statusNot confirmed	FixYes	Published12/15/2023	SeverityMedium
`CVE-2022-39810`CVE-2022-39810	Exploitation statusNot confirmed	FixNot confirmed	Published09/09/2022	SeverityUnknown
`CVE-2022-39809`CVE-2022-39809	Exploitation statusNot confirmed	FixNot confirmed	Published09/09/2022	SeverityUnknown
`CVE-2022-29548`CVE-2022-29548	Exploitation statusNot confirmed	FixNot confirmed	Published04/21/2022	SeverityMedium
`CVE-2022-29464`CVE-2022-29464	Exploitation statusKEV	FixNot confirmed	Published04/18/2022	SeverityCritical
`CVE-2020-17453`CVE-2020-17453	Exploitation statusNot confirmed	FixNot confirmed	Published04/05/2021	SeverityUnknown
`CVE-2020-25516`CVE-2020-25516	Exploitation statusNot confirmed	FixNot confirmed	Published10/29/2020	SeverityUnknown
`CVE-2020-24703`CVE-2020-24703	Exploitation statusNot confirmed	FixNot confirmed	Published08/27/2020	SeverityHigh
`CVE-2020-24704`CVE-2020-24704	Exploitation statusNot confirmed	FixNot confirmed	Published08/27/2020	SeverityMedium
`CVE-2020-24591`CVE-2020-24591	Exploitation statusNot confirmed	FixNot confirmed	Published08/21/2020	SeverityMedium
`CVE-2020-12719`CVE-2020-12719	Exploitation statusNot confirmed	FixNot confirmed	Published05/07/2020	SeverityHigh
`CVE-2020-11885`CVE-2020-11885	Exploitation statusNot confirmed	FixNot confirmed	Published04/17/2020	SeverityMedium
`CVE-2019-20442`CVE-2019-20442	Exploitation statusNot confirmed	FixNot confirmed	Published01/27/2020	SeverityLow
`CVE-2019-20443`CVE-2019-20443	Exploitation statusNot confirmed	FixNot confirmed	Published01/27/2020	SeverityLow
`CVE-2019-19587`CVE-2019-19587	Exploitation statusNot confirmed	FixNot confirmed	Published12/04/2019	SeverityMedium
`CVE-2017-14651`CVE-2017-14651	Exploitation statusNot confirmed	FixNot confirmed	Published09/21/2017	SeverityUnknown

33 / 33 Results

All vulnerabilities loaded

Security vulnerabilities in enterprise_integrator

enterprise_integrator

Verify to analyze this security profile

How many security vulnerabilities does enterprise_integrator have?

Does the latest enterprise_integrator version have known vulnerabilities?

Run an in-depth assessment with complete web risk management