Known vulnerabilities in XWiki platform 16.10.0-rc-1 - page 4

Vendor: XWiki
Version: 16.10.0-rc-1
Software CPE: cpe:2.3:a:xwiki:xwiki-platform:*:*:*:*:*:*:*:*
Total vulnerabilities: 83
Public exploits: 0
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.3

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting XWiki platform version 16.10.0-rc-1 XWiki platform 16.10.0-rc-1 is affected by 83 vulnerabilities: 9 high, 51 medium, 23 low Critical High Medium Low

Vulnerabilities (83)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU129974 - Eval Injection
CVE-2023-29510
CWE-95 Medium
No
No
14.10.2, 15.0 18.04.2023 SB2022112156
#VU129972 - Eval Injection
CVE-2023-29512
CWE-95 Medium
No
No
13.10.11, 14.4.8, 14.10.1, 15.0 18.04.2023 SB2022112156
#VU129971 - Improper Access Control
CVE-2023-29513
CWE-284 Low
No
No
14.10.1, 15.0 18.04.2023 SB2022112156
#VU129968 - Eval Injection
CVE-2023-29516
CWE-95 Medium
No
No
13.10.11, 14.4.8, 14.10.1, 15.0 18.04.2023 SB2022112156
#VU129965 - Eval Injection
CVE-2023-29518
CWE-95 Medium
No
No
13.10.11, 14.4.8, 14.10.1, 15.0 18.04.2023 SB2022112156
#VU129973 - Eval Injection
CVE-2023-29511
CWE-95 Medium
No
No
13.10.11, 14.4.8, 14.10.1, 15.0 12.04.2023 SB2022112156
#VU129976 - Eval Injection
CVE-2023-29509
CWE-95 Medium
No
No
13.10.11, 14.4.7, 14.10 12.04.2023 SB2022112156
#VU129977 - Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS)
CVE-2023-29508
CWE-80 Medium
No
No
13.10.11, 14.4.7, 14.10 12.04.2023 SB2022112156
#VU129985 - Eval Injection
CVE-2023-29211
CWE-95 Medium
No
No
13.10.11, 14.4.7, 14.10 12.04.2023 SB2022112156
#VU129983 - Eval Injection
CVE-2023-29213
CWE-95 Medium
No
No
13.10.11, 14.4.7, 14.10 12.04.2023 SB2022112156
#VU129981 - Improper Restriction of XML External Entity Reference ('XXE')
CVE-2023-27480
CWE-611 Low
No
No
13.10.11, 14.4.7, 14.10 07.03.2023 SB2022112156
#VU130015 - Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS)
CVE-2022-36094
CWE-80 Medium
No
No
13.10.6, 14.3 rc-1 08.09.2022 SB2022090868
#VU130014 - Cross-Site Request Forgery (CSRF)
CVE-2022-36095
CWE-352 Low
No
No
13.10.5, 14.3.1 08.09.2022 SB2022090868
#VU130013 - Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS)
CVE-2022-36096
CWE-80 Medium
No
No
13.10.6, 14.3.1 08.09.2022 SB2022090868
#VU130010 - Eval Injection
CVE-2022-36098
CWE-95 Medium
No
No
13.10.6, 14.4 08.09.2022 SB2022090868
#VU130009 - Eval Injection
CVE-2022-36099
CWE-95 Medium
No
No
13.10.6, 14.4 08.09.2022 SB2022090868
#VU130023 - Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS)
CVE-2022-29258
CWE-80 Medium
No
No
12.10.11, 13.4.7, 13.10.3, 14.0 rc-1 31.05.2022 SB2022040846
#VU130022 - Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS)
CVE-2022-29252
CWE-80 Medium
No
No
12.10.11, 13.4.7, 13.10.3, 14.0 rc-1 25.05.2022 SB2022040846
#VU130026 - Incorrect Use of Privileged APIs
CVE-2022-24821
CWE-648 Low
No
No
12.10.11, 13.4.6, 13.10 08.04.2022 SB2022040846
#VU130025 - Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS)
CVE-2022-23622
CWE-80 Medium
No
No
12.10.11, 13.4.7, 13.10.3, 14.0 rc-1 09.02.2022 SB2022040846


Showing elements 61 - 80 out of 83