Known vulnerabilities in XWiki platform 14.0-rc-1 - page 2
Vendor:
XWiki
Software:
XWiki platform
Version:
14.0-rc-1
Software CPE:
cpe:2.3:a:xwiki:xwiki-platform:*:*:*:*:*:*:*:*
Total vulnerabilities:
96
Public exploits:
2
Known exploited (KEV):
1
Highest CVSSv4 Score:
9.3
Vulnerabilities by Severity
18.4.3
17.10.11
18.6.0
17.10.10
18.4.2
18.5.0
16.10.18
18.4.1
17.10.9
18.4.0
17.10.8
18.3.0
18.2.1
17.10.7
17.10.6
17.10.5
18.2.0
17.10.4
18.1.0
17.4.10
16.10.17
17.4.9
18.0.1
17.10.3
18.0.0
17.8.0-rc-1
17.4.8
16.10.16
17.10.2
17.10.1
16.10.15
17.10.0
17.4.7
16.10.14
17.9.0
16.10.13
17.4.6
17.4.5
16.10.12
17.8.0
16.10.11
17.7.0
17.4.4
17.4.3
16.10.10
17.6.0
9.4-rc-1
17.3.0-rc-1
17.4.2
17.5.0
16.10.9
17.4.1
17.4.0
16.10.8
16.10.7
16.4.8
14.10.22
17.3.0
16.10.6
17.2.2
17.2.1
17.2.0
16.10.0-rc-1
16.10.5
16.4.7
17.1.0
16.10.4
17.0.0
16.10.3
15.10.16
16.10.2
16.4.6
16.10.1
15.10.15
16.10.0
15.10.14
16.4.5
16.9.0
15.10.13
16.4.4
16.8.0
16.7.1
16.4.3
15.10.12
15.1-rc-1
16.7.0
16.4.2
16.6.0
16.4.1
15.10.11
16.5.0
16.4.0
15.10.10
15.10.9
16.3.1
16.3.0
15.10.8
16.2.0
15.10.7
16.1.0
14.10.21
15.10.6
15.5.5
16.0.0
15.10.5
15.10.4
15.10.3
15.10.2
15.10.1
15.10
15.9
15.8
15.7
15.6
15.5.4
15.5.3
15.5.2
15.5.1
15.5
15.4
15.3
15.2
15.1
15.0
14.10.20
14.10.19
14.10.18
14.10.17
14.10.16
14.10.15
14.10.14
14.10.13
14.10.12
14.10.11
14.10.10
14.10.9
14.10.8
14.10.7
14.10.6
14.10.5
14.10.4
14.10.3
14.10.2
14.10.1
14.6
14.4.8
14.4.4
14.4.3
14.4.2
14.4.1
14.4
14.3.1
14.2.1
14.2
14.1
13.10.8
13.10.7
13.10.6
13.10.5
13.10.4
13.10.2
13.10.1
13.9
13.8
13.7
13.6
13.5
13.4.7
13.4.6
13.4.5
13.4.3
13.4.2
13.4.1
13.4
13.3
13.2
13.1
13.0
12.10.11
12.10.10
12.10.9
12.10.8
12.10.7
12.10.6
12.10.5
12.10.4
12.10.3
12.10.2
12.10.1
12.10
12.9
12.6.8
12.6.7
12.6.6
12.6.5
12.6.4
12.6.1
12.6
12.5.1
12.3
12.2
12.1
11.10.13
11.10.12
11.10.8
11.10.7
11.10.4
11.10.1
11.10
11.9
11.8.1
11.8
11.7
11.6.1
11.5
11.3.6
11.3.5
11.3.4
11.3.3
11.3.2
11.3.1
11.3
11.2
11.1
11.0.3
11.0.2
11.0.1
11.0
10.11.11
10.11.10
10.11.9
10.11.8
10.11.7
10.11.6
10.11.5
10.11.4
10.11.3
10.11.2
10.11.1
10.11
10.10
10.9
10.8.3
10.8.2
10.8.1
10.8
10.7.1
10.7
10.6.1
10.6
10.5
10.4
10.3
10.2
10.1
10.0
9.11.9
9.11.8
9.11.7
9.11.6
9.11.5
9.11.4
9.11.3
9.11.2
9.11.1
9.11
9.10.1
9.10
9.9
9.8.1
9.8
9.7
9.6
9.5.1
9.5
9.4
9.3.1
9.3
9.2
9.1.2
9.1.1
9.1
9.0
8.4.6
8.4.5
8.4.4
8.4.3
8.4.2
8.4.1
8.4
8.2.2
8.2.1
8.2
8.1
8.0
7.4.6
7.4.5
7.4.4
7.4.3
7.4.2
7.4.1
7.4
7.3
7.2
7.1.4
7.1.3
7.1.2
7.1.1
7.1
7.0.1
7.0
6.4.8
6.4.7
6.4.6
6.4.5
6.4.4
6.4.3
6.4.2
6.4.1
6.4
6.2.7
6.2.6
6.2.5
6.2.3
6.2.2
6.2.1
6.2
6.1
6.0.1
5.4.7
5.4.6
5.4.5
5.4.4
5.4.3
5.4.2
5.4.1
5.4
5.3
5.2.4
5.2.3
5.2.2
5.2.1
5.2
5.1
5.0.3
5.0.2
5.0.1
5.0
4.5.4
4.5.3
4.5.2
4.5.1
4.5
4.4.1
4.4
4.3.1
4.3
4.2
4.1.4
4.1.3
4.1.2
4.1.1
4.1
4.0.1
4.0
3.5.1
3.5
3.4
3.3.1
3.3
3.2.1
3.2
3.1.1
3.1
3.0.1
6.0
14.3-rc-1
3.2-m3
13.10.9
13.4.4
14.7-rc-1
2.3-milestone-1
14.5
13.10
1.3-rc-1
14.10
14.4.7
13.10.11
6.2-milestone-1
14.9
11.6-rc-1
14.0-rc-1
3.0-milestone-1
14.4.5
14.8-rc-1
6.3-rc-1
6.2.4
14.4.6
14.9-rc-1
13.10.10
13.10.3
14.0
8.3-rc-1
12.8
12.7.1
12.7
12.6.2
11.10.10
11.4-rc-1
12.8-rc-1
11.10.11
12.6.3
12.4
11.10.6
12.5
12.2.1
11.10.5
-
11.10.2
12.0
11.10.3
11.3.7
Vulnerabilities (96)
| Vulnerability | CWE-ID | CSH Severity | Public Exploit | KEV | First fixed release | Published | Bulletins |
|---|---|---|---|---|---|---|---|
| #VU125592 - Missing Authorization CVE-2024-45591 |
CWE-862 | Medium | 15.10.9 | 10.09.2024 |
SB2024121266 |
||
| #VU96671 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') CVE-2023-35162 |
CWE-79 | Low | 14.10.5, 15.1 rc-1 | 02.09.2024 |
SB2024090221 |
||
| #VU96668 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') CVE-2023-35159 |
CWE-79 | Low | 14.10.5, 15.1 rc-1 | 02.09.2024 |
SB2024090221 |
||
| #VU126944 - Improper Privilege Management CVE-2024-43401 |
CWE-269 | Medium | 15.10 | 19.08.2024 |
SB20240819171 |
||
| #VU129906 - Cross-Site Request Forgery (CSRF) CVE-2024-31988 |
CWE-352 | High | 14.10.19, 15.5.4, 15.9 | 10.04.2024 |
SB2024041093 |
||
| #VU129904 - Exposure of sensitive information to an unauthorized actor CVE-2024-31464 |
CWE-200 | Low | 14.10.19, 15.5.4, 15.9 | 10.04.2024 |
SB2024041093 |
||
| #VU129909 - Resource exhaustion CVE-2024-21651 |
CWE-400 | Medium | 14.10.18, 15.5.3, 15.8 | 08.01.2024 |
SB2024010844 |
||
| #VU129911 - Improper Handling of Insufficient Privileges CVE-2024-21648 |
CWE-274 | Medium | 14.10.17, 15.5.3, 15.8 | 08.01.2024 |
SB2024010844 |
||
| #VU129975 - Eval Injection CVE-2023-30537 |
CWE-95 | Medium | 13.10.11, 14.4.7, 14.10 | 12.04.2023 |
SB2022112156 |
||
| #VU129976 - Eval Injection CVE-2023-29509 |
CWE-95 | Medium | 13.10.11, 14.4.7, 14.10 | 12.04.2023 |
SB2022112156 |
||
| #VU129993 - Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) CVE-2023-29205 |
CWE-80 | Medium | 14.8 rc-1 | 12.04.2023 |
SB2022112156 |
||
| #VU129978 - Incorrect Use of Privileged APIs CVE-2023-29507 |
CWE-648 | Low | 14.4.7, 14.10 | 12.04.2023 |
SB2022112156 |
||
| #VU129988 - Eval Injection CVE-2023-29209 |
CWE-95 | Medium | 13.10.11, 14.4.7, 14.10 | 12.04.2023 |
SB2022112156 |
||
| #VU129987 - Eval Injection CVE-2023-29210 |
CWE-95 | Medium | 13.10.11, 14.4.7, 14.10 | 12.04.2023 |
SB2022112156 |
||
| #VU129985 - Eval Injection CVE-2023-29211 |
CWE-95 | Medium | 13.10.11, 14.4.7, 14.10 | 12.04.2023 |
SB2022112156 |
||
| #VU129984 - Eval Injection CVE-2023-29212 |
CWE-95 | Medium | 14.4.7, 14.10 | 12.04.2023 |
SB2022112156 |
||
| #VU129983 - Eval Injection CVE-2023-29213 |
CWE-95 | Medium | 13.10.11, 14.4.7, 14.10 | 12.04.2023 |
SB2022112156 |
||
| #VU129986 - Eval Injection CVE-2023-27479 |
CWE-95 | Medium | 13.10.11, 14.4.7, 14.10 | 07.03.2023 |
SB2022112156 |
||
| #VU129981 - Improper Restriction of XML External Entity Reference ('XXE') CVE-2023-27480 |
CWE-611 | Low | 13.10.11, 14.4.7, 14.10 | 07.03.2023 |
SB2022112156 |
||
| #VU72775 - Improper Access Control CVE-2023-26473 |
CWE-284 | Medium | 13.10.11, 14.4.7, 14.10 | 06.03.2023 |
SB2023030627 |
Showing elements 21 - 40 out of 96