xwiki Vulnerability Advisory Catalog

Total 282 security vulnerabilities recorded for xwiki software and firmware.

← Back to All Vendors
Component: cryptpad

CryptPad 2025.3.1 allows unbounded WebSocket frame flood. A remote, unauthenticated attacker can significantly degrade or deny service for all users o...

📅 2026-04-30
CVSS 7.5 Dossier →
Component: xwiki

XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. Versions 10.4-rc-1, through 16.10.15, 17.0.0...

📅 2026-04-15
CVSS 6.1 Dossier →
Component: xwiki

XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. Versions 1.8-rc-1, 17.0.0-rc-1 and 17.5.0-rc-...

📅 2026-04-15
CVSS 8.2 Dossier →
CVE-2026-33229 CRITICAL
Component: xwiki

XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. Prior to 17.4.8 and 17.10.1, an improperly pr...

📅 2026-04-08
CVSS 9.8 Dossier →
CVE-2025-66024 CRITICAL
Component: blog_application

The XWiki blog application allows users of the XWiki platform to create and manage blog posts. Versions prior to 9.15.7 are vulnerable to Stored Cross...

📅 2026-03-04
CVSS 9.0 Dossier →
Component: xwiki

XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. Prior to 17.9.0, 17.4.6, and 16.10.13, it's p...

📅 2026-02-12
CVSS 6.1 Dossier →
Component: xwiki

XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. Versions 7.0-milestone-2 through 16.10.11, 17...

📅 2026-01-24
CVSS 6.1 Dossier →
CVE-2025-65091 CRITICAL
Component: full_calendar_macro

XWiki Full Calendar Macro displays objects from the wiki on the calendar. Prior to version 2.4.5, users with the right to view the Calendar.JSONServic...

📅 2026-01-10
CVSS 10.0 Dossier →
Component: full_calendar_macro

XWiki Full Calendar Macro displays objects from the wiki on the calendar. Prior to version 2.4.6, users with the rights to view the Calendar.JSONServi...

📅 2026-01-10
CVSS 5.3 Dossier →
Component: xwiki-rendering

XWiki Rendering is a generic rendering system that converts textual input in a given syntax (wiki syntax, HTML, etc) into another syntax (XHTML, etc)....

📅 2025-12-10
CVSS 8.8 Dossier →
Component: xwiki

XWiki is an open-source wiki software platform. Versions 16.10.10 and below, 17.0.0-rc-1 through 17.4.3 and 17.5.0-rc-1 through 17.6.0 contain a REST ...

📅 2025-12-10
CVSS 7.5 Dossier →
Component: xwiki

XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. Versions 6.2-milestone-1 through 16.10.9 and ...

📅 2025-12-10
CVSS 6.1 Dossier →
Component: pro_macros

XWiki Remote Macros provides XWiki rendering macros that are useful when migrating content from Confluence. Prior to 1.27.1, the macro executes Veloci...

📅 2025-12-05
CVSS 8.3 Dossier →
Component: xwiki

XWiki is an open-source wiki software platform. From 16.7.0 to 16.10.11, 17.4.4, or 17.7.0, in an instance which is using the XWiki Jetty package (XJe...

📅 2025-12-01
CVSS 7.5 Dossier →
Component: pro_macros

XWiki Remote Macros provides XWiki rendering macros that are useful when migrating content from Confluence. Prior to version 1.27.0, a user with no vi...

📅 2025-11-19
CVSS 6.8 Dossier →
CVE-2025-55728 CRITICAL
Component: pro_macros

XWiki Remote Macros provides XWiki rendering macros that are useful when migrating content from Confluence. Starting in version 1.0 and prior to versi...

📅 2025-09-09
CVSS 10.0 Dossier →
CVE-2025-55727 CRITICAL
Component: pro_macros

XWiki Remote Macros provides XWiki rendering macros that are useful when migrating content from Confluence. Starting in version 1.0 and prior to versi...

📅 2025-09-09
CVSS 10.0 Dossier →
Component: xwiki

XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. In versions 4.2-milestone-2 through 16.10.6, ...

📅 2025-09-03
CVSS 7.5 Dossier →
CVE-2025-55747 CRITICAL
Component: xwiki

XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. In versions 6.1-milestone-2 through 16.10.6,...

📅 2025-09-03
CVSS 9.1 Dossier →
Component: xwiki

XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. In versions from 14.4.2 to before 16.4.8, 16....

📅 2025-08-28
CVSS 5.8 Dossier →
Component: xwiki

XWiki through version 17.3.0 is vulnerable to Server-Side Template Injection (SSTI) in the Administration interface, specifically within the HTTP Meta...

📅 2025-08-20
CVSS 8.8 Dossier →
Component: xwiki

XWiki through version 17.3.0 is affected by multiple stored Cross-Site Scripting (XSS) vulnerabilities in the Administration interface, specifically u...

📅 2025-08-20
CVSS 4.8 Dossier →
Component: xwiki

XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. XWiki Platform Legacy Old Core and XWiki Plat...

📅 2025-08-06
CVSS 6.5 Dossier →
Component: xwiki

XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. XWiki Platform Legacy Old Core and XWiki Plat...

📅 2025-08-06
CVSS 6.5 Dossier →
Page 1 of 12 (282 Total Records)