Vulnerability index

Browse CVEs

258 matching
Filters 1 Clear all
Severity

Filters apply as you choose them.

Xwiki HIGH 8.8
CVE-2025-49586

XWiki is an open-source wiki software platform. Any XWiki user with edit right on at least one App Within Minutes application (the default for all us…

Fix: 16.4.7 / 16.10.3+
Fix from $1,950 2025-06-13
Xwiki HIGH 8.0
CVE-2025-49585

XWiki is a generic wiki platform. In versions before 15.10.16, 16.0.0-rc-1 through 16.4.6, and 16.5.0-rc-1 through 16.10.1, when an attacker without …

Fix: 15.10.16 / 16.4.7+
Fix from $1,950 2025-06-13
Xwiki HIGH 8.0
CVE-2025-49587

XWiki is an open-source wiki software platform. When a user without script right creates a document with an XWiki.Notifications.Code.NotificationDisp…

Fix: 15.10.16 / 16.4.7+
Fix from $1,950 2025-06-13
Xwiki HIGH 7.5
CVE-2025-49584

XWiki is a generic wiki platform. In XWiki Platform versions 10.9 through 16.4.6, 16.5.0-rc-1 through 16.10.2, and 17.0.0-rc-1, the title of every si…

Fix: 16.4.7 / 16.10.3+
Fix from $1,950 2025-06-13
Xwiki HIGH 8.0
CVE-2025-49582

XWiki is a generic wiki platform. When editing content that contains "dangerous" macros like malicious script macros that were authored by a user wit…

Fix: 16.4.7 / 16.10.3+
Fix from $1,950 2025-06-13
Xwiki HIGH 8.8
CVE-2025-49581

XWiki is a generic wiki platform. Any user with edit right on a page (could be the user's profile) can execute code (Groovy, Python, Velocity) with p…

Fix: 12.0 / 12.7+
Fix from $1,950 2025-06-13
Xwiki HIGH 8.0
CVE-2025-49580

XWiki is a generic wiki platform. From 8.2 and 7.4.5 until 17.1.0-rc-1, 16.10.4, and 16.4.7, pages can gain script or programming rights when they co…

Fix: 16.4.7 / 16.10.4+
Fix from $1,950 2025-06-13
Xwiki CRITICAL 9.8
CVE-2024-56158

XWiki is a generic wiki platform. It's possible to execute any SQL query in Oracle by using the function like DBMS_XMLGEN or DBMS_XMLQUERY. The XWiki…

Fix: 15.10.16 / 16.4.7+
Fix from $2,300 2025-06-12
Xwiki HIGH 8.8
CVE-2025-48063

XWiki is a generic wiki platform. In XWiki 16.10.0, required rights were introduced as a way to limit which rights a document can have. Part of the s…

Fix: 16.10.4+
Fix from $1,950 2025-05-21
Xwiki CRITICAL 9.8
CVE-2025-46557

XWiki is a generic wiki platform. In versions starting from 15.3-rc-1 to before 15.10.14, from 16.0.0-rc-1 to before 16.4.6, and from 16.5.0-rc-1 to …

Fix: 15.10.14 / 16.4.6+
Fix from $2,300 2025-04-30
Xwiki CRITICAL 9.0
CVE-2025-46558

XWiki Contrib's Syntax Markdown allows importing Markdown content into wiki pages and creating wiki content in Markdown. In versions starting from 8.…

Fix: 8.9+
Fix from $2,300 2025-04-30
Xwiki MEDIUM 5.3
CVE-2025-46554

XWiki is a generic wiki platform. In versions starting from 1.8.1 to before 14.10.22, from 15.0-rc-1 to before 15.10.12, from 16.0.0-rc-1 to before 1…

Fix: 14.10.22 / 15.10.12+
Fix from $1,600 2025-04-30
Xwiki CRITICAL 9.0
CVE-2025-32973

XWiki is a generic wiki platform. In versions starting from 15.9-rc-1 to before 15.10.12, from 16.0.0-rc-1 to before 16.4.3, and from 16.5.0-rc-1 to …

Fix: 15.10.12 / 16.4.3+
Fix from $2,300 2025-04-30
Xwiki CRITICAL 9.0
CVE-2025-32974

XWiki is a generic wiki platform. In versions starting from 15.9-rc-1 to before 15.10.8 and from 16.0.0-rc-1 to before 16.2.0, the required rights an…

Fix: 15.10.8 / 16.2.0+
Fix from $2,300 2025-04-30
Xwiki MEDIUM 6.1
CVE-2025-32970

XWiki is a generic wiki platform. In versions starting from 13.5-rc-1 to before 15.10.13, from 16.0.0-rc-1 to before 16.4.4, and from 16.5.0-rc-1 to …

Fix: 15.10.13 / 16.4.4+
Fix from $1,600 2025-04-30
Xwiki MEDIUM 5.3
CVE-2025-32972

XWiki is a generic wiki platform. In versions starting from 6.1-milestone-1 to before 15.10.12, from 16.0.0-rc-1 to before 16.4.3, and from 16.5.0-rc…

Fix: 15.10.12 / 16.4.3+
Fix from $1,600 2025-04-30
Xwiki CRITICAL 9.8
CVE-2025-32969EPSS 78%

XWiki is a generic wiki platform. In versions starting from 1.8 and prior to 15.10.16, 16.4.6, and 16.10.1, it is possible for a remote unauthenticat…

Fix: 15.10.16 / 16.4.6+
Fix from $2,300 2025-04-23
Xwiki HIGH 8.8
CVE-2025-32968

XWiki is a generic wiki platform. In versions starting from 1.6-milestone-1 to before 15.10.16, 16.4.6, and 16.10.1, it is possible for a user with S…

Fix: 15.10.16 / 16.4.6+
Fix from $1,950 2025-04-23
Xwiki CRITICAL 9.8
CVE-2025-29926

XWiki Platform is a generic wiki platform. Prior to 15.10.15, 16.4.6, and 16.10.0, any user can exploit the WikiManager REST API to create a new wiki…

Fix: 15.10.15 / 16.4.6+
Fix from $2,300 2025-03-19
Xwiki HIGH 7.5
CVE-2025-29924

XWiki Platform is a generic wiki platform. Prior to 15.10.14, 16.4.6, and 16.10.0-rc-1, it's possible for an user to get access to private informatio…

Fix: 15.10.14 / 16.4.6+
Fix from $1,950 2025-03-19
Xwiki MEDIUM 5.3
CVE-2025-29925

XWiki Platform is a generic wiki platform. Prior to 15.10.14, 16.4.6, and 16.10.0-rc-1, protected pages are listed when requesting the REST endpoints…

Fix: 15.10.14 / 16.4.6+
Fix from $1,600 2025-03-19
Confluence Migrator HIGH 7.5
CVE-2025-27604

XWiki Confluence Migrator Pro helps admins to import confluence packages into their XWiki instance. The homepage of the application is public which e…

Fix: 1.11.7+
Fix from $1,950 2025-03-07
Xwiki CRITICAL 9.8
CVE-2025-24893 KEVEPSS 100%

XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. Any guest can perform arbitrary remote code …

Fix: 15.10.11 / 16.4.1+
Fix from $2,300 2025-02-20
Xwiki HIGH 8.0
CVE-2025-23025

XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. NOTE: The Realtime WYSIWYG Editor extension …

Fix: 15.10.12 / 16.4.1+
Fix from $1,950 2025-01-14
Xwiki HIGH 8.8
CVE-2024-55877

XWiki Platform is a generic wiki platform. Starting in version 9.7-rc-1 and prior to versions 15.10.11, 16.4.1, and 16.5.0, any user with an account …

Fix: 15.10.11 / 16.4.1+
Fix from $1,950 2024-12-12
Xwiki HIGH 8.8
CVE-2024-55879

XWiki Platform is a generic wiki platform. Starting in version 2.3 and prior to versions 15.10.9, 16.3.0, any user with script rights can perform arb…

Fix: 15.10.9 / 16.3.0+
Fix from $1,950 2024-12-12
Xwiki MEDIUM 5.4
CVE-2024-55876

XWiki Platform is a generic wiki platform. Starting in version 1.2-milestone-2 and prior to versions 15.10.9 and 16.3.0, any user with an account on …

Fix: 15.10.9 / 16.3.0+
Fix from $1,600 2024-12-12
Xwiki CRITICAL 9.8
CVE-2024-55663

XWiki Platform is a generic wiki platform. Starting in version 6.3-milestone-2 and prior to versions 13.10.5 and 14.3-rc-1, in `getdocument.vm`; the …

Fix: 13.10.5 / 14.3+
Fix from $2,300 2024-12-12
Xwiki HIGH 8.8
CVE-2024-55662

XWiki Platform is a generic wiki platform. Starting in version 3.3-milestone-1 and prior to versions 15.10.9 and 16.3.0, on instances where `Extensio…

Fix: 15.10.9 / 16.3.0+
Fix from $1,950 2024-12-12
Pdf Viewer Macro CRITICAL 9.0
CVE-2024-52300

macro-pdfviewer is a PDF Viewer Macro for XWiki using Mozilla pdf.js. The width parameter of the PDF viewer macro isn't properly escaped, allowing XS…

Fix: 2.5.6+
Fix from $2,300 2024-11-13