Vulnerability index

Browse CVEs

258 matching
Filters 1 Clear all
Severity

Filters apply as you choose them.

Xwiki HIGH 8.8
CVE-2023-29526

XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. In affected versions it's possible to displa…

Fix: 13.10.11 / 14.4.8+
Fix from $1,950 2023-04-19
Xwiki HIGH 8.8
CVE-2023-29527

XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. In affected versions a user without script o…

Fix: 14.10.3+
Fix from $1,950 2023-04-19
Xwiki HIGH 8.8
CVE-2023-29510

XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. In XWiki, every user can add translations th…

Fix: 14.10.2+
Fix from $1,950 2023-04-19
Xwiki HIGH 8.8
CVE-2023-29512

XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. Any user with edit rights on a page (e.g., i…

Fix: 13.10.11 / 14.4.8+
Fix from $1,950 2023-04-19
Xwiki HIGH 8.8
CVE-2023-29514

XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. Any user with edit rights on any document (e…

Fix: 13.10.11 / 14.4.8+
Fix from $1,950 2023-04-19
Xwiki HIGH 8.8
CVE-2023-29516EPSS 66%

XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. Any user with view rights on `XWiki.Attachme…

Fix: 13.10.11 / 14.4.8+
Fix from $1,950 2023-04-19
Xwiki HIGH 8.8
CVE-2023-29518

XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. Any user with view rights can execute arbitr…

Fix: 13.10.11 / 14.4.8+
Fix from $1,950 2023-04-19
Xwiki HIGH 8.8
CVE-2023-29519

XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. A registered user can perform remote code ex…

Fix: 13.10.11 / 14.4.8+
Fix from $1,950 2023-04-19
Xwiki HIGH 8.8
CVE-2023-29521

XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. Any user with view rights can execute arbitr…

Fix: 13.10.11 / 14.4.8+
Fix from $1,950 2023-04-19
Xwiki HIGH 8.8
CVE-2023-29522

XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. Any user with view rights can execute arbitr…

Fix: 14.4.8 / 14.10.3+
Fix from $1,950 2023-04-19
Xwiki HIGH 8.8
CVE-2023-29523

XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. Any user who can edit their own user profile…

Fix: 13.10.11 / 14.4.8+
Fix from $1,950 2023-04-19
Xwiki HIGH 7.5
CVE-2023-29517

XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. The office document viewer macro was allowin…

Fix: 13.10.11 / 14.4.8+
Fix from $1,950 2023-04-19
Xwiki MEDIUM 6.5
CVE-2023-29520

XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. It's possible to break many translations com…

Fix: 13.10.11 / 14.4.8+
Fix from $1,600 2023-04-19
Xwiki MEDIUM 5.4
CVE-2023-29515

XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. Any user who can create a space can become a…

Fix: 13.10.11 / 14.4.8+
Fix from $1,600 2023-04-19
Xwiki HIGH 8.8
CVE-2023-29213

XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. In affected versions of `org.xwiki.platform:…

Fix: 13.10.11 / 14.4.7+
Fix from $1,950 2023-04-17
Xwiki HIGH 8.8
CVE-2023-29509EPSS 76%

XWiki Commons are technical libraries common to several other top level XWiki projects. Any user with view rights on commonly accessible documents ca…

Fix: 13.10.11 / 14.4.7+
Fix from $1,950 2023-04-16
Xwiki HIGH 8.8
CVE-2023-29511

XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. Any user with edit rights on a page (e.g., i…

Fix: 13.10.11 / 14.4.8+
Fix from $1,950 2023-04-16
Xwiki HIGH 8.8
CVE-2023-30537

XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. Any user with the right to add an object on …

Fix: 13.10.11 / 14.4.7+
Fix from $1,950 2023-04-16
Xwiki MEDIUM 5.4
CVE-2023-29508

XWiki Commons are technical libraries common to several other top level XWiki projects. A user without script rights can introduce a stored XSS by us…

Fix: 13.10.11 / 14.4.7+
Fix from $1,600 2023-04-16
Xwiki HIGH 8.8
CVE-2023-29212

XWiki Commons are technical libraries common to several other top level XWiki projects. Any user with edit rights can execute arbitrary Groovy, Pytho…

Fix: 14.4.7+
Fix from $1,950 2023-04-16
Xwiki HIGH 8.8
CVE-2023-29214

XWiki Commons are technical libraries common to several other top level XWiki projects. Any user with edit rights can execute arbitrary Groovy, Pytho…

Fix: 13.10.11 / 14.4.7+
Fix from $1,950 2023-04-16
Xwiki HIGH 7.2
CVE-2023-29507

XWiki Commons are technical libraries common to several other top level XWiki projects. The Document script API returns directly a DocumentAuthors al…

Fix: 14.4.7+
Fix from $1,950 2023-04-16
Xwiki MEDIUM 6.1
CVE-2023-29506

XWiki Commons are technical libraries common to several other top level XWiki projects. It was possible to inject some code using the URL of authenti…

Fix: 13.10.11 / 14.4.7+
Fix from $1,600 2023-04-16
Xwiki HIGH 8.8
CVE-2023-29211

XWiki Commons are technical libraries common to several other top level XWiki projects. Any user with view rights `WikiManager.DeleteWiki` can execut…

Fix: 13.10.11 / 14.4.7+
Fix from $1,950 2023-04-16
Xwiki HIGH 8.8
CVE-2023-29209

XWiki Commons are technical libraries common to several other top level XWiki projects. Any user with view rights on commonly accessible documents in…

Fix: 13.10.11 / 14.4.7+
Fix from $1,950 2023-04-15
Xwiki HIGH 8.8
CVE-2023-29210

XWiki Commons are technical libraries common to several other top level XWiki projects. Any user with view rights on commonly accessible documents in…

Fix: 13.10.11 / 14.4.7+
Fix from $1,950 2023-04-15
Xwiki CRITICAL 9.0
CVE-2023-29207

XWiki Commons are technical libraries common to several other top level XWiki projects. The Livetable Macro wasn't properly sanitizing column names, …

Fix: 13.10.10 / 14.4.6+
Fix from $2,300 2023-04-15
Xwiki HIGH 7.5
CVE-2023-29208

XWiki Commons are technical libraries common to several other top level XWiki projects. Rights added to a document are not taken into account for vie…

Fix: 13.10.11 / 14.4.7+
Fix from $1,950 2023-04-15
Xwiki MEDIUM 6.1
CVE-2023-29204

XWiki Commons are technical libraries common to several other top level XWiki projects. It is possible to bypass the existing security measures put i…

Fix: 13.10.10 / 14.4.4+
Fix from $1,600 2023-04-15
Xwiki MEDIUM 5.4
CVE-2023-29205

XWiki Commons are technical libraries common to several other top level XWiki projects. The HTML macro does not systematically perform a proper neutr…

Fix: after 14.7
Fix from $1,600 2023-04-15