Known vulnerabilities in MediaWiki - page 12

Software: MediaWiki
Software CPE: cpe:2.3:a:mediawiki_org:mediawiki:*:*:*:*:*:*:*:*
Total vulnerabilities: 293
Public exploits: 4
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting MediaWiki MediaWiki is affected by 293 known vulnerabilities: 16 high, 128 medium, 149 low Critical High Medium Low

Vulnerabilities (293)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU38063 - Improper input validation
CVE-2014-9487
CWE-20 High
No
No
- 17.10.2017 SB2015011605
SB2015020704
#VU40657 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2015-6730
CWE-79 Low
No
No
- 01.09.2015 SB2015090104
#VU40658 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2015-6729
CWE-79 Low
No
No
- 01.09.2015 SB2015090104
#VU40659 - Cross-Site Request Forgery (CSRF)
CVE-2015-6728
CWE-352 Medium
No
No
- 01.09.2015 SB2015090104
#VU40828 - Resource Management Errors
CVE-2015-2942
CWE-399 Medium
No
No
- 13.04.2015 SB2015041301
#VU40829 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2015-2941
CWE-79 Low
No
No
- 13.04.2015 SB2015041301
#VU40830 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2015-2938
CWE-79 Low
No
No
- 13.04.2015 SB2015041301
#VU40831 - Resource Management Errors
CVE-2015-2937
CWE-399 Medium
No
No
- 13.04.2015 SB2015041301
#VU40832 - Resource Management Errors
CVE-2015-2936
CWE-399 Medium
No
No
- 13.04.2015 SB2015041301
#VU40833 - Exposure of sensitive information to an unauthorized actor
CVE-2015-2935
CWE-200 Medium
No
No
- 13.04.2015 SB2015041301
#VU40834 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2015-2934
CWE-79 Low
No
No
- 13.04.2015 SB2015041301
#VU40835 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2015-2933
CWE-79 Low
No
No
- 13.04.2015 SB2015041301
#VU40836 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2015-2932
CWE-79 Low
No
No
- 13.04.2015 SB2015041301
#VU40837 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2015-2931
CWE-79 Low
No
No
- 13.04.2015 SB2015041301
#VU40939 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2014-9480
CWE-79 Low
No
No
- 16.01.2015 SB2015011605
SB2015020704
#VU40940 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2014-9479
CWE-79 Low
No
No
- 16.01.2015 SB2015011605
SB2015020704
#VU40941 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2014-9478
CWE-79 Low
No
No
- 16.01.2015 SB2015011605
SB2015020704
#VU40942 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2014-9477
CWE-79 Low
No
No
- 16.01.2015 SB2015011605
SB2015020704
#VU40943 - Permissions, Privileges, and Access Controls
CVE-2014-9476
CWE-264 Medium
No
No
- 16.01.2015 SB2015011605
SB2015020704
#VU40944 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2014-9475
CWE-79 Low
No
No
- 16.01.2015 SB2015011605
SB2015020704


Showing elements 221 - 240 out of 293