Known vulnerabilities in XWiki platform 6.3-rc-1 - page 3

Vendor: XWiki
Version: 6.3-rc-1
Software CPE: cpe:2.3:a:xwiki:xwiki-platform:*:*:*:*:*:*:*:*
Total vulnerabilities: 69
Public exploits: 1
Known exploited (KEV): 1
Highest CVSSv4 Score: 9.3

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting XWiki platform version 6.3-rc-1 XWiki platform 6.3-rc-1 is affected by 69 vulnerabilities: 11 high, 40 medium, 18 low Critical High Medium Low

Vulnerabilities (69)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU129931 - Incorrect Authorization
CVE-2023-46244
CWE-863 Low
No
No
14.10.7, 15.2 07.11.2023 SB2022112156
#VU129932 - Incorrect Authorization
CVE-2023-46243
CWE-863 Medium
No
No
14.10.6, 15.2 07.11.2023 SB2022112156
#VU129926 - Cross-Site Request Forgery (CSRF)
CVE-2023-46242
CWE-352 High
No
No
14.10.7, 15.2 07.11.2023 SB2022112156
#VU129953 - Missing Authorization
CVE-2023-37910
CWE-862 Medium
No
No
14.4.8, 14.10.4, 15.0 25.10.2023 SB2022112156
#VU129935 - Eval Injection
CVE-2023-37914
CWE-95 Medium
No
No
14.4.8, 14.10.6, 15.2 17.08.2023 SB2022112156
#VU129924 - Transmission of Private Resources into a New Sphere ('Resource Leak')
CVE-2023-38509
CWE-402 Low
No
No
14.10.9, 15.3 27.07.2023 SB2022112156
#VU129943 - Improper Neutralization of Alternate XSS Syntax
CVE-2023-35160
CWE-87 High
No
No
14.10.5, 15.1 rc-1 22.06.2023 SB2022112156
#VU129944 - Improper Neutralization of Alternate XSS Syntax
CVE-2023-35156
CWE-87 High
No
No
14.10.6, 15.1 22.06.2023 SB2022112156
#VU129937 - Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS)
CVE-2023-35157
CWE-80 Low
No
No
14.10.6, 15.1 rc-1 22.06.2023 SB2022112156
#VU129959 - Eval Injection
CVE-2023-35150
CWE-95 Medium
No
No
14.4.8, 14.10.4, 15.0 20.06.2023 SB2022112156
#VU129955 - Transmission of Private Resources into a New Sphere ('Resource Leak')
CVE-2023-34467
CWE-402 Medium
No
No
14.4.8, 14.10.4, 15.0 20.06.2023 SB2022112156
#VU129963 - Exposure of sensitive information to an unauthorized actor
CVE-2023-34466
CWE-200 Low
No
No
14.4.8, 14.10.4, 15.0 20.06.2023 SB2022112156
#VU130007 - Cross-Site Request Forgery (CSRF)
CVE-2022-41927
CWE-352 Medium
No
No
13.10.7, 14.4.1, 14.5 21.11.2022 SB2022112156
#VU130015 - Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS)
CVE-2022-36094
CWE-80 Medium
No
No
13.10.6, 14.3 rc-1 08.09.2022 SB2022090868
#VU130014 - Cross-Site Request Forgery (CSRF)
CVE-2022-36095
CWE-352 Low
No
No
13.10.5, 14.3.1 08.09.2022 SB2022090868
#VU130013 - Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS)
CVE-2022-36096
CWE-80 Medium
No
No
13.10.6, 14.3.1 08.09.2022 SB2022090868
#VU130009 - Eval Injection
CVE-2022-36099
CWE-95 Medium
No
No
13.10.6, 14.4 08.09.2022 SB2022090868
#VU130023 - Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS)
CVE-2022-29258
CWE-80 Medium
No
No
12.10.11, 13.4.7, 13.10.3, 14.0 rc-1 31.05.2022 SB2022040846
#VU130022 - Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS)
CVE-2022-29252
CWE-80 Medium
No
No
12.10.11, 13.4.7, 13.10.3, 14.0 rc-1 25.05.2022 SB2022040846
#VU130024 - Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS)
CVE-2022-29251
CWE-80 Low
No
No
12.10.11, 13.4.7, 13.10.3, 14.0 rc-1 25.05.2022 SB2022040846


Showing elements 41 - 60 out of 69