xwiki Vulnerability Advisory Catalog

Total 282 security vulnerabilities recorded for xwiki software and firmware.

← Back to All Vendors
Component: xwiki

XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. In versions 4.2-milestone-3 through 16.4.7, 1...

📅 2025-08-06
CVSS 6.1 Dossier →
CVE-2025-54385 CRITICAL
Component: xwiki

XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. In versions between 17.0.0-rc1 to 17.2.2 and ...

📅 2025-07-26
CVSS 9.8 Dossier →
CVE-2025-32429 CRITICAL
Component: xwiki

XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. In versions 9.4-rc-1 through 16.10.5 and 17.0...

📅 2025-07-24
CVSS 9.8 Dossier →
CVE-2025-53836 CRITICAL
Component: xwiki

XWiki Rendering is a generic rendering system that converts textual input in a given syntax (wiki syntax, HTML, etc) into another syntax (XHTML, etc)....

📅 2025-07-15
CVSS 9.9 Dossier →
CVE-2025-53835 CRITICAL
Component: xwiki

XWiki Rendering is a generic rendering system that converts textual input in a given syntax (wiki syntax, HTML, etc) into another syntax (XHTML, etc)....

📅 2025-07-14
CVSS 9.0 Dossier →
CVE-2025-49591 CRITICAL
Component: cryptpad

CryptPad is a collaboration suite. Prior to version 2025.3.0, enforcement of Two-Factor Authentication (2FA) in CryptPad can be trivially bypassed, du...

📅 2025-06-18
CVSS 9.1 Dossier →
Component: cryptpad

CryptPad is a collaboration suite. Prior to version 2025.3.0, the "Link Bouncer" functionality attempts to filter javascript URIs to prevent Cross-Sit...

📅 2025-06-18
CVSS 6.1 Dossier →
Component: xwiki

XWiki is an open-source wiki software platform. When a user without script right creates a document with an XWiki.Notifications.Code.NotificationDispl...

📅 2025-06-13
CVSS 8.0 Dossier →
Component: xwiki

XWiki is an open-source wiki software platform. Any XWiki user with edit right on at least one App Within Minutes application (the default for all use...

📅 2025-06-13
CVSS 8.8 Dossier →
Component: xwiki

XWiki is a generic wiki platform. In versions before 15.10.16, 16.0.0-rc-1 through 16.4.6, and 16.5.0-rc-1 through 16.10.1, when an attacker without s...

📅 2025-06-13
CVSS 8.0 Dossier →
Component: xwiki

XWiki is a generic wiki platform. In XWiki Platform versions 10.9 through 16.4.6, 16.5.0-rc-1 through 16.10.2, and 17.0.0-rc-1, the title of every sin...

📅 2025-06-13
CVSS 7.5 Dossier →
Component: xwiki

XWiki is a generic wiki platform. When a user without script right creates a document with an `XWiki.Notifications.Code.NotificationEmailRendererClass...

📅 2025-06-13
CVSS 3.5 Dossier →
Component: xwiki

XWiki is a generic wiki platform. When editing content that contains "dangerous" macros like malicious script macros that were authored by a user with...

📅 2025-06-13
CVSS 8.0 Dossier →
Component: xwiki

XWiki is a generic wiki platform. Any user with edit right on a page (could be the user's profile) can execute code (Groovy, Python, Velocity) with pr...

📅 2025-06-13
CVSS 8.8 Dossier →
Component: xwiki

XWiki is a generic wiki platform. From 8.2 and 7.4.5 until 17.1.0-rc-1, 16.10.4, and 16.4.7, pages can gain script or programming rights when they con...

📅 2025-06-13
CVSS 8.0 Dossier →
CVE-2024-56158 CRITICAL
Component: xwiki

XWiki is a generic wiki platform. It's possible to execute any SQL query in Oracle by using the function like DBMS_XMLGEN or DBMS_XMLQUERY. The XWiki ...

📅 2025-06-12
CVSS 9.8 Dossier →
Component: xwiki

XWiki is a generic wiki platform. In XWiki 16.10.0, required rights were introduced as a way to limit which rights a document can have. Part of the se...

📅 2025-05-21
CVSS 8.8 Dossier →
CVE-2025-46558 CRITICAL
Component: xwiki

XWiki Contrib's Syntax Markdown allows importing Markdown content into wiki pages and creating wiki content in Markdown. In versions starting from 8.2...

📅 2025-04-30
CVSS 9.0 Dossier →
CVE-2025-46557 CRITICAL
Component: xwiki

XWiki is a generic wiki platform. In versions starting from 15.3-rc-1 to before 15.10.14, from 16.0.0-rc-1 to before 16.4.6, and from 16.5.0-rc-1 to b...

📅 2025-04-30
CVSS 9.8 Dossier →
Component: xwiki

XWiki is a generic wiki platform. In versions starting from 1.8.1 to before 14.10.22, from 15.0-rc-1 to before 15.10.12, from 16.0.0-rc-1 to before 16...

📅 2025-04-30
CVSS 5.3 Dossier →
CVE-2025-32974 CRITICAL
Component: xwiki

XWiki is a generic wiki platform. In versions starting from 15.9-rc-1 to before 15.10.8 and from 16.0.0-rc-1 to before 16.2.0, the required rights ana...

📅 2025-04-30
CVSS 9.0 Dossier →
CVE-2025-32973 CRITICAL
Component: xwiki

XWiki is a generic wiki platform. In versions starting from 15.9-rc-1 to before 15.10.12, from 16.0.0-rc-1 to before 16.4.3, and from 16.5.0-rc-1 to b...

📅 2025-04-30
CVSS 9.0 Dossier →
Component: xwiki

XWiki is a generic wiki platform. In versions starting from 6.1-milestone-1 to before 15.10.12, from 16.0.0-rc-1 to before 16.4.3, and from 16.5.0-rc-...

📅 2025-04-30
CVSS 2.7 Dossier →
Component: xwiki

XWiki is a generic wiki platform. In versions starting from 4.5.1 to before 15.10.13, from 16.0.0-rc-1 to before 16.4.4, and from 16.5.0-rc-1 to befor...

📅 2025-04-30
CVSS 3.8 Dossier →
Page 2 of 12 (282 Total Records)