Known vulnerabilities in MediaWiki - page 10

Software: MediaWiki
Software CPE: cpe:2.3:a:mediawiki_org:mediawiki:*:*:*:*:*:*:*:*
Total vulnerabilities: 293
Public exploits: 4
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting MediaWiki MediaWiki is affected by 293 known vulnerabilities: 16 high, 128 medium, 149 low Critical High Medium Low

Vulnerabilities (293)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU37189 - Exposure of sensitive information to an unauthorized actor
CVE-2014-1686
CWE-200 Medium
No
No
- 16.04.2018 SB2018041609
#VU31319 - Exposure of sensitive information to an unauthorized actor
CVE-2017-0361
CWE-200 Low
No
No
1.28.1 13.04.2018 SB2018041306
SB2017111522
SB2017040706
and 1 more
#VU31320 - Cross-Site Request Forgery (CSRF)
CVE-2017-0362
CWE-352 Medium
No
No
1.28.1 13.04.2018 SB2018041306
SB2017040706
SB2017040707
#VU31321 - URL Redirection to Untrusted Site ('Open Redirect')
CVE-2017-0363
CWE-601 Low
No
No
1.28.1 13.04.2018 SB2018041306
SB2017040706
SB2017040707
#VU31322 - URL Redirection to Untrusted Site ('Open Redirect')
CVE-2017-0364
CWE-601 Low
No
No
1.28.1 13.04.2018 SB2018041306
SB2017040706
SB2017040707
#VU31323 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2017-0365
CWE-79 Low
No
No
1.28.1 13.04.2018 SB2018041306
SB2017040706
SB2017040707
#VU31324 - Improper input validation
CVE-2017-0366
CWE-20 Medium
No
No
1.28.1 13.04.2018 SB2018041306
SB2017040706
SB2017040707
#VU31325 -
CVE-2017-0367
High
No
No
1.28.1 13.04.2018 SB2018041306
SB2017040706
SB2017040707
#VU31326 - Improper input validation
CVE-2017-0368
CWE-20 Medium
No
No
1.28.1 13.04.2018 SB2018041306
SB2017040706
SB2017040707
#VU31327 - Incorrect Default Permissions
CVE-2017-0369
CWE-276 Medium
No
No
1.28.1 13.04.2018 SB2018041306
SB2017040706
SB2017040707
#VU31328 - Improper input validation
CVE-2017-0370
CWE-20 Medium
No
No
1.28.1 13.04.2018 SB2018041306
SB2017040706
SB2017040707
#VU31372 - Improper Access Control
CVE-2015-8008
CWE-284 Medium
No
No
1.25.3 29.12.2017 SB2017122906
#VU38012 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2012-4377
CWE-79 Low
No
No
- 26.10.2017 SB2017101951
#VU38013 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2012-4378
CWE-79 Low
No
No
- 26.10.2017 SB2017101951
#VU38026 - Improper Access Control
CVE-2012-4379
CWE-284 Medium
No
No
- 19.10.2017 SB2017101951
#VU38027 - Improper Access Control
CVE-2012-4380
CWE-284 Medium
No
No
- 19.10.2017 SB2017101951
#VU38028 - Exposure of sensitive information to an unauthorized actor
CVE-2012-4382
CWE-200 Medium
No
No
- 19.10.2017 SB2017101951
#VU7286 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2017-0372
CWE-79 Low
Available
No
- 29.04.2017 SB2017042901
SB2017040706
SB2017040707
and 1 more
#VU39168 - Exposure of sensitive information to an unauthorized actor
CVE-2016-6332
CWE-200 Medium
No
No
- 20.04.2017 SB2017042017
SB2016082801
SB2016082802
and 1 more
#VU39167 - Improper Access Control
CVE-2016-6331
CWE-284 Medium
No
No
- 20.04.2017 SB2017042017
SB2016082801
SB2016082802
and 1 more


Showing elements 181 - 200 out of 293