What’s Vulnerable › Products

WSO2 Enterprise Service Bus vulnerabilities

2 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 2 published in the last 12 months.

Check whether your WSO2 Enterprise Service Bus version is affected

Latest WSO2 Enterprise Service Bus vulnerabilities

• CVE-2025-9955 — Improper Access Control in WSO2 Enterprise Integrator Product via SOAP Admin Services for Logs and User-Store Configuration (CVSS 5.7)
• CVE-2025-9804 — Improper Access Control in Multiple WSO2 Products via Internal SOAP Admin Services and System REST APIs (CVSS 6.5)