xwiki Vulnerability Advisory Catalog

Total 282 security vulnerabilities recorded for xwiki software and firmware.

← Back to All Vendors
CVE-2024-41947 CRITICAL
Component: xwiki

XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. By creating a conflict when another user with...

📅 2024-07-31
CVSS 9.0 Dossier →
CVE-2024-37901 CRITICAL
Component: xwiki

XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. Any user with edit right on any page can perf...

📅 2024-07-31
CVSS 9.9 Dossier →
Component: xwiki

XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. When uploading an attachment with a malicious...

📅 2024-07-31
CVSS 6.4 Dossier →
Component: xwiki

XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. When a user has view but not edit right on a ...

📅 2024-07-31
CVSS 4.3 Dossier →
CVE-2024-38369 CRITICAL
Component: xwiki

XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. The content of a document included using `{{i...

📅 2024-06-24
CVSS 9.9 Dossier →
CVE-2024-37899 CRITICAL
Component: xwiki

XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. When an admin disables a user account, the us...

📅 2024-06-20
CVSS 9.0 Dossier →
CVE-2024-31997 CRITICAL
Component: xwiki

XWiki Platform is a generic wiki platform. Prior to versions 4.10.19, 15.5.4, and 15.10-rc-1, parameters of UI extensions are always interpreted as Ve...

📅 2024-04-10
CVSS 9.9 Dossier →
CVE-2024-31996 CRITICAL
Component: xwiki

XWiki Platform is a generic wiki platform. Starting in version 3.0.1 and prior to versions 4.10.19, 15.5.4, and 15.10-rc-1, the HTML escaping of escap...

📅 2024-04-10
CVSS 10.0 Dossier →
CVE-2024-31988 CRITICAL
Component: xwiki

XWiki Platform is a generic wiki platform. Starting in version 13.9-rc-1 and prior to versions 4.10.19, 15.5.4, and 15.10-rc-1, when the realtime edit...

📅 2024-04-10
CVSS 9.6 Dossier →
CVE-2024-31987 CRITICAL
Component: xwiki

XWiki Platform is a generic wiki platform. Starting in version 6.4-milestone-1 and prior to versions 4.10.19, 15.5.4, and 15.10-rc-1, any user who can...

📅 2024-04-10
CVSS 9.9 Dossier →
CVE-2024-31986 CRITICAL
Component: xwiki

XWiki Platform is a generic wiki platform. Starting in version 3.1 and prior to versions 4.10.19, 15.5.4, and 15.10-rc-1, by creating a document with ...

📅 2024-04-10
CVSS 9.0 Dossier →
Component: xwiki

XWiki Platform is a generic wiki platform. Starting in version 3.1 and prior to versions 4.10.20, 15.5.4, and 15.10-rc-1, it is possible to schedule/t...

📅 2024-04-10
CVSS 5.4 Dossier →
CVE-2024-31984 CRITICAL
Component: xwiki

XWiki Platform is a generic wiki platform. Starting in version 7.2-rc-1 and prior to versions 4.10.20, 15.5.4, and 15.10-rc-1, by creating a document ...

📅 2024-04-10
CVSS 9.9 Dossier →
CVE-2024-31983 CRITICAL
Component: xwiki

XWiki Platform is a generic wiki platform. In multilingual wikis, translations can be edited by any user who has edit right, circumventing the rights ...

📅 2024-04-10
CVSS 9.9 Dossier →
CVE-2024-31982 CRITICAL
Component: xwiki

XWiki Platform is a generic wiki platform. Starting in version 2.4-milestone-1 and prior to versions 4.10.20, 15.5.4, and 15.10-rc-1, XWiki's database...

📅 2024-04-10
CVSS 10.0 Dossier →
CVE-2024-31981 CRITICAL
Component: xwiki

XWiki Platform is a generic wiki platform. Starting in version 3.0.1 and prior to versions 4.10.20, 15.5.4, and 15.10-rc-1, remote code execution is p...

📅 2024-04-10
CVSS 9.9 Dossier →
CVE-2024-31465 CRITICAL
Component: xwiki

XWiki Platform is a generic wiki platform. Starting in version 5.0-rc-1 and prior to versions 14.10.20, 15.5.4, and 15.9-rc-1, any user with edit righ...

📅 2024-04-10
CVSS 9.9 Dossier →
Component: xwiki

XWiki Platform is a generic wiki platform. Starting in version 5.0-rc-1 and prior to versions 14.10.19, 15.5.4, and 15.9-rc-1, it is possible to acces...

📅 2024-04-10
CVSS 6.8 Dossier →
Component: application_licensing

The XWiki licensor application, which manages and enforce application licenses for paid extensions, includes the document `Licenses.Code.LicenseJSON` ...

📅 2024-02-21
CVSS 5.3 Dossier →
Component: xwiki

XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. A user able to attach a file to a page can po...

📅 2024-01-09
CVSS 7.5 Dossier →
Component: xwiki

XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. The rollback action is missing a right protec...

📅 2024-01-09
CVSS 8.0 Dossier →
CVE-2024-21650 CRITICAL
Component: xwiki

XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. XWiki is vulnerable to a remote code executio...

📅 2024-01-08
CVSS 10.0 Dossier →
Component: xwiki

XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. It's possible to execute a Velocity script wi...

📅 2023-12-21
CVSS 8.3 Dossier →
CVE-2023-50723 CRITICAL
Component: xwiki

XWiki Platform is a generic wiki platform. Starting in 2.3 and prior to versions 14.10.15, 15.5.2, and 15.7-rc-1, anyone who can edit an arbitrary wik...

📅 2023-12-15
CVSS 9.9 Dossier →
Page 4 of 12 (282 Total Records)