Known vulnerabilities in XWiki platform - page 4
Vendor:
XWiki
Software:
XWiki platform
Software CPE:
cpe:2.3:a:xwiki:xwiki-platform:*:*:*:*:*:*:*:*
Total vulnerabilities:
232
Public exploits:
2
Known exploited (KEV):
1
Highest CVSSv4 Score:
9.4
Breakdown by Severity Chart
18.4.3
17.10.11
18.6.0
17.10.10
18.4.2
18.5.0
16.10.18
18.4.1
17.10.9
18.4.0
17.10.8
18.3.0
18.2.1
17.10.7
17.10.6
17.10.5
18.2.0
17.10.4
18.1.0
17.4.10
16.10.17
17.4.9
18.0.1
17.10.3
18.0.0
17.8.0-rc-1
17.4.8
16.10.16
17.10.2
17.10.1
16.10.15
17.10.0
17.4.7
16.10.14
17.9.0
16.10.13
17.4.6
17.4.5
16.10.12
17.8.0
16.10.11
17.7.0
17.4.4
17.4.3
16.10.10
17.6.0
9.4-rc-1
17.3.0-rc-1
17.4.2
17.5.0
16.10.9
17.4.1
17.4.0
16.10.8
16.10.7
16.4.8
14.10.22
17.3.0
16.10.6
17.2.2
17.2.1
17.2.0
16.10.0-rc-1
16.10.5
16.4.7
17.1.0
16.10.4
17.0.0
16.10.3
15.10.16
16.10.2
16.4.6
16.10.1
15.10.15
16.10.0
15.10.14
16.4.5
16.9.0
15.10.13
16.4.4
16.8.0
16.7.1
16.4.3
15.10.12
15.1-rc-1
16.7.0
16.4.2
16.6.0
16.4.1
15.10.11
16.5.0
16.4.0
15.10.10
15.10.9
16.3.1
16.3.0
15.10.8
16.2.0
15.10.7
16.1.0
14.10.21
15.10.6
15.5.5
16.0.0
15.10.5
15.10.4
15.10.3
15.10.2
15.10.1
15.10
15.9
15.8
15.7
15.6
15.5.4
15.5.3
15.5.2
15.5.1
15.5
15.4
15.3
15.2
15.1
15.0
14.10.20
14.10.19
14.10.18
14.10.17
14.10.16
14.10.15
14.10.14
14.10.13
14.10.12
14.10.11
14.10.10
14.10.9
14.10.8
14.10.7
14.10.6
14.10.5
14.10.4
14.10.3
14.10.2
14.10.1
14.6
14.4.8
14.4.4
14.4.3
14.4.2
14.4.1
14.4
14.3.1
14.2.1
14.2
14.1
13.10.8
13.10.7
13.10.6
13.10.5
13.10.4
13.10.2
13.10.1
13.9
13.8
13.7
13.6
13.5
13.4.7
13.4.6
13.4.5
13.4.3
13.4.2
13.4.1
13.4
13.3
13.2
13.1
13.0
12.10.11
12.10.10
12.10.9
12.10.8
12.10.7
12.10.6
12.10.5
12.10.4
12.10.3
12.10.2
12.10.1
12.10
12.9
12.6.8
12.6.7
12.6.6
12.6.5
12.6.4
12.6.1
12.6
12.5.1
12.3
12.2
12.1
11.10.13
11.10.12
11.10.8
11.10.7
11.10.4
11.10.1
11.10
11.9
11.8.1
11.8
11.7
11.6.1
11.5
11.3.6
11.3.5
11.3.4
11.3.3
11.3.2
11.3.1
11.3
11.2
11.1
11.0.3
11.0.2
11.0.1
11.0
10.11.11
10.11.10
10.11.9
10.11.8
10.11.7
10.11.6
10.11.5
10.11.4
10.11.3
10.11.2
10.11.1
10.11
10.10
10.9
10.8.3
10.8.2
10.8.1
10.8
10.7.1
10.7
10.6.1
10.6
10.5
10.4
10.3
10.2
10.1
10.0
9.11.9
9.11.8
9.11.7
9.11.6
9.11.5
9.11.4
9.11.3
9.11.2
9.11.1
9.11
9.10.1
9.10
9.9
9.8.1
9.8
9.7
9.6
9.5.1
9.5
9.4
9.3.1
9.3
9.2
9.1.2
9.1.1
9.1
9.0
8.4.6
8.4.5
8.4.4
8.4.3
8.4.2
8.4.1
8.4
8.2.2
8.2.1
8.2
8.1
8.0
7.4.6
7.4.5
7.4.4
7.4.3
7.4.2
7.4.1
7.4
7.3
7.2
7.1.4
7.1.3
7.1.2
7.1.1
7.1
7.0.1
7.0
6.4.8
6.4.7
6.4.6
6.4.5
6.4.4
6.4.3
6.4.2
6.4.1
6.4
6.2.7
6.2.6
6.2.5
6.2.3
6.2.2
6.2.1
6.2
6.1
6.0.1
5.4.7
5.4.6
5.4.5
5.4.4
5.4.3
5.4.2
5.4.1
5.4
5.3
5.2.4
5.2.3
5.2.2
5.2.1
5.2
5.1
5.0.3
5.0.2
5.0.1
5.0
4.5.4
4.5.3
4.5.2
4.5.1
4.5
4.4.1
4.4
4.3.1
4.3
4.2
4.1.4
4.1.3
4.1.2
4.1.1
4.1
4.0.1
4.0
3.5.1
3.5
3.4
3.3.1
3.3
3.2.1
3.2
3.1.1
3.1
3.0.1
6.0
14.3-rc-1
3.2-m3
13.10.9
13.4.4
14.7-rc-1
2.3-milestone-1
14.5
13.10
1.3-rc-1
14.10
14.4.7
13.10.11
6.2-milestone-1
14.9
11.6-rc-1
14.0-rc-1
3.0-milestone-1
14.4.5
14.8-rc-1
6.3-rc-1
6.2.4
14.4.6
14.9-rc-1
13.10.10
13.10.3
14.0
8.3-rc-1
12.8
12.7.1
12.7
12.6.2
11.10.10
11.4-rc-1
12.8-rc-1
11.10.11
12.6.3
12.4
11.10.6
12.5
12.2.1
11.10.5
11.10.2
12.0
11.10.3
11.3.7
Vulnerabilities (232)
| Vulnerability | CWE-ID | CSH Severity | Public Exploit | KEV | First fixed release | Published | Bulletins |
|---|---|---|---|---|---|---|---|
| #VU126942 - Incorrect Use of Privileged APIs CVE-2024-46978 |
CWE-648 | Low | 14.10.21, 15.5.5, 15.10.1 | 18.09.2024 |
SB20240620276 |
||
| #VU126943 - Exposure of Private Information ('Privacy Violation') CVE-2024-46979 |
CWE-359 | Medium | 14.10.21, 15.5.5, 15.10.1 | 18.09.2024 |
SB20240620276 |
||
| #VU125599 - Incorrect Privilege Assignment CVE-2024-37899 |
CWE-266 | Medium | 14.10.21, 15.5.5, 15.10.6, 16.0.0 | 20.06.2024 |
SB20240620276 |
||
| #VU129905 - Missing Authorization CVE-2024-31997 |
CWE-862 | Medium | 14.10.19, 15.5.4, 15.9 | 10.04.2024 |
SB2024041093 |
||
| #VU129908 - Cross-Site Request Forgery (CSRF) CVE-2024-31985 |
CWE-352 | Medium | 14.10.19, 15.5.4, 15.9 | 10.04.2024 |
SB2024041093 |
||
| #VU129906 - Cross-Site Request Forgery (CSRF) CVE-2024-31988 |
CWE-352 | High | 14.10.19, 15.5.4, 15.9 | 10.04.2024 |
SB2024041093 |
||
| #VU129901 - Missing Authorization CVE-2024-31987 |
CWE-862 | Medium | 14.10.19, 15.5.4, 15.10 | 10.04.2024 |
SB2024041093 |
||
| #VU129907 - Eval Injection CVE-2024-31986 |
CWE-95 | Medium | 14.10.19, 15.5.4, 15.9 | 10.04.2024 |
SB2024041093 |
||
| #VU129899 - Eval Injection CVE-2024-31982 |
CWE-95 | High | 14.10.20, 15.5.4, 15.10 | 10.04.2024 |
SB2024041093 |
||
| #VU129903 - Missing Authorization CVE-2024-31981 |
CWE-862 | Medium | 14.10.19, 15.5.4, 15.9 | 10.04.2024 |
SB2024041093 |
||
| #VU129898 - Eval Injection CVE-2024-31465 |
CWE-95 | Medium | 14.10.20, 15.5.4, 15.10 | 10.04.2024 |
SB2024041093 |
||
| #VU129900 - Eval Injection CVE-2024-31984 |
CWE-95 | Medium | 14.10.20, 15.5.4, 15.10 | 10.04.2024 |
SB2024041093 |
||
| #VU129902 - Missing Authorization CVE-2024-31983 |
CWE-862 | Medium | 14.10.20, 15.5.4, 15.10 | 10.04.2024 |
SB2024041093 |
||
| #VU129904 - Exposure of sensitive information to an unauthorized actor CVE-2024-31464 |
CWE-200 | Low | 14.10.19, 15.5.4, 15.9 | 10.04.2024 |
SB2024041093 |
||
| #VU129909 - Resource exhaustion CVE-2024-21651 |
CWE-400 | Medium | 14.10.18, 15.5.3, 15.8 | 08.01.2024 |
SB2024010844 |
||
| #VU129910 - Eval Injection CVE-2024-21650 |
CWE-95 | High | 14.10.17, 15.5.3, 15.8 | 08.01.2024 |
SB2024010844 |
||
| #VU129911 - Improper Handling of Insufficient Privileges CVE-2024-21648 |
CWE-274 | Medium | 14.10.17, 15.5.3, 15.8 | 08.01.2024 |
SB2024010844 |
||
| #VU84517 - Improper Control of Generation of Code ('Code Injection') CVE-2023-37462 |
CWE-94 | Medium | 14.4.8, 14.10.4, 15.0 | 18.12.2023 |
SB2023121842 |
||
| #VU84516 - Improper Control of Generation of Code ('Code Injection') CVE-2023-50723 |
CWE-94 | Medium | 14.10.15, 15.5.2, 15.7 | 18.12.2023 |
SB2023121841 |
||
| #VU84515 - Exposure of sensitive information to an unauthorized actor CVE-2023-50720 |
CWE-200 | Low | 14.10.15, 15.5.2, 15.7 | 18.12.2023 |
SB2023121841 |
Showing elements 61 - 80 out of 232