Known vulnerabilities in XWiki platform - page 11

Vendor: XWiki
Software CPE: cpe:2.3:a:xwiki:xwiki-platform:*:*:*:*:*:*:*:*
Total vulnerabilities: 232
Public exploits: 2
Known exploited (KEV): 1
Highest CVSSv4 Score: 9.4

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting XWiki platform XWiki platform is affected by 232 known vulnerabilities: 29 high, 148 medium, 55 low Critical High Medium Low

Vulnerabilities (232)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU130018 - Exposure of Private Information ('Privacy Violation')
CVE-2022-36091
CWE-359 Medium
No
No
13.10.4, 14.2 08.09.2022 SB2022090781
#VU130017 - Authentication Bypass Using an Alternate Path or Channel
CVE-2022-36092
CWE-288 Medium
No
No
13.10.4, 14.2 08.09.2022 SB2022090781
#VU130020 - Improper Authorization
CVE-2022-31167
CWE-285 Low
No
No
12.10.11, 13.4.6, 13.10.1 07.09.2022 SB2022040846
#VU130021 - Improper Privilege Management
CVE-2022-31166
CWE-269 Medium
No
No
13.10.4, 14.2 07.09.2022 SB2022090781
#VU63847 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2022-29253
CWE-22 Low
No
No
13.10.3, 14.0 31.05.2022 SB2022053106
#VU130023 - Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS)
CVE-2022-29258
CWE-80 Medium
No
No
12.10.11, 13.4.7, 13.10.3, 14.0 rc-1 31.05.2022 SB2022040846
#VU130022 - Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS)
CVE-2022-29252
CWE-80 Medium
No
No
12.10.11, 13.4.7, 13.10.3, 14.0 rc-1 25.05.2022 SB2022040846
#VU130024 - Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS)
CVE-2022-29251
CWE-80 Low
No
No
12.10.11, 13.4.7, 13.10.3, 14.0 rc-1 25.05.2022 SB2022040846
#VU130026 - Incorrect Use of Privileged APIs
CVE-2022-24821
CWE-648 Low
No
No
12.10.11, 13.4.6, 13.10 08.04.2022 SB2022040846
#VU130027 - Exposure of Private Information ('Privacy Violation')
CVE-2022-24820
CWE-359 Medium
No
No
12.10.11, 13.4.4, 13.9 08.04.2022 SB2022040846
#VU130028 - Exposure of Private Information ('Privacy Violation')
CVE-2022-24819
CWE-359 Medium
No
No
12.10.11, 13.4.4, 13.9 08.04.2022 SB2022040846
#VU130025 - Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS)
CVE-2022-23622
CWE-80 Medium
No
No
12.10.11, 13.4.7, 13.10.3, 14.0 rc-1 09.02.2022 SB2022040846
#VU130029 - Missing Authorization
CVE-2022-23621
CWE-862 Low
No
No
12.10.9, 13.4.3, 13.7 09.02.2022 SB2022020951
#VU130030 - Relative Path Traversal
CVE-2022-23620
CWE-23 Low
No
No
13.6 09.02.2022 SB2022020951
#VU130031 - Exposure of sensitive information to an unauthorized actor
CVE-2022-23619
CWE-200 Medium
No
No
12.10.9, 13.4.1, 13.6 09.02.2022 SB2022020951
#VU130032 - URL Redirection to Untrusted Site ('Open Redirect')
CVE-2022-23618
CWE-601 Medium
No
No
12.10.7, 13.3 09.02.2022 SB2021070132
#VU130034 - Missing Authorization
CVE-2022-23617
CWE-862 Low
No
No
12.10.6, 13.2 09.02.2022 SB2021070132
#VU130038 - Improper Privilege Management
CVE-2022-23616
CWE-269 Medium
No
No
13.1 09.02.2022 SB2022020950
#VU130033 - Incomplete List of Disallowed Inputs
CVE-2021-43841
CWE-184 Low
No
No
12.10.6, 13.3 04.02.2022 SB2021070132
#VU130035 - Exposure of Sensitive Information Through Data Queries
CVE-2021-32732
CWE-202 Medium
No
No
12.10.5, 13.2 04.02.2022 SB2021070132


Showing elements 201 - 220 out of 232