Vulnerability index

Browse CVEs

258 matching
Filters 1 Clear all
Severity

Filters apply as you choose them.

Xwiki HIGH 7.5
CVE-2023-50719EPSS 84%

XWiki Platform is a generic wiki platform. Starting in 7.2-milestone-2 and prior to versions 14.10.15, 15.5.2, and 15.7-rc-1, the Solr-based search i…

Fix: 14.10.5 / 15.5.2+
Fix from $1,950 2023-12-15
Xwiki MEDIUM 5.3
CVE-2023-50720EPSS 59%

XWiki Platform is a generic wiki platform. Prior to versions 14.10.15, 15.5.2, and 15.7-rc-1, the Solr-based search in XWiki discloses the email addr…

Fix: 14.10.5 / 15.5.2+
Fix from $1,600 2023-12-15
Change Request MEDIUM 6.5
CVE-2023-49280

XWiki Change Request is an XWiki application allowing to request changes on a wiki without publishing directly the changes. Change request allows to …

Fix: 1.10+
Fix from $1,600 2023-12-04
Xwiki HIGH 8.8
CVE-2023-48293

The XWiki Admin Tools Application provides tools to help the administration of XWiki. Prior to version 4.5.1, a cross-site request forgery vulnerabil…

Fix: 4.5.1+
Fix from $1,950 2023-11-20
Xwiki HIGH 8.8
CVE-2023-48240

XWiki Platform is a generic wiki platform. The rendered diff in XWiki embeds images to be able to compare the contents and not display a difference f…

Fix: 14.10.15 / 15.5.1+
Fix from $1,950 2023-11-20
Admin Tools HIGH 8.8
CVE-2023-48292EPSS 23%

The XWiki Admin Tools Application provides tools to help the administration of XWiki. Starting in version 4.4 and prior to version 4.5.1, a cross sit…

Fix: 4.5.1+
Fix from $1,950 2023-11-20
Xwiki HIGH 7.5
CVE-2023-48241EPSS 73%

XWiki Platform is a generic wiki platform. Starting in version 6.3-milestone-2 and prior to versions 14.10.15, 15.5.1, and 15.6RC1, the Solr-based se…

Fix: 14.10.5 / 15.5.1+
Fix from $1,950 2023-11-20
Xwiki HIGH 8.8
CVE-2023-46243

XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. In affected versions it's possible for a use…

Fix: 14.10.6 / 15.2+
Fix from $1,950 2023-11-07
Xwiki HIGH 8.8
CVE-2023-46242

XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. In affected versions it's possible to execut…

Fix: 14.10.7 / 15.2+
Fix from $1,950 2023-11-07
Xwiki HIGH 8.8
CVE-2023-46244

XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. In affected versions it's possible for a use…

Fix: 14.10.7 / 15.2+
Fix from $1,950 2023-11-07
Xwiki CRITICAL 9.8
CVE-2023-46731EPSS 89%

XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. XWiki doesn't properly escape the section UR…

Fix: 14.10.14 / 15.5.1+
Fix from $2,300 2023-11-06
Xwiki MEDIUM 6.1
CVE-2023-46732

XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. XWiki is vulnerable to reflected cross-site …

Fix: 14.10.14 / 15.5.1+
Fix from $1,600 2023-11-06
Xwiki MEDIUM 5.4
CVE-2023-45137

XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. `org.xwiki.platform:xwiki-platform-web` star…

Fix: 13.4 / 14.10.12+
Fix from $1,600 2023-10-25
Xwiki CRITICAL 9.6
CVE-2023-45136EPSS 5%

XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. When document names are validated according …

Fix: 14.10.12 / 15.5+
Fix from $2,300 2023-10-25
Xwiki CRITICAL 9.0
CVE-2023-45134

XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. `org.xwiki.platform:xwiki-platform-web` star…

Fix: 13.4 / 14.10.2+
Fix from $2,300 2023-10-25
Xwiki HIGH 8.0
CVE-2023-45135

XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. In `org.xwiki.platform:xwiki-platform-web` v…

Fix: 14.10.12 / 15.5+
Fix from $1,950 2023-10-25
Xwiki Rendering CRITICAL 9.6
CVE-2023-37908

XWiki Rendering is a generic Rendering system that converts textual input in a given syntax into another syntax. The cleaning of attributes during XH…

Fix: 14.10.4+
Fix from $2,300 2023-10-25
Xwiki HIGH 8.8
CVE-2023-37909

XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. Starting in version 5.1-rc-1 and prior to ve…

Fix: 14.10.8+
Fix from $1,950 2023-10-25
Xwiki Rendering HIGH 8.8
CVE-2023-37912

XWiki Rendering is a generic Rendering system that converts textual input in a given syntax into another syntax. Prior to version 14.10.6 of `org.xwi…

Fix: 14.10.6+
Fix from $1,950 2023-10-25
Xwiki HIGH 8.8
CVE-2023-37913

XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. Starting in version 3.5-milestone-1 and prio…

Fix: 14.10.8 / 15.3+
Fix from $1,950 2023-10-25
Xwiki HIGH 8.1
CVE-2023-37910

XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. Starting with the introduction of attachment…

Fix: 14.4.8 / 14.10.4+
Fix from $1,950 2023-10-25
Xwiki MEDIUM 6.5
CVE-2023-37911

XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. Starting in version 9.4-rc-1 and prior to ve…

Fix: after 14.10.8
Fix from $1,600 2023-10-25
Oauth Identity CRITICAL 9.6
CVE-2023-45144

com.xwiki.identity-oauth:identity-oauth-ui is a package to aid in building identity and service providers based on OAuth authorizations. When a user …

Fix: 1.6+
Fix from $2,300 2023-10-16
Change Request CRITICAL 9.6
CVE-2023-45138EPSS 71%

Change Request is an pplication allowing users to request changes on a wiki without publishing the changes directly. Starting in version 0.11 and pri…

Fix: 1.9.2+
Fix from $2,300 2023-10-12
Xwiki MEDIUM 6.3
CVE-2023-41046

XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. It is possible in XWiki to execute Velocity …

Fix: 14.10.10 / 15.4+
Fix from $1,600 2023-09-01
Xwiki HIGH 8.8
CVE-2023-40573

XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. XWiki supports scheduled jobs that contain G…

Fix: 14.10.9+
Fix from $1,950 2023-08-24
Xwiki HIGH 8.0
CVE-2023-40572

XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. The create action is vulnerable to a CSRF at…

Fix: 14.10.9+
Fix from $1,950 2023-08-24
Xwiki HIGH 8.8
CVE-2023-40177

XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. Any registered user can use the content fiel…

Fix: 14.10.5+
Fix from $1,950 2023-08-23
Xwiki MEDIUM 5.4
CVE-2023-40176EPSS 79%

XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. Any registered user can exploit a stored XSS…

Fix: 14.10.5+
Fix from $1,600 2023-08-23
Xwiki HIGH 8.8
CVE-2023-37914

XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. Any user who can view `Invitation.WebHome` c…

Fix: 14.4.8 / 14.10.6+
Fix from $1,950 2023-08-17