Known vulnerabilities in TWiki

Vendor: TWiki.org
Software: TWiki
Software CPE: cpe:2.3:a:twiki_org:twiki:*:*:*:*:*:*:*:*
Website:
Total vulnerabilities: 8
Public exploits: 3
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting TWiki TWiki is affected by 8 known vulnerabilities: 2 high, 6 low Critical High Medium Low

Vulnerabilities (8)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU34822 - Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')
CVE-2014-7236		 CWE-74 High
Available
No
 - 17.02.2020 SB2020021727
#VU35122 - Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')
CVE-2005-3056		 CWE-74 High
No
No
 - 01.11.2019 SB2019110116
#VU36062 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2018-20212		 CWE-79 Low
No
No
 - 21.03.2019 SB2019032137
#VU40982 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2014-9367		 CWE-79 Low
No
No
 - 31.12.2014 SB2014123101
#VU40983 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2014-9325		 CWE-79 Low
No
No
 - 31.12.2014 SB2014123101
#VU44344 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2012-0979		 CWE-79 Low
No
No
 - 02.02.2012 SB2012020207
#VU44657 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2011-3010		 CWE-79 Low
Available
No
 - 30.09.2011 SB2011052102
#VU45035 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2011-1838		 CWE-79 Low
Available
No
 - 21.05.2011 SB2011052102