Micro Integrator vulnerabilities

2 known vulnerabilities in Micro Integrator from WSO2. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.2 High severity

  WSO2 Micro Integrator: Improper Control of Generation of Code

  CVE-2025-11093Nov 5, 2025WSO2

  An arbitrary code execution vulnerability exists in multiple WSO2 products due to insufficient restrictions in the GraalJS and NashornJS Script Mediator engines. Authenticated users with elevated privileges can execute arbitrary code within the integration run

• 7.5 High severity

  WSO2 API Manager: Improper Restriction of XML External Entity Reference

  CVE-2023-6836Dec 15, 2023WSO2

  Multiple WSO2 products have been identified as vulnerable due to an XML External Entity (XXE) attack abuses a widely available but rarely used feature of XML parsers to access sensitive information.