Known vulnerabilities in XWiki platform - page 6
Vendor:
XWiki
Software:
XWiki platform
Software CPE:
cpe:2.3:a:xwiki:xwiki-platform:*:*:*:*:*:*:*:*
Total vulnerabilities:
232
Public exploits:
2
Known exploited (KEV):
1
Highest CVSSv4 Score:
9.4
Breakdown by Severity Chart
18.4.3
17.10.11
18.6.0
17.10.10
18.4.2
18.5.0
16.10.18
18.4.1
17.10.9
18.4.0
17.10.8
18.3.0
18.2.1
17.10.7
17.10.6
17.10.5
18.2.0
17.10.4
18.1.0
17.4.10
16.10.17
17.4.9
18.0.1
17.10.3
18.0.0
17.8.0-rc-1
17.4.8
16.10.16
17.10.2
17.10.1
16.10.15
17.10.0
17.4.7
16.10.14
17.9.0
16.10.13
17.4.6
17.4.5
16.10.12
17.8.0
16.10.11
17.7.0
17.4.4
17.4.3
16.10.10
17.6.0
9.4-rc-1
17.3.0-rc-1
17.4.2
17.5.0
16.10.9
17.4.1
17.4.0
16.10.8
16.10.7
16.4.8
14.10.22
17.3.0
16.10.6
17.2.2
17.2.1
17.2.0
16.10.0-rc-1
16.10.5
16.4.7
17.1.0
16.10.4
17.0.0
16.10.3
15.10.16
16.10.2
16.4.6
16.10.1
15.10.15
16.10.0
15.10.14
16.4.5
16.9.0
15.10.13
16.4.4
16.8.0
16.7.1
16.4.3
15.10.12
15.1-rc-1
16.7.0
16.4.2
16.6.0
16.4.1
15.10.11
16.5.0
16.4.0
15.10.10
15.10.9
16.3.1
16.3.0
15.10.8
16.2.0
15.10.7
16.1.0
14.10.21
15.10.6
15.5.5
16.0.0
15.10.5
15.10.4
15.10.3
15.10.2
15.10.1
15.10
15.9
15.8
15.7
15.6
15.5.4
15.5.3
15.5.2
15.5.1
15.5
15.4
15.3
15.2
15.1
15.0
14.10.20
14.10.19
14.10.18
14.10.17
14.10.16
14.10.15
14.10.14
14.10.13
14.10.12
14.10.11
14.10.10
14.10.9
14.10.8
14.10.7
14.10.6
14.10.5
14.10.4
14.10.3
14.10.2
14.10.1
14.6
14.4.8
14.4.4
14.4.3
14.4.2
14.4.1
14.4
14.3.1
14.2.1
14.2
14.1
13.10.8
13.10.7
13.10.6
13.10.5
13.10.4
13.10.2
13.10.1
13.9
13.8
13.7
13.6
13.5
13.4.7
13.4.6
13.4.5
13.4.3
13.4.2
13.4.1
13.4
13.3
13.2
13.1
13.0
12.10.11
12.10.10
12.10.9
12.10.8
12.10.7
12.10.6
12.10.5
12.10.4
12.10.3
12.10.2
12.10.1
12.10
12.9
12.6.8
12.6.7
12.6.6
12.6.5
12.6.4
12.6.1
12.6
12.5.1
12.3
12.2
12.1
11.10.13
11.10.12
11.10.8
11.10.7
11.10.4
11.10.1
11.10
11.9
11.8.1
11.8
11.7
11.6.1
11.5
11.3.6
11.3.5
11.3.4
11.3.3
11.3.2
11.3.1
11.3
11.2
11.1
11.0.3
11.0.2
11.0.1
11.0
10.11.11
10.11.10
10.11.9
10.11.8
10.11.7
10.11.6
10.11.5
10.11.4
10.11.3
10.11.2
10.11.1
10.11
10.10
10.9
10.8.3
10.8.2
10.8.1
10.8
10.7.1
10.7
10.6.1
10.6
10.5
10.4
10.3
10.2
10.1
10.0
9.11.9
9.11.8
9.11.7
9.11.6
9.11.5
9.11.4
9.11.3
9.11.2
9.11.1
9.11
9.10.1
9.10
9.9
9.8.1
9.8
9.7
9.6
9.5.1
9.5
9.4
9.3.1
9.3
9.2
9.1.2
9.1.1
9.1
9.0
8.4.6
8.4.5
8.4.4
8.4.3
8.4.2
8.4.1
8.4
8.2.2
8.2.1
8.2
8.1
8.0
7.4.6
7.4.5
7.4.4
7.4.3
7.4.2
7.4.1
7.4
7.3
7.2
7.1.4
7.1.3
7.1.2
7.1.1
7.1
7.0.1
7.0
6.4.8
6.4.7
6.4.6
6.4.5
6.4.4
6.4.3
6.4.2
6.4.1
6.4
6.2.7
6.2.6
6.2.5
6.2.3
6.2.2
6.2.1
6.2
6.1
6.0.1
5.4.7
5.4.6
5.4.5
5.4.4
5.4.3
5.4.2
5.4.1
5.4
5.3
5.2.4
5.2.3
5.2.2
5.2.1
5.2
5.1
5.0.3
5.0.2
5.0.1
5.0
4.5.4
4.5.3
4.5.2
4.5.1
4.5
4.4.1
4.4
4.3.1
4.3
4.2
4.1.4
4.1.3
4.1.2
4.1.1
4.1
4.0.1
4.0
3.5.1
3.5
3.4
3.3.1
3.3
3.2.1
3.2
3.1.1
3.1
3.0.1
6.0
14.3-rc-1
3.2-m3
13.10.9
13.4.4
14.7-rc-1
2.3-milestone-1
14.5
13.10
1.3-rc-1
14.10
14.4.7
13.10.11
6.2-milestone-1
14.9
11.6-rc-1
14.0-rc-1
3.0-milestone-1
14.4.5
14.8-rc-1
6.3-rc-1
6.2.4
14.4.6
14.9-rc-1
13.10.10
13.10.3
14.0
8.3-rc-1
12.8
12.7.1
12.7
12.6.2
11.10.10
11.4-rc-1
12.8-rc-1
11.10.11
12.6.3
12.4
11.10.6
12.5
12.2.1
11.10.5
11.10.2
12.0
11.10.3
11.3.7
Vulnerabilities (232)
| Vulnerability | CWE-ID | CSH Severity | Public Exploit | KEV | First fixed release | Published | Bulletins |
|---|---|---|---|---|---|---|---|
| #VU129930 - Incorrect Authorization CVE-2023-50732 |
CWE-863 | High | 14.10.7, 15.2 | 19.12.2023 |
SB2022112156 |
||
| #VU129931 - Incorrect Authorization CVE-2023-46244 |
CWE-863 | Low | 14.10.7, 15.2 | 07.11.2023 |
SB2022112156 |
||
| #VU129932 - Incorrect Authorization CVE-2023-46243 |
CWE-863 | Medium | 14.10.6, 15.2 | 07.11.2023 |
SB2022112156 |
||
| #VU129926 - Cross-Site Request Forgery (CSRF) CVE-2023-46242 |
CWE-352 | High | 14.10.7, 15.2 | 07.11.2023 |
SB2022112156 |
||
| #VU129929 - Relative Path Traversal CVE-2023-37913 |
CWE-23 | Medium | 14.10.8, 15.3 | 25.10.2023 |
SB2022112156 |
||
| #VU129923 - Exposure of resource to wrong sphere CVE-2023-37911 |
CWE-668 | Low | 14.10.8, 15.3 | 25.10.2023 |
SB2022112156 |
||
| #VU129925 - Eval Injection CVE-2023-37909 |
CWE-95 | Medium | 14.10.8, 15.3 | 25.10.2023 |
SB2022112156 |
||
| #VU129919 - Incorrect Authorization CVE-2023-41046 |
CWE-863 | Low | 14.10.10, 15.4 | 01.09.2023 |
SB2022112156 |
||
| #VU129921 - Improper Access Control CVE-2023-40573 |
CWE-284 | Medium | 14.10.9, 15.4 | 23.08.2023 |
SB2022112156 |
||
| #VU129922 - Cross-Site Request Forgery (CSRF) CVE-2023-40572 |
CWE-352 | Medium | 14.10.9, 15.4 | 23.08.2023 |
SB2022112156 |
||
| #VU129934 - Eval Injection CVE-2023-40177 |
CWE-95 | Medium | 14.10.5, 15.1 rc-1 | 21.08.2023 |
SB2022112156 |
||
| #VU129935 - Eval Injection CVE-2023-37914 |
CWE-95 | Medium | 14.4.8, 14.10.6, 15.2 | 17.08.2023 |
SB2022112156 |
||
| #VU129924 - Transmission of Private Resources into a New Sphere ('Resource Leak') CVE-2023-38509 |
CWE-402 | Low | 14.10.9, 15.3 | 27.07.2023 |
SB2022112156 |
||
| #VU129927 - Cross-Site Request Forgery (CSRF) CVE-2023-37277 |
CWE-352 | High | 14.10.8, 15.2 | 10.07.2023 |
SB2022112156 |
||
| #VU129933 - Eval Injection CVE-2023-36469 |
CWE-95 | Medium | 14.10.6, 15.2 | 29.06.2023 |
SB2022112156 |
||
| #VU129928 - Incorrect Privilege Assignment CVE-2023-36468 |
CWE-266 | Medium | 14.10.7, 15.2 | 29.06.2023 |
SB2022112156 |
||
| #VU129936 - Eval Injection CVE-2023-35152 |
CWE-95 | Medium | 14.4.8, 14.10.6, 15.1 | 20.06.2023 |
SB2022112156 |
||
| #VU72772 - Resource exhaustion CVE-2023-26470 |
CWE-400 | Medium | 14.0 rc-1 | 06.03.2023 |
SB2023030624 |
||
| #VU72770 - Incorrect Authorization CVE-2023-26056 |
CWE-863 | Medium | 13.10.10, 14.4.5, 14.8 rc-1 | 06.03.2023 |
SB2023030622 |
||
| #VU72766 - Improper Control of Generation of Code ('Code Injection') CVE-2023-26477 |
CWE-94 | High | 13.10.10, 14.4.6, 14.9 rc-1 | 06.03.2023 |
SB2023030611 |
Showing elements 101 - 120 out of 232