Known vulnerabilities in MediaWiki - page 11

Software: MediaWiki
Software CPE: cpe:2.3:a:mediawiki_org:mediawiki:*:*:*:*:*:*:*:*
Total vulnerabilities: 293
Public exploits: 4
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting MediaWiki MediaWiki is affected by 293 known vulnerabilities: 16 high, 128 medium, 149 low Critical High Medium Low

Vulnerabilities (293)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU38645 - Credentials Management
CVE-2015-8009
CWE-255 High
No
No
- 25.07.2017 SB2015110913
#VU39169 - Exposure of sensitive information to an unauthorized actor
CVE-2016-6335
CWE-200 Medium
No
No
- 20.04.2017 SB2017042017
SB2016082801
SB2016082802
and 1 more
#VU39170 - Improper Access Control
CVE-2016-6336
CWE-284 Medium
No
No
- 20.04.2017 SB2017042017
SB2016082801
SB2016082802
and 1 more
#VU39171 - Improper Access Control
CVE-2016-6337
CWE-284 Medium
No
No
- 20.04.2017 SB2017042017
#VU7284 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2016-6333
CWE-79 Low
No
No
- 20.04.2017 SB2016082403
SB2016082801
SB2016082802
and 1 more
#VU7285 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2016-6334
CWE-79 Low
No
No
- 20.04.2017 SB2016082403
SB2016082801
SB2016082802
and 1 more
#VU39388 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2015-8622
CWE-79 Low
No
No
- 23.03.2017 SB2017032316
#VU39389 - Cross-Site Request Forgery (CSRF)
CVE-2015-8623
CWE-352 High
No
No
- 23.03.2017 SB2017032317
#VU39390 - Cross-Site Request Forgery (CSRF)
CVE-2015-8624
CWE-352 High
No
No
- 23.03.2017 SB2017032316
#VU39391 - Exposure of sensitive information to an unauthorized actor
CVE-2015-8625
CWE-200 Medium
No
No
- 23.03.2017 SB2017032316
#VU39392 - Credentials Management
CVE-2015-8626
CWE-255 High
No
No
- 23.03.2017 SB2017032316
#VU39393 - Improper Access Control
CVE-2015-8627
CWE-284 Medium
No
No
- 23.03.2017 SB2017032316
#VU39394 - Exposure of sensitive information to an unauthorized actor
CVE-2015-8628
CWE-200 Medium
No
No
- 23.03.2017 SB2017032316
#VU40599 - Exposure of sensitive information to an unauthorized actor
CVE-2015-8005
CWE-200 Medium
No
No
- 09.11.2015 SB2015110913
#VU40600 - Permissions, Privileges, and Access Controls
CVE-2015-8004
CWE-264 Low
No
No
- 09.11.2015 SB2015110913
#VU40601 - Resource Management Errors
CVE-2015-8003
CWE-399 Low
No
No
- 09.11.2015 SB2015110913
#VU40602 - Resource Management Errors
CVE-2015-8002
CWE-399 Low
No
No
- 09.11.2015 SB2015110913
#VU40603 - Improper Access Control
CVE-2015-8001
CWE-284 Low
No
No
- 09.11.2015 SB2015110913
#VU40655 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2015-6734
CWE-79 Low
No
No
- 01.09.2015 SB2015090104
#VU40656 - Resource Management Errors
CVE-2015-6733
CWE-399 Medium
No
No
- 01.09.2015 SB2015090104


Showing elements 201 - 220 out of 293