Vulnerability index

Browse CVEs

258 matching
Filters 1 Clear all
Severity

Filters apply as you choose them.

Xwiki HIGH 8.8
CVE-2023-37462EPSS 91%

XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. Improper escaping in the document `SkinsCode…

Fix: 14.4.8 / 14.10.4+
Fix from $1,950 2023-07-14
Xwiki CRITICAL 9.6
CVE-2023-37277

XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. The REST API allows executing all actions vi…

Fix: 14.10.8 / 15.2+
Fix from $2,300 2023-07-10
Ckeditor Integration MEDIUM 5.4
CVE-2023-36477

XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. Any user with edit rights can edit all pages…

Fix: 1.64.9 / 14.10.6+
Fix from $1,600 2023-06-30
Xwiki HIGH 8.8
CVE-2023-36468

XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. When an XWiki installation is upgraded and t…

Fix: 14.10.7+
Fix from $1,950 2023-06-29
Xwiki HIGH 8.8
CVE-2023-36469EPSS 82%

XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. Any user who can edit their own user profile…

Fix: 14.10.6+
Fix from $1,950 2023-06-29
Xwiki HIGH 8.8
CVE-2023-36470

XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. By either creating a new or editing an exist…

Fix: 14.10.6+
Fix from $1,950 2023-06-29
Commons MEDIUM 5.4
CVE-2023-36471

Xwiki commons is the common modules used by other XWiki top level projects. The HTML sanitizer that is included in XWiki since version 14.6RC1 allowe…

Fix: 14.10.6+
Fix from $1,600 2023-06-29
Xwiki MEDIUM 6.1
CVE-2023-35155

XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. Users are able to forge an URL with a payloa…

Fix: 14.4.8 / 14.10.4+
Fix from $1,600 2023-06-23
Xwiki MEDIUM 6.1
CVE-2023-35156

XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. Users are able to forge an URL with a payloa…

Fix: 14.10.6+
Fix from $1,600 2023-06-23
Xwiki MEDIUM 6.1
CVE-2023-35158

XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. Users are able to forge an URL with a payloa…

Fix: 14.10.5+
Fix from $1,600 2023-06-23
Xwiki MEDIUM 6.1
CVE-2023-35159

XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. Users are able to forge an URL with a payloa…

Fix: 14.10.5+
Fix from $1,600 2023-06-23
Xwiki MEDIUM 6.1
CVE-2023-35160

XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. Users are able to forge an URL with a payloa…

Fix: 14.10.5+
Fix from $1,600 2023-06-23
Xwiki MEDIUM 6.1
CVE-2023-35161

XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. Users are able to forge an URL with a payloa…

Fix: 14.10.5+
Fix from $1,600 2023-06-23
Xwiki MEDIUM 6.1
CVE-2023-35162

XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. Users are able to forge an URL with a payloa…

Fix: 14.10.5+
Fix from $1,600 2023-06-23
Xwiki MEDIUM 5.4
CVE-2023-35153

XWiki Platform is a generic wiki platform. Starting in version 5.4.4 and prior to versions 14.4.8, 14.10.4, and 15.0, a stored cross-site scripting v…

Fix: 14.4.8 / 14.10.4+
Fix from $1,600 2023-06-23
Xwiki HIGH 8.8
CVE-2023-35152

XWiki Platform is a generic wiki platform. Starting in version 12.9-rc-1 and prior to versions 14.4.8, 14.10.6, and 15.1, any logged in user can add …

Fix: 14.4.8 / 14.10.6+
Fix from $1,950 2023-06-23
Xwiki HIGH 8.0
CVE-2023-35150EPSS 78%

XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. Starting in version 2.40m-2 and prior to ver…

Fix: 14.4.8 / 14.10.4+
Fix from $1,950 2023-06-23
Xwiki HIGH 7.5
CVE-2023-34467

XWiki Platform is a generic wiki platform. Starting in version 3.5-milestone-1 and prior to versions 14.4.8, 14.10.4, and 15.0-rc-1, the mail obfusca…

Fix: 14.4.8 / 14.10.4+
Fix from $1,950 2023-06-23
Xwiki HIGH 7.5
CVE-2023-35151

XWiki Platform is a generic wiki platform. Starting in version 7.3-milestone-1 and prior to versions 14.4.8, 14.10.6, and 15.1, ny user can call a RE…

Fix: 14.4.8 / 14.10.6+
Fix from $1,950 2023-06-23
Xwiki HIGH 8.1
CVE-2023-34465

XWiki Platform is a generic wiki platform. Starting in version 11.8-rc-1 and prior to versions 14.4.8, 14.10.6, and 15.2, `Mail.MailConfig` can be ed…

Fix: 14.4.8 / 14.10.6+
Fix from $1,950 2023-06-23
Xwiki MEDIUM 5.4
CVE-2023-34464

XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. Starting in version 2.2.1 until versions 14.…

Fix: 14.4.8 / 14.10.5+
Fix from $1,600 2023-06-23
Xwiki HIGH 8.8
CVE-2023-35166EPSS 63%

XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. It's possible to execute any wiki content wi…

Fix: 14.10.5+
Fix from $1,950 2023-06-20
Xwiki MEDIUM 6.1
CVE-2023-32068EPSS 55%

XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. In versions prior to 14.10.4 it's possible t…

Fix: 14.10.4+
Fix from $1,600 2023-05-15
Rendering MEDIUM 6.1
CVE-2023-32070

XWiki Platform is a generic wiki platform. Prior to version 14.6-rc-1, HTML rendering didn't check for dangerous attributes/attribute values. This al…

Fix: after 14.5
Fix from $1,600 2023-05-10
Xwiki CRITICAL 9.0
CVE-2023-32071EPSS 70%

XWiki Platform is a generic wiki platform. Starting in versions 2.2-milestone-1 and prior to versions 14.4.8, 14.10.4, and 15.0-rc-1, it's possible t…

Fix: 14.4.8 / 14.10.4+
Fix from $2,300 2023-05-09
Xwiki HIGH 8.8
CVE-2023-32069

XWiki Platform is a generic wiki platform. Starting in version 3.3-milestone-2 and prior to versions 14.10.4 and 15.0-rc-1, it's possible for a user …

Fix: 14.10.4+
Fix from $1,950 2023-05-09
Xwiki CRITICAL 9.6
CVE-2023-31126

`org.xwiki.commons:xwiki-commons-xml` is an XML library used by the open-source wiki platform XWiki. The HTML sanitizer, introduced in version 14.6-r…

Fix: 14.10.4+
Fix from $2,300 2023-05-09
Commons CRITICAL 9.0
CVE-2023-29528

XWiki Commons are technical libraries common to several other top level XWiki projects. The "restricted" mode of the HTML cleaner in XWiki, introduce…

Fix: 14.10+
Fix from $2,300 2023-04-20
Xwiki HIGH 8.8
CVE-2023-29524EPSS 76%

XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. It's possible to execute anything with the r…

Fix: 14.10.3+
Fix from $1,950 2023-04-19
Xwiki HIGH 8.8
CVE-2023-29525EPSS 78%

XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. Affected versions of xwiki are subject to co…

Fix: 14.4.8 / 14.10.3+
Fix from $1,950 2023-04-19