Known vulnerabilities in XWiki platform 2.3-milestone-1
Vendor:
XWiki
Software:
XWiki platform
Version:
2.3-milestone-1
Software CPE:
cpe:2.3:a:xwiki:xwiki-platform:*:*:*:*:*:*:*:*
Total vulnerabilities:
40
Public exploits:
0
Known exploited (KEV):
0
Highest CVSSv4 Score:
9.4
Vulnerabilities by Severity
18.4.3
17.10.11
18.6.0
17.10.10
18.4.2
18.5.0
16.10.18
18.4.1
17.10.9
18.4.0
17.10.8
18.3.0
18.2.1
17.10.7
17.10.6
17.10.5
18.2.0
17.10.4
18.1.0
17.4.10
16.10.17
17.4.9
18.0.1
17.10.3
18.0.0
17.8.0-rc-1
17.4.8
16.10.16
17.10.2
17.10.1
16.10.15
17.10.0
17.4.7
16.10.14
17.9.0
16.10.13
17.4.6
17.4.5
16.10.12
17.8.0
16.10.11
17.7.0
17.4.4
17.4.3
16.10.10
17.6.0
9.4-rc-1
17.3.0-rc-1
17.4.2
17.5.0
16.10.9
17.4.1
17.4.0
16.10.8
16.10.7
16.4.8
14.10.22
17.3.0
16.10.6
17.2.2
17.2.1
17.2.0
16.10.0-rc-1
16.10.5
16.4.7
17.1.0
16.10.4
17.0.0
16.10.3
15.10.16
16.10.2
16.4.6
16.10.1
15.10.15
16.10.0
15.10.14
16.4.5
16.9.0
15.10.13
16.4.4
16.8.0
16.7.1
16.4.3
15.10.12
15.1-rc-1
16.7.0
16.4.2
16.6.0
16.4.1
15.10.11
16.5.0
16.4.0
15.10.10
15.10.9
16.3.1
16.3.0
15.10.8
16.2.0
15.10.7
16.1.0
14.10.21
15.10.6
15.5.5
16.0.0
15.10.5
15.10.4
15.10.3
15.10.2
15.10.1
15.10
15.9
15.8
15.7
15.6
15.5.4
15.5.3
15.5.2
15.5.1
15.5
15.4
15.3
15.2
15.1
15.0
14.10.20
14.10.19
14.10.18
14.10.17
14.10.16
14.10.15
14.10.14
14.10.13
14.10.12
14.10.11
14.10.10
14.10.9
14.10.8
14.10.7
14.10.6
14.10.5
14.10.4
14.10.3
14.10.2
14.10.1
14.6
14.4.8
14.4.4
14.4.3
14.4.2
14.4.1
14.4
14.3.1
14.2.1
14.2
14.1
13.10.8
13.10.7
13.10.6
13.10.5
13.10.4
13.10.2
13.10.1
13.9
13.8
13.7
13.6
13.5
13.4.7
13.4.6
13.4.5
13.4.3
13.4.2
13.4.1
13.4
13.3
13.2
13.1
13.0
12.10.11
12.10.10
12.10.9
12.10.8
12.10.7
12.10.6
12.10.5
12.10.4
12.10.3
12.10.2
12.10.1
12.10
12.9
12.6.8
12.6.7
12.6.6
12.6.5
12.6.4
12.6.1
12.6
12.5.1
12.3
12.2
12.1
11.10.13
11.10.12
11.10.8
11.10.7
11.10.4
11.10.1
11.10
11.9
11.8.1
11.8
11.7
11.6.1
11.5
11.3.6
11.3.5
11.3.4
11.3.3
11.3.2
11.3.1
11.3
11.2
11.1
11.0.3
11.0.2
11.0.1
11.0
10.11.11
10.11.10
10.11.9
10.11.8
10.11.7
10.11.6
10.11.5
10.11.4
10.11.3
10.11.2
10.11.1
10.11
10.10
10.9
10.8.3
10.8.2
10.8.1
10.8
10.7.1
10.7
10.6.1
10.6
10.5
10.4
10.3
10.2
10.1
10.0
9.11.9
9.11.8
9.11.7
9.11.6
9.11.5
9.11.4
9.11.3
9.11.2
9.11.1
9.11
9.10.1
9.10
9.9
9.8.1
9.8
9.7
9.6
9.5.1
9.5
9.4
9.3.1
9.3
9.2
9.1.2
9.1.1
9.1
9.0
8.4.6
8.4.5
8.4.4
8.4.3
8.4.2
8.4.1
8.4
8.2.2
8.2.1
8.2
8.1
8.0
7.4.6
7.4.5
7.4.4
7.4.3
7.4.2
7.4.1
7.4
7.3
7.2
7.1.4
7.1.3
7.1.2
7.1.1
7.1
7.0.1
7.0
6.4.8
6.4.7
6.4.6
6.4.5
6.4.4
6.4.3
6.4.2
6.4.1
6.4
6.2.7
6.2.6
6.2.5
6.2.3
6.2.2
6.2.1
6.2
6.1
6.0.1
5.4.7
5.4.6
5.4.5
5.4.4
5.4.3
5.4.2
5.4.1
5.4
5.3
5.2.4
5.2.3
5.2.2
5.2.1
5.2
5.1
5.0.3
5.0.2
5.0.1
5.0
4.5.4
4.5.3
4.5.2
4.5.1
4.5
4.4.1
4.4
4.3.1
4.3
4.2
4.1.4
4.1.3
4.1.2
4.1.1
4.1
4.0.1
4.0
3.5.1
3.5
3.4
3.3.1
3.3
3.2.1
3.2
3.1.1
3.1
3.0.1
6.0
14.3-rc-1
3.2-m3
13.10.9
13.4.4
14.7-rc-1
2.3-milestone-1
14.5
13.10
1.3-rc-1
14.10
14.4.7
13.10.11
6.2-milestone-1
14.9
11.6-rc-1
14.0-rc-1
3.0-milestone-1
14.4.5
14.8-rc-1
6.3-rc-1
6.2.4
14.4.6
14.9-rc-1
13.10.10
13.10.3
14.0
8.3-rc-1
12.8
12.7.1
12.7
12.6.2
11.10.10
11.4-rc-1
12.8-rc-1
11.10.11
12.6.3
12.4
11.10.6
12.5
12.2.1
11.10.5
-
11.10.2
12.0
11.10.3
11.3.7
Vulnerabilities (40)
| Vulnerability | CWE-ID | CSH Severity | Public Exploit | KEV | First fixed release | Published | Bulletins |
|---|---|---|---|---|---|---|---|
| #VU129889 - Improper Removal of Sensitive Information Before Storage or Transfer CVE-2025-58049 |
CWE-212 | Low | 16.4.8, 16.10.7, 17.4.0 | 05.05.2026 |
SB2026050581 |
||
| #VU129877 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') CVE-2024-56158 |
CWE-89 | High | 15.10.16, 16.4.7, 16.10.2 | 05.05.2026 |
SB2026050580 |
||
| #VU113355 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') CVE-2025-54385 |
CWE-89 | Low | 16.10.6, 17.3.0 rc-1 | 28.07.2025 |
SB2025072846 |
||
| #VU108076 - Improper Authorization CVE-2025-32972 |
CWE-285 | Medium | 15.10.12, 16.4.3, 16.8.0 | 30.04.2025 |
SB2025043020 |
||
| #VU108068 - Missing Authorization CVE-2025-46554 |
CWE-862 | Medium | 14.10.22, 15.10.12, 16.4.3, 16.7.0 | 30.04.2025 |
SB2025043016 |
||
| #VU129874 - Missing Authorization CVE-2025-32968 |
CWE-862 | Low | 15.10.16, 16.4.6, 16.10.1 | 23.04.2025 |
SB2026050580 |
||
| #VU129875 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') CVE-2025-32969 |
CWE-89 | High | 15.10.16, 16.4.6, 16.10.1 | 23.04.2025 |
SB2026050580 |
||
| #VU107581 - Exposure of resource to wrong sphere CVE-2025-32783 |
CWE-668 | Medium | - | 17.04.2025 |
SB2025041730 |
||
| #VU106017 - Transmission of Private Resources into a New Sphere ('Resource Leak') CVE-2025-29925 |
CWE-402 | High | 15.10.14, 16.4.6, 16.10.0 rc-1 | 25.03.2025 |
SB2025032539 |
||
| #VU125588 - Missing Authorization CVE-2025-23025 |
CWE-862 | Medium | 15.10.12, 16.4.1 | 14.01.2025 |
SB2025022402 SB2025043016 |
||
| #VU125592 - Missing Authorization CVE-2024-45591 |
CWE-862 | Medium | 15.10.9 | 10.09.2024 |
SB2024121266 |
||
| #VU126944 - Improper Privilege Management CVE-2024-43401 |
CWE-269 | Medium | 15.10 | 19.08.2024 |
SB20240819171 |
||
| #VU125593 - Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) CVE-2024-41947 |
CWE-80 | Medium | 15.10.8 | 31.07.2024 |
SB2025043018 |
||
| #VU129909 - Resource exhaustion CVE-2024-21651 |
CWE-400 | Medium | 14.10.18, 15.5.3, 15.8 | 08.01.2024 |
SB2024010844 |
||
| #VU129911 - Improper Handling of Insufficient Privileges CVE-2024-21648 |
CWE-274 | Medium | 14.10.17, 15.5.3, 15.8 | 08.01.2024 |
SB2024010844 |
||
| #VU129972 - Eval Injection CVE-2023-29512 |
CWE-95 | Medium | 13.10.11, 14.4.8, 14.10.1, 15.0 | 18.04.2023 |
SB2022112156 |
||
| #VU72777 - Improper Control of Generation of Code ('Code Injection') CVE-2023-26475 |
CWE-94 | Medium | 13.10.11, 14.4.7, 14.10 | 06.03.2023 |
SB2023030627 |
||
| #VU72775 - Improper Access Control CVE-2023-26473 |
CWE-284 | Medium | 13.10.11, 14.4.7, 14.10 | 06.03.2023 |
SB2023030627 |
||
| #VU130005 - Missing Authorization CVE-2022-41930 |
CWE-862 | Medium | 13.10.7, 14.4.2, 14.5 | 21.11.2022 |
SB2022112156 |
||
| #VU130002 - Resource exhaustion CVE-2022-41932 |
CWE-400 | Medium | 13.10.8, 14.4.2, 14.6 | 21.11.2022 |
SB2022112156 |
Showing elements 1 - 20 out of 40