Known vulnerabilities in XWiki platform - page 7

Vendor: XWiki
Software CPE: cpe:2.3:a:xwiki:xwiki-platform:*:*:*:*:*:*:*:*
Total vulnerabilities: 232
Public exploits: 2
Known exploited (KEV): 1
Highest CVSSv4 Score: 9.4

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting XWiki platform XWiki platform is affected by 232 known vulnerabilities: 29 high, 148 medium, 55 low Critical High Medium Low

Vulnerabilities (232)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU129953 - Missing Authorization
CVE-2023-37910
CWE-862 Medium
No
No
14.4.8, 14.10.4, 15.0 25.10.2023 SB2022112156
#VU129942 - Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS)
CVE-2023-40176
CWE-80 Medium
No
No
14.10.5, 15.1 rc-1 21.08.2023 SB2022112156
#VU129941 - Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS)
CVE-2023-36477
CWE-80 Medium
No
No
2.3-milestone-1, 14.10.6, 15.1 30.06.2023 SB2022112156
#VU129940 - Eval Injection
CVE-2023-36470
CWE-95 Medium
No
No
14.10.6, 15.2 29.06.2023 SB2022112156
#VU129943 - Improper Neutralization of Alternate XSS Syntax
CVE-2023-35160
CWE-87 High
No
No
14.10.5, 15.1 rc-1 22.06.2023 SB2022112156
#VU129951 - Improper Neutralization of Alternate XSS Syntax
CVE-2023-35158
CWE-87 High
No
No
14.10.5, 15.1 rc-1 22.06.2023 SB2022112156
#VU129944 - Improper Neutralization of Alternate XSS Syntax
CVE-2023-35156
CWE-87 High
No
No
14.10.6, 15.1 22.06.2023 SB2022112156
#VU129937 - Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS)
CVE-2023-35157
CWE-80 Low
No
No
14.10.6, 15.1 rc-1 22.06.2023 SB2022112156
#VU129945 - Incorrect Authorization
CVE-2023-35166
CWE-863 Medium
No
No
14.10.5, 15.1 rc-1 20.06.2023 SB2022112156
#VU129952 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2023-35155
CWE-79 Medium
No
No
14.4.8, 14.10.4, 15.0 20.06.2023 SB2022112156
#VU129948 - Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS)
CVE-2023-35153
CWE-80 Medium
No
No
14.4.8, 14.10.4, 15.0 20.06.2023 SB2022112156
#VU129939 - Exposure of Private Information ('Privacy Violation')
CVE-2023-35151
CWE-359 Medium
No
No
14.4.8, 14.10.6, 15.1 20.06.2023 SB2022112156
#VU129955 - Transmission of Private Resources into a New Sphere ('Resource Leak')
CVE-2023-34467
CWE-402 Medium
No
No
14.4.8, 14.10.4, 15.0 20.06.2023 SB2022112156
#VU129947 - Insufficiently Protected Credentials
CVE-2023-34465
CWE-522 Medium
No
No
14.4.8, 14.10.6, 15.1 20.06.2023 SB2022112156
#VU129938 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2023-34464
CWE-79 Low
No
No
14.4.8, 14.10.5, 15.1 rc-1 20.06.2023 SB2022112156
#VU129946 - URL Redirection to Untrusted Site ('Open Redirect')
CVE-2023-32068
CWE-601 Medium
No
No
14.10.4, 15.0 15.05.2023 SB2022112156
#VU129950 - Incorrect Authorization
CVE-2023-32069
CWE-863 Medium
No
No
14.10.4, 15.0 09.05.2023 SB2022112156
#VU129949 - Improper Encoding or Escaping of Output
CVE-2023-32071
CWE-116 Medium
No
No
14.4.8, 14.10.4, 15.0 09.05.2023 SB2022112156
#VU129957 - Improper Encoding or Escaping of Output
CVE-2023-29525
CWE-116 Medium
No
No
13.10.11, 14.4.8, 14.6, 14.10.3, 15.0 18.04.2023 SB2022112156
#VU129954 - Improper Access Control
CVE-2023-29527
CWE-284 Medium
No
No
14.10.3, 15.0 18.04.2023 SB2022112156


Showing elements 121 - 140 out of 232