Known vulnerabilities in XWiki platform - page 5

Vendor: XWiki
Software CPE: cpe:2.3:a:xwiki:xwiki-platform:*:*:*:*:*:*:*:*
Total vulnerabilities: 232
Public exploits: 2
Known exploited (KEV): 1
Highest CVSSv4 Score: 9.4

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting XWiki platform XWiki platform is affected by 232 known vulnerabilities: 29 high, 148 medium, 55 low Critical High Medium Low

Vulnerabilities (232)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU84514 - Improper Control of Generation of Code ('Code Injection')
CVE-2023-50721
CWE-94 Low
No
No
14.10.15, 15.5.2, 15.7 18.12.2023 SB2023121841
#VU84504 - Exposure of sensitive information to an unauthorized actor
CVE-2023-50719
CWE-200 Medium
No
No
14.10.15, 15.5.2, 15.7 18.12.2023 SB2023121841
#VU84502 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2023-50722
CWE-79 Medium
No
No
14.10.15, 15.5.2, 15.7 18.12.2023 SB2023121841
#VU129912 - Improper Authorization
CVE-2023-48241
CWE-285 Medium
No
No
14.10.15, 15.5.1, 15.6 20.11.2023 SB2023112082
#VU129920 - Server-Side Request Forgery (SSRF)
CVE-2023-48240
CWE-918 Medium
No
No
14.10.15, 15.5.1, 15.6 20.11.2023 SB2023112082
#VU129914 - Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS)
CVE-2023-46732
CWE-80 High
No
No
14.10.14, 15.5.1 06.11.2023 SB2023112082
#VU129913 - Eval Injection
CVE-2023-46731
CWE-95 High
No
No
14.10.14, 15.5.1 06.11.2023 SB2023112082
#VU129915 - Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS)
CVE-2023-45134
CWE-80 Medium
No
No
3.1.1, 13.4, 14.10.12, 15.5 25.10.2023 SB2023102578
#VU129917 - Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS)
CVE-2023-45136
CWE-80 High
No
No
14.10.12, 15.5 25.10.2023 SB2023102578
#VU129918 - Improper Control of Generation of Code ('Code Injection')
CVE-2023-45135
CWE-94 Medium
No
No
14.10.12, 15.5 25.10.2023 SB2023102578
#VU129916 - Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS)
CVE-2023-45137
CWE-80 Medium
No
No
13.4, 14.10.12, 15.5 25.10.2023 SB2023102578
#VU129992 - Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS)
CVE-2023-29206
CWE-80 Medium
No
No
14.9 rc-1 12.04.2023 SB2023041279
#VU72780 - Improper Handling of Exceptional Conditions
CVE-2023-26479
CWE-755 Medium
No
No
13.10.10, 14.4.6, 14.9 rc-1 06.03.2023 SB2023030625
#VU72779 - Exposed Dangerous Method or Function
CVE-2023-26478
CWE-749 Low
No
No
14.4.6, 14.9 rc-1 06.03.2023 SB2023030625
#VU72778 - Exposure of sensitive information to an unauthorized actor
CVE-2023-26476
CWE-200 Medium
No
No
13.4.4, 13.10.9, 14.7 rc-1 06.03.2023 SB2023030628
#VU72777 - Improper Control of Generation of Code ('Code Injection')
CVE-2023-26475
CWE-94 Medium
No
No
13.10.11, 14.4.7, 14.10 06.03.2023 SB2023030627
#VU72776 - Improper Access Control
CVE-2023-26474
CWE-284 Medium
No
No
13.10.11, 14.4.7, 14.10 06.03.2023 SB2023030627
#VU72775 - Improper Access Control
CVE-2023-26473
CWE-284 Medium
No
No
13.10.11, 14.4.7, 14.10 06.03.2023 SB2023030627
#VU72774 - Permissions, Privileges, and Access Controls
CVE-2023-26472
CWE-264 Medium
No
No
13.10.10, 14.4.6, 14.9 06.03.2023 SB2023030626
#VU72773 - Improper Access Control
CVE-2023-26471
CWE-284 Medium
No
No
13.10.10, 14.4.6, 14.9 06.03.2023 SB2023030625


Showing elements 81 - 100 out of 232