Known vulnerabilities in XWiki platform 6.2-milestone-1 - page 2

Vendor: XWiki
Version: 6.2-milestone-1
Software CPE: cpe:2.3:a:xwiki:xwiki-platform:*:*:*:*:*:*:*:*
Total vulnerabilities: 80
Public exploits: 1
Known exploited (KEV): 1
Highest CVSSv4 Score: 9.4

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting XWiki platform version 6.2-milestone-1 XWiki platform 6.2-milestone-1 is affected by 80 vulnerabilities: 10 high, 50 medium, 20 low Critical High Medium Low

Vulnerabilities (80)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU126944 - Improper Privilege Management
CVE-2024-43401
CWE-269 Medium
No
No
15.10 19.08.2024 SB20240819171
#VU129904 - Exposure of sensitive information to an unauthorized actor
CVE-2024-31464
CWE-200 Low
No
No
14.10.19, 15.5.4, 15.9 10.04.2024 SB2024041093
#VU129909 - Resource exhaustion
CVE-2024-21651
CWE-400 Medium
No
No
14.10.18, 15.5.3, 15.8 08.01.2024 SB2024010844
#VU129911 - Improper Handling of Insufficient Privileges
CVE-2024-21648
CWE-274 Medium
No
No
14.10.17, 15.5.3, 15.8 08.01.2024 SB2024010844
#VU129974 - Eval Injection
CVE-2023-29510
CWE-95 Medium
No
No
14.10.2, 15.0 18.04.2023 SB2022112156
#VU129972 - Eval Injection
CVE-2023-29512
CWE-95 Medium
No
No
13.10.11, 14.4.8, 14.10.1, 15.0 18.04.2023 SB2022112156
#VU129968 - Eval Injection
CVE-2023-29516
CWE-95 Medium
No
No
13.10.11, 14.4.8, 14.10.1, 15.0 18.04.2023 SB2022112156
#VU129967 - Exposure of sensitive information to an unauthorized actor
CVE-2023-29517
CWE-200 Medium
No
No
13.10.11, 14.4.8, 14.10.1, 15.0 18.04.2023 SB2022112156
#VU129973 - Eval Injection
CVE-2023-29511
CWE-95 Medium
No
No
13.10.11, 14.4.8, 14.10.1, 15.0 12.04.2023 SB2022112156
#VU129994 - URL Redirection to Untrusted Site ('Open Redirect')
CVE-2023-29204
CWE-601 Medium
No
No
13.10.10, 14.4.4, 14.8 rc-1 12.04.2023 SB2022112156
#VU129979 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2023-29506
CWE-79 Medium
No
No
13.10.11, 14.4.7, 14.10 12.04.2023 SB2022112156
#VU129989 - Exposure of resource to wrong sphere
CVE-2023-29208
CWE-668 Medium
No
No
13.10.11, 14.4.7, 14.10 12.04.2023 SB2022112156
#VU129988 - Eval Injection
CVE-2023-29209
CWE-95 Medium
No
No
13.10.11, 14.4.7, 14.10 12.04.2023 SB2022112156
#VU129985 - Eval Injection
CVE-2023-29211
CWE-95 Medium
No
No
13.10.11, 14.4.7, 14.10 12.04.2023 SB2022112156
#VU129984 - Eval Injection
CVE-2023-29212
CWE-95 Medium
No
No
14.4.7, 14.10 12.04.2023 SB2022112156
#VU129983 - Eval Injection
CVE-2023-29213
CWE-95 Medium
No
No
13.10.11, 14.4.7, 14.10 12.04.2023 SB2022112156
#VU129981 - Improper Restriction of XML External Entity Reference ('XXE')
CVE-2023-27480
CWE-611 Low
No
No
13.10.11, 14.4.7, 14.10 07.03.2023 SB2022112156
#VU72780 - Improper Handling of Exceptional Conditions
CVE-2023-26479
CWE-755 Medium
No
No
13.10.10, 14.4.6, 14.9 rc-1 06.03.2023 SB2023030625
#VU72775 - Improper Access Control
CVE-2023-26473
CWE-284 Medium
No
No
13.10.11, 14.4.7, 14.10 06.03.2023 SB2023030627
#VU72774 - Permissions, Privileges, and Access Controls
CVE-2023-26472
CWE-264 Medium
No
No
13.10.10, 14.4.6, 14.9 06.03.2023 SB2023030626


Showing elements 21 - 40 out of 80