CVE-2024-6541Medium 6.8Information Disclosure and Integrity Violation via Improper Message Context Handling in Multiple WSO2 Products0.3%
CVE-2025-11093High 8.4Arbitrary Code Execution with higher privileged users in Multiple WSO2 Products via Script Mediator Engines (GraalJS and NashornJS)0.5%
CVE-2025-10907High 8.4Authenticated Arbitrary File Upload in Multiple WSO2 Products via SOAP Admin Services Leading to Remote Code Execution0.6%
CVE-2024-4598Medium 6.5Information Disclosure in Multiple WSO2 Products Due to Improper Handling in Enrich Mediator0.3%
CVE-2024-7074Medium 6.8Authenticated Arbitrary File Upload in Multiple WSO2 Products via SOAP Admin Service Leading to Remote Code Execution17.7%
CVE-2025-2905Critical 9.1An XML External Entity (XXE) vulnerability in Multiple WSO2 Products1.3%
CVE-2023-6836Medium 4.6Multiple WSO2 products have been identified as vulnerable due to an XML External Entity (XXE) attack abuses a widely available but rarely used feature of XML parsers to access sensitive information.0.5%