xwiki Vulnerability Advisory Catalog

Total 282 security vulnerabilities recorded for xwiki software and firmware.

← Back to All Vendors
CVE-2023-50722 CRITICAL
Component: xwiki

XWiki Platform is a generic wiki platform. Starting in 2.3 and prior to versions 14.10.15, 15.5.2, and 15.7-rc-1, there is a reflected XSS or also dir...

📅 2023-12-15
CVSS 9.6 Dossier →
CVE-2023-50721 CRITICAL
Component: xwiki

XWiki Platform is a generic wiki platform. Starting in 4.5-rc-1 and prior to versions 14.10.15, 15.5.2, and 15.7-rc-1, the search administration inter...

📅 2023-12-15
CVSS 9.9 Dossier →
Component: xwiki

XWiki Platform is a generic wiki platform. Prior to versions 14.10.15, 15.5.2, and 15.7-rc-1, the Solr-based search in XWiki discloses the email addre...

📅 2023-12-15
CVSS 5.3 Dossier →
Component: xwiki

XWiki Platform is a generic wiki platform. Starting in 7.2-milestone-2 and prior to versions 14.10.15, 15.5.2, and 15.7-rc-1, the Solr-based search in...

📅 2023-12-15
CVSS 7.5 Dossier →
Component: change_request

XWiki Change Request is an XWiki application allowing to request changes on a wiki without publishing directly the changes. Change request allows to e...

📅 2023-12-04
CVSS 7.7 Dossier →
Component: xwiki

The XWiki Admin Tools Application provides tools to help the administration of XWiki. Prior to version 4.5.1, a cross-site request forgery vulnerabili...

📅 2023-11-20
CVSS 8.8 Dossier →
CVE-2023-48292 CRITICAL
Component: admin_tools

The XWiki Admin Tools Application provides tools to help the administration of XWiki. Starting in version 4.4 and prior to version 4.5.1, a cross site...

📅 2023-11-20
CVSS 9.6 Dossier →
Component: xwiki

XWiki Platform is a generic wiki platform. Starting in version 6.3-milestone-2 and prior to versions 14.10.15, 15.5.1, and 15.6RC1, the Solr-based sea...

📅 2023-11-20
CVSS 7.5 Dossier →
CVE-2023-48240 CRITICAL
Component: xwiki

XWiki Platform is a generic wiki platform. The rendered diff in XWiki embeds images to be able to compare the contents and not display a difference fo...

📅 2023-11-20
CVSS 9.0 Dossier →
Component: application-collabora

application-collabora is an integration of Collabora Online in XWiki. As part of the application use cases, depending on the rights that a user has ov...

📅 2023-11-09
CVSS 7.3 Dossier →
CVE-2023-46243 CRITICAL
Component: xwiki

XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. In affected versions it's possible for a user...

📅 2023-11-07
CVSS 9.9 Dossier →
CVE-2023-46244 CRITICAL
Component: xwiki

XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. In affected versions it's possible for a user...

📅 2023-11-07
CVSS 9.1 Dossier →
CVE-2023-46242 CRITICAL
Component: xwiki

XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. In affected versions it's possible to execute...

📅 2023-11-07
CVSS 9.6 Dossier →
Component: xwiki

XWiki Platform is a generic wiki platform. In org.xwiki.platform:xwiki-platform-livetable-ui starting with version 3.5-milestone-1 and prior to versio...

📅 2023-11-07
CVSS 4.3 Dossier →
CVE-2023-46732 CRITICAL
Component: xwiki

XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. XWiki is vulnerable to reflected cross-site s...

📅 2023-11-06
CVSS 9.6 Dossier →
CVE-2023-46731 CRITICAL
Component: xwiki

XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. XWiki doesn't properly escape the section URL...

📅 2023-11-06
CVSS 10.0 Dossier →
CVE-2023-45137 CRITICAL
Component: xwiki

XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. `org.xwiki.platform:xwiki-platform-web` start...

📅 2023-10-25
CVSS 9.0 Dossier →
CVE-2023-45136 CRITICAL
Component: xwiki

XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. When document names are validated according t...

📅 2023-10-25
CVSS 9.6 Dossier →
CVE-2023-45135 CRITICAL
Component: xwiki

XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. In `org.xwiki.platform:xwiki-platform-web` ve...

📅 2023-10-25
CVSS 9.0 Dossier →
CVE-2023-45134 CRITICAL
Component: xwiki

XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. `org.xwiki.platform:xwiki-platform-web` start...

📅 2023-10-25
CVSS 9.0 Dossier →
CVE-2023-37913 CRITICAL
Component: xwiki

XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. Starting in version 3.5-milestone-1 and prior...

📅 2023-10-25
CVSS 9.9 Dossier →
CVE-2023-37912 CRITICAL
Component: xwiki-rendering

XWiki Rendering is a generic Rendering system that converts textual input in a given syntax into another syntax. Prior to version 14.10.6 of `org.xwik...

📅 2023-10-25
CVSS 9.9 Dossier →
Component: xwiki

XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. Starting in version 9.4-rc-1 and prior to ver...

📅 2023-10-25
CVSS 6.5 Dossier →
Component: xwiki

XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. Starting with the introduction of attachment ...

📅 2023-10-25
CVSS 8.1 Dossier →
Page 5 of 12 (282 Total Records)