Known vulnerabilities in MediaWiki - page 9

Software: MediaWiki
Software CPE: cpe:2.3:a:mediawiki_org:mediawiki:*:*:*:*:*:*:*:*
Total vulnerabilities: 293
Public exploits: 4
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting MediaWiki MediaWiki is affected by 293 known vulnerabilities: 16 high, 128 medium, 149 low Critical High Medium Low

Vulnerabilities (293)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU30401 - Exposure of sensitive information to an unauthorized actor
CVE-2013-6455
CWE-200 Medium
No
No
1.22.1 28.01.2020 SB2020012828
#VU30419 - Exposure of sensitive information to an unauthorized actor
CVE-2014-9481
CWE-200 Medium
No
No
1.24.1 27.01.2020 SB2020012731
SB2015020704
#VU34897 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2020-6163
CWE-79 Low
No
No
- 08.01.2020 SB2019121936
#VU23832 - Permissions, Privileges, and Access Controls
CVE-2019-19709
CWE-264 Low
No
No
1.33.2 28.12.2019 SB2019122805
SB2019122806
#VU34951 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2019-19910
CWE-79 Low
No
No
- 19.12.2019 SB2019121936
#VU30554 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2013-4303
CWE-79 Low
No
No
1.21.2 11.12.2019 SB2019121128
SB2013090301
#VU30591 - Improper input validation
CVE-2013-1816
CWE-20 Medium
No
No
1.20.3 20.11.2019 SB2019112025
SB2013030505
#VU30592 - Exposure of sensitive information to an unauthorized actor
CVE-2013-1817
CWE-200 Medium
No
No
1.20.3 20.11.2019 SB2019112025
SB2013030505
#VU30721 - Exposure of sensitive information to an unauthorized actor
CVE-2012-0046
CWE-200 Medium
No
No
1.18.1 29.10.2019 SB2019102925
#VU21941 - Exposure of sensitive information to an unauthorized actor
CVE-2019-16738
CWE-200 Low
No
No
1.31.4, 1.32.4, 1.33.1 19.10.2019 SB2019101902
SB2019101903
SB2019100832
and 1 more
#VU30996 - Improper Access Control
CVE-2019-12469
CWE-284 High
No
No
1.32.2 10.07.2019 SB2019071035
#VU30997 - Improper Access Control
CVE-2019-12470
CWE-284 High
No
No
1.32.2 10.07.2019 SB2019071035
#VU31006 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2019-12471
CWE-79 Low
No
No
1.32.2 10.07.2019 SB2019071035
#VU31007 - Improper Access Control
CVE-2019-12472
CWE-284 Medium
No
No
1.32.2 10.07.2019 SB2019071035
#VU31008 - Improper input validation
CVE-2019-12473
CWE-20 Medium
No
No
1.32.2 10.07.2019 SB2019071035
#VU31009 - Exposure of sensitive information to an unauthorized actor
CVE-2019-12474
CWE-200 Medium
No
No
1.32.2 10.07.2019 SB2019071035
#VU31016 - Improper Access Control
CVE-2019-12467
CWE-284 High
No
No
1.32.2 10.07.2019 SB2019071035
#VU14827 - Improper Access Control
CVE-2018-0505
CWE-284 Low
No
No
1.27.5, 1.29.3, 1.30.1, 1.31.1 21.09.2018 SB2018092102
SB2018092201
SB2019101802
and 5 more
#VU14826 - Improper Access Control
CVE-2018-0504
CWE-284 Low
No
No
1.27.5, 1.29.3, 1.30.1, 1.31.1 21.09.2018 SB2018092102
SB2018092201
SB2019102908
and 4 more
#VU14825 - Permissions, Privileges, and Access Controls
CVE-2018-0503
CWE-264 Low
No
No
1.27.5, 1.29.3, 1.30.1, 1.31.1 21.09.2018 SB2018092102
SB2018092201
SB2019101802
and 5 more


Showing elements 161 - 180 out of 293