WSO2 WSO2 Enterprise Service Bus

• CVE-2025-9955 Medium 5.7 Improper Access Control in WSO2 Enterprise Integrator Product via SOAP Admin Services for Logs and User-Store Configuration 0.2%
• CVE-2024-7074 Medium 6.8 Authenticated Arbitrary File Upload in Multiple WSO2 Products via SOAP Admin Service Leading to Remote Code Execution 17.7%
• CVE-2025-2905 Critical 9.1 An XML External Entity (XXE) vulnerability in Multiple WSO2 Products 1.3%