Known vulnerabilities in MediaWiki - page 5

Software: MediaWiki
Software CPE: cpe:2.3:a:mediawiki_org:mediawiki:*:*:*:*:*:*:*:*
Total vulnerabilities: 293
Public exploits: 4
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting MediaWiki MediaWiki is affected by 293 known vulnerabilities: 16 high, 128 medium, 149 low Critical High Medium Low

Vulnerabilities (293)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU62018 - Exposure of sensitive information to an unauthorized actor
CVE-2022-28322
CWE-200 Medium
No
No
1.35.6, 1.36.4, 1.37.2 08.04.2022 SB2022040806
#VU62017 - Exposure of sensitive information to an unauthorized actor
CVE-2022-28212
CWE-200 Medium
No
No
1.35.6, 1.36.4, 1.37.2 08.04.2022 SB2022040806
#VU61915 - Improper input validation
CVE-2022-28204
CWE-20 Medium
No
No
1.35.6, 1.36.4, 1.37.2 06.04.2022 SB2022040604
#VU61912 - Improper input validation
CVE-2022-28203
CWE-20 Medium
No
No
1.35.6, 1.36.4, 1.37.2 06.04.2022 SB2022040604
#VU61910 - Loop with Unreachable Exit Condition ('Infinite Loop')
CVE-2022-28201
CWE-835 Medium
No
No
1.35.6, 1.36.4, 1.37.2 06.04.2022 SB2022040604
#VU61909 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2022-28202
CWE-79 Low
No
No
1.35.6, 1.36.4, 1.37.2 06.04.2022 SB2022040604
SB2022041530
SB2022061745
#VU59683 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2021-45472
CWE-79 Low
No
No
1.37.1 18.01.2022 SB2022011805
#VU59682 - Improper input validation
CVE-2021-45471
CWE-20 Medium
No
No
1.37.1 18.01.2022 SB2022011805
#VU59681 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2021-45474
CWE-79 Low
No
No
1.37.1 18.01.2022 SB2022011805
#VU59680 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2021-45473
CWE-79 Low
No
No
1.37.1 18.01.2022 SB2022011805
#VU59679 - Exposure of sensitive information to an unauthorized actor
CVE-2021-46148
CWE-200 Medium
No
No
1.35.5, 1.36.3, 1.37.1 18.01.2022 SB2022011805
#VU59678 - Resource exhaustion
CVE-2021-46149
CWE-400 Medium
No
No
1.35.5, 1.36.3, 1.37.1 18.01.2022 SB2022011805
#VU59677 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2021-46146
CWE-79 Low
No
No
1.35.5, 1.36.3, 1.37.1 18.01.2022 SB2022011805
#VU59676 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2021-46150
CWE-79 Low
No
No
1.35.5, 1.36.3, 1.37.1 18.01.2022 SB2022011805
#VU57198 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2021-42045
CWE-79 Low
No
No
1.31.16, 1.35.4, 1.36.2 11.10.2021 SB2021101108
#VU57197 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2021-42048
CWE-79 Low
No
No
1.31.16, 1.35.4, 1.36.2 11.10.2021 SB2021101108
#VU57196 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2021-42047
CWE-79 Low
No
No
1.31.16, 1.35.4, 1.36.2 11.10.2021 SB2021101108
#VU57195 - Improper input validation
CVE-2021-42049
CWE-20 Medium
No
No
1.31.16, 1.35.4, 1.36.2 11.10.2021 SB2021101108
#VU57194 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2021-42046
CWE-79 Low
No
No
1.31.16, 1.35.4, 1.36.2 11.10.2021 SB2021101108
#VU55274 - Cross-Site Request Forgery (CSRF)
CVE-2021-32774
CWE-352 Low
No
No
1.31.16, 1.35.4, 1.36.2 23.07.2021 SB2021072309
SB2021101108


Showing elements 81 - 100 out of 293