Browse CVEs

HIGH 8.8 CVE-2025-49586 XWiki is an open-source wiki software platform. Any XWiki user with edit right on at least one App Within Minutes application (the default for all us… Xwiki 16.4.7 / 16.10.3+ Fix from $1,9502025-06-13 HIGH 8.0 CVE-2025-49585 XWiki is a generic wiki platform. In versions before 15.10.16, 16.0.0-rc-1 through 16.4.6, and 16.5.0-rc-1 through 16.10.1, when an attacker without … Xwiki 15.10.16 / 16.4.7+ Fix from $1,9502025-06-13 HIGH 8.0 CVE-2025-49587 XWiki is an open-source wiki software platform. When a user without script right creates a document with an XWiki.Notifications.Code.NotificationDisp… Xwiki 15.10.16 / 16.4.7+ Fix from $1,9502025-06-13 HIGH 7.5 CVE-2025-49584 XWiki is a generic wiki platform. In XWiki Platform versions 10.9 through 16.4.6, 16.5.0-rc-1 through 16.10.2, and 17.0.0-rc-1, the title of every si… Xwiki 16.4.7 / 16.10.3+ Fix from $1,9502025-06-13 HIGH 8.0 CVE-2025-49582 XWiki is a generic wiki platform. When editing content that contains "dangerous" macros like malicious script macros that were authored by a user wit… Xwiki 16.4.7 / 16.10.3+ Fix from $1,9502025-06-13 HIGH 8.8 CVE-2025-49581 XWiki is a generic wiki platform. Any user with edit right on a page (could be the user's profile) can execute code (Groovy, Python, Velocity) with p… Xwiki 12.0 / 12.7+ Fix from $1,9502025-06-13 HIGH 8.0 CVE-2025-49580 XWiki is a generic wiki platform. From 8.2 and 7.4.5 until 17.1.0-rc-1, 16.10.4, and 16.4.7, pages can gain script or programming rights when they co… Xwiki 16.4.7 / 16.10.4+ Fix from $1,9502025-06-13 CRITICAL 9.8 CVE-2024-56158 XWiki is a generic wiki platform. It's possible to execute any SQL query in Oracle by using the function like DBMS_XMLGEN or DBMS_XMLQUERY. The XWiki… Xwiki 15.10.16 / 16.4.7+ Fix from $2,3002025-06-12 HIGH 8.8 CVE-2025-48063 XWiki is a generic wiki platform. In XWiki 16.10.0, required rights were introduced as a way to limit which rights a document can have. Part of the s… Xwiki 16.10.4+ Fix from $1,9502025-05-21 CRITICAL 9.8 CVE-2025-46557 XWiki is a generic wiki platform. In versions starting from 15.3-rc-1 to before 15.10.14, from 16.0.0-rc-1 to before 16.4.6, and from 16.5.0-rc-1 to … Xwiki 15.10.14 / 16.4.6+ Fix from $2,3002025-04-30 CRITICAL 9.0 CVE-2025-46558 XWiki Contrib's Syntax Markdown allows importing Markdown content into wiki pages and creating wiki content in Markdown. In versions starting from 8.… Xwiki 8.9+ Fix from $2,3002025-04-30 MEDIUM 5.3 CVE-2025-46554 XWiki is a generic wiki platform. In versions starting from 1.8.1 to before 14.10.22, from 15.0-rc-1 to before 15.10.12, from 16.0.0-rc-1 to before 1… Xwiki 14.10.22 / 15.10.12+ Fix from $1,6002025-04-30 CRITICAL 9.0 CVE-2025-32973 XWiki is a generic wiki platform. In versions starting from 15.9-rc-1 to before 15.10.12, from 16.0.0-rc-1 to before 16.4.3, and from 16.5.0-rc-1 to … Xwiki 15.10.12 / 16.4.3+ Fix from $2,3002025-04-30 CRITICAL 9.0 CVE-2025-32974 XWiki is a generic wiki platform. In versions starting from 15.9-rc-1 to before 15.10.8 and from 16.0.0-rc-1 to before 16.2.0, the required rights an… Xwiki 15.10.8 / 16.2.0+ Fix from $2,3002025-04-30 MEDIUM 6.1 CVE-2025-32970 XWiki is a generic wiki platform. In versions starting from 13.5-rc-1 to before 15.10.13, from 16.0.0-rc-1 to before 16.4.4, and from 16.5.0-rc-1 to … Xwiki 15.10.13 / 16.4.4+ Fix from $1,6002025-04-30 MEDIUM 5.3 CVE-2025-32972 XWiki is a generic wiki platform. In versions starting from 6.1-milestone-1 to before 15.10.12, from 16.0.0-rc-1 to before 16.4.3, and from 16.5.0-rc… Xwiki 15.10.12 / 16.4.3+ Fix from $1,6002025-04-30 CRITICAL 9.8 CVE-2025-32969EPSS 78% XWiki is a generic wiki platform. In versions starting from 1.8 and prior to 15.10.16, 16.4.6, and 16.10.1, it is possible for a remote unauthenticat… Xwiki 15.10.16 / 16.4.6+ Fix from $2,3002025-04-23 HIGH 8.8 CVE-2025-32968 XWiki is a generic wiki platform. In versions starting from 1.6-milestone-1 to before 15.10.16, 16.4.6, and 16.10.1, it is possible for a user with S… Xwiki 15.10.16 / 16.4.6+ Fix from $1,9502025-04-23 CRITICAL 9.8 CVE-2025-29926 XWiki Platform is a generic wiki platform. Prior to 15.10.15, 16.4.6, and 16.10.0, any user can exploit the WikiManager REST API to create a new wiki… Xwiki 15.10.15 / 16.4.6+ Fix from $2,3002025-03-19 HIGH 7.5 CVE-2025-29924 XWiki Platform is a generic wiki platform. Prior to 15.10.14, 16.4.6, and 16.10.0-rc-1, it's possible for an user to get access to private informatio… Xwiki 15.10.14 / 16.4.6+ Fix from $1,9502025-03-19 MEDIUM 5.3 CVE-2025-29925 XWiki Platform is a generic wiki platform. Prior to 15.10.14, 16.4.6, and 16.10.0-rc-1, protected pages are listed when requesting the REST endpoints… Xwiki 15.10.14 / 16.4.6+ Fix from $1,6002025-03-19 HIGH 7.5 CVE-2025-27604 XWiki Confluence Migrator Pro helps admins to import confluence packages into their XWiki instance. The homepage of the application is public which e… Confluence Migrator 1.11.7+ Fix from $1,9502025-03-07 CRITICAL 9.8 CVE-2025-24893 KEVEPSS 100% XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. Any guest can perform arbitrary remote code … Xwiki 15.10.11 / 16.4.1+ Fix from $2,3002025-02-20 HIGH 8.0 CVE-2025-23025 XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. NOTE: The Realtime WYSIWYG Editor extension … Xwiki 15.10.12 / 16.4.1+ Fix from $1,9502025-01-14 HIGH 8.8 CVE-2024-55877 XWiki Platform is a generic wiki platform. Starting in version 9.7-rc-1 and prior to versions 15.10.11, 16.4.1, and 16.5.0, any user with an account … Xwiki 15.10.11 / 16.4.1+ Fix from $1,9502024-12-12 HIGH 8.8 CVE-2024-55879 XWiki Platform is a generic wiki platform. Starting in version 2.3 and prior to versions 15.10.9, 16.3.0, any user with script rights can perform arb… Xwiki 15.10.9 / 16.3.0+ Fix from $1,9502024-12-12 MEDIUM 5.4 CVE-2024-55876 XWiki Platform is a generic wiki platform. Starting in version 1.2-milestone-2 and prior to versions 15.10.9 and 16.3.0, any user with an account on … Xwiki 15.10.9 / 16.3.0+ Fix from $1,6002024-12-12 CRITICAL 9.8 CVE-2024-55663 XWiki Platform is a generic wiki platform. Starting in version 6.3-milestone-2 and prior to versions 13.10.5 and 14.3-rc-1, in `getdocument.vm`; the … Xwiki 13.10.5 / 14.3+ Fix from $2,3002024-12-12 HIGH 8.8 CVE-2024-55662 XWiki Platform is a generic wiki platform. Starting in version 3.3-milestone-1 and prior to versions 15.10.9 and 16.3.0, on instances where `Extensio… Xwiki 15.10.9 / 16.3.0+ Fix from $1,9502024-12-12 CRITICAL 9.0 CVE-2024-52300 macro-pdfviewer is a PDF Viewer Macro for XWiki using Mozilla pdf.js. The width parameter of the PDF viewer macro isn't properly escaped, allowing XS… Pdf Viewer Macro 2.5.6+ Fix from $2,3002024-11-13