GCVE - cpe:2.3:a:wso2:micro_integrator:1.0.0:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:wso2:micro_integrator:1.0.0:*:*:*:*:*:*:*

part: a version: 1.0.0 update: *

Vendor	Wso2 (`a7ddf9c6-bb76-50d9-a2c9-02e60ad69877`)
Product	Micro Integrator (`02da43d0-d3ab-5c0b-be49-49b11904bae6`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from NVD CPE 2.0 feed

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2023-6836`	vulnerable	2026-06-08 06:21:56.006014	Details available MEDIUM (4.6) Multiple WSO2 products have been identified as vulnerable due to an XML External Entity (XXE) attack abuses a widely available but rarely used feature of XML parsers to access sensitive information. Published: 2023-12-15T09:26:01.323Z Updated: 2024-08-02T08:42:08.180Z Open on db.gcve.eu Reference links https://security.docs.wso2.com/en/latest/security-announcements/security-advisories/2021/WSO2-2020-0716/	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2022-29548`	vulnerable	2026-06-08 05:42:48.481469	Details available MEDIUM (4.6) A reflected XSS issue exists in the Management Console of several WSO2 products. This affects API Manager 2.2.0, 2.5.0, 2.6.0, 3.0.0, 3.1.0, 3.2.0, and 4.0.0; API Manager Analytics 2.2.0, 2.5.0, and 2.6.0; API Microgateway 2.2.0; Data Analytics Server 3.2.0; Enterprise Integrator 6.2.0, 6.3.0, 6.4.0, 6.5.0, and 6.6.0; IS as Key Manager 5.5.0, 5.6.0, 5.7.0, 5.9.0, and 5.10.0; Identity Server 5.5.0, 5.6.0, 5.7.0, 5.9.0, 5.10.0, and 5.11.0; Identity Server Analytics 5.5.0 and 5.6.0; and WSO2 Micro Integrator 1.0.0. Published: 2022-04-21T00:00:00.000Z Updated: 2024-08-03T06:26:06.033Z Open on db.gcve.eu Reference links https://docs.wso2.com/display/Security/Security+Advisory+WSO2-2021-1603 http://packetstormsecurity.com/files/167587/WSO2-Management-Console-Cross-Site-Scripting.html https://security.docs.wso2.com/en/latest/security-announcements/security-advisories/2022/WSO2-2021-1603/	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2020-17453`	vulnerable	2026-06-08 05:20:56.531339	Details available WSO2 Management Console through 5.10 allows XSS via the carbon/admin/login.jsp msgId parameter. Published: 2021-04-05T00:00:00.000Z Updated: 2024-08-04T13:53:17.471Z Open on db.gcve.eu Reference links https://twitter.com/JacksonHHax/status/1374681422678519813 https://github.com/JHHAX/CVE-2020-17453-PoC https://security.docs.wso2.com/en/latest/security-announcements/security-advisories/2021/WSO2-2020-1132/	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.