Known vulnerabilities in XWiki platform - page 12

Vendor: XWiki
Software CPE: cpe:2.3:a:xwiki:xwiki-platform:*:*:*:*:*:*:*:*
Total vulnerabilities: 232
Public exploits: 2
Known exploited (KEV): 1
Highest CVSSv4 Score: 9.4

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting XWiki platform XWiki platform is affected by 232 known vulnerabilities: 29 high, 148 medium, 55 low Critical High Medium Low

Vulnerabilities (232)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU130041 - Improper Access Control
CVE-2022-23615
CWE-284 Low
No
No
13.0 09.02.2022 SB2021051825
#VU130036 - Exposure of sensitive information to an unauthorized actor
CVE-2021-32731
CWE-200 Medium
No
No
13.2 01.07.2021 SB2021070132
#VU130037 - Cross-Site Request Forgery (CSRF)
CVE-2021-32730
CWE-352 Low
No
No
12.10.5, 13.2 01.07.2021 SB2021070132
#VU130039 - Protection Mechanism Failure
CVE-2021-32729
CWE-693 Low
No
No
12.6.8, 12.10.4, 13.0 01.07.2021 SB2021051825
#VU130040 - Improper Access Control
CVE-2021-32621
CWE-284 Medium
No
No
12.6.7, 12.10.3, 13.0 18.05.2021 SB2021051825
#VU130042 - Improper Access Control
CVE-2021-32620
CWE-284 Low
No
No
11.10.13, 12.6.7, 12.10.2, 13.0 18.05.2021 SB2021051825
#VU52470 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2021-29459
CWE-79 Low
No
No
12.6.3, 12.8 21.04.2021 SB2021042153
#VU130043 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2021-21380
CWE-89 Low
No
No
12.9 19.03.2021 SB2021031924
#VU51504 - Improper Control of Generation of Code ('Code Injection')
CVE-2021-21379
CWE-94 High
No
No
11.10.11, 12.6.3, 12.8 rc-1 16.03.2021 SB2021031615
#VU47734 - Improper Control of Generation of Code ('Code Injection')
CVE-2020-15252
CWE-94 Medium
No
No
11.10.6, 12.5 16.10.2020 SB2020102007
#VU46725 - Improper Control of Generation of Code ('Code Injection')
CVE-2020-15171
CWE-94 Medium
No
No
11.10.5, 12.2.1 10.09.2020 SB2020091508
#VU28176 - Improper Control of Generation of Code ('Code Injection')
CVE-2020-11057
CWE-94 Medium
No
No
11.3.7, 11.10.3, 12.0 22.05.2020 SB2020052203


Showing elements 221 - 240 out of 232