Known vulnerabilities in XWiki platform 6.3-rc-1 - page 4

Vendor: XWiki
Version: 6.3-rc-1
Software CPE: cpe:2.3:a:xwiki:xwiki-platform:*:*:*:*:*:*:*:*
Total vulnerabilities: 69
Public exploits: 1
Known exploited (KEV): 1
Highest CVSSv4 Score: 9.3

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting XWiki platform version 6.3-rc-1 XWiki platform 6.3-rc-1 is affected by 69 vulnerabilities: 11 high, 40 medium, 18 low Critical High Medium Low

Vulnerabilities (69)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU130026 - Incorrect Use of Privileged APIs
CVE-2022-24821
CWE-648 Low
No
No
12.10.11, 13.4.6, 13.10 08.04.2022 SB2022040846
#VU130025 - Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS)
CVE-2022-23622
CWE-80 Medium
No
No
12.10.11, 13.4.7, 13.10.3, 14.0 rc-1 09.02.2022 SB2022040846
#VU130029 - Missing Authorization
CVE-2022-23621
CWE-862 Low
No
No
12.10.9, 13.4.3, 13.7 09.02.2022 SB2022020951
#VU130031 - Exposure of sensitive information to an unauthorized actor
CVE-2022-23619
CWE-200 Medium
No
No
12.10.9, 13.4.1, 13.6 09.02.2022 SB2022020951
#VU130032 - URL Redirection to Untrusted Site ('Open Redirect')
CVE-2022-23618
CWE-601 Medium
No
No
12.10.7, 13.3 09.02.2022 SB2021070132
#VU130034 - Missing Authorization
CVE-2022-23617
CWE-862 Low
No
No
12.10.6, 13.2 09.02.2022 SB2021070132
#VU130038 - Improper Privilege Management
CVE-2022-23616
CWE-269 Medium
No
No
13.1 09.02.2022 SB2022020950
#VU130041 - Improper Access Control
CVE-2022-23615
CWE-284 Low
No
No
13.0 09.02.2022 SB2021051825
#VU130040 - Improper Access Control
CVE-2021-32621
CWE-284 Medium
No
No
12.6.7, 12.10.3, 13.0 18.05.2021 SB2021051825


Showing elements 61 - 80 out of 69