CVE-2019-19587: WSO2 Enterprise Integrator

Medium severity, CVSS 6.1. EPSS: 0.6% chance of exploitation in the next 30 days.

In WSO2 Enterprise Integrator 6.5.0, reflected XSS occurs when updating the message processor configuration from the source view in the Management Console.

Affected products

• WSO2 Enterprise Integrator: version 6.5.0 only

Published 2019-12-05. Last modified 2026-06-17.