Filter
AND
AND
Versions
15.0
37
14.0
27
14.5
24
15.0-rc1
10
15.6
10
14.10
6
14.10-rc1
6
15.1
5
15.1-rc1
5
14.4.0
4
15.6-rc1
4
2.3
4
1.0
3
14.0.0
3
14.4.4
3
15.7-rc1
3
3.0
3
1.7
2
1.8
2
12.0
2
14.0-rc1
2
14.4.3
2
14.5.0
2
14.6
2
15.2
2
15.2-rc1
2
15.3
2
15.3-rc1
2
2.2-milestone1
2
2.4-milestone2
2
2.5
2
2.5-milestone2
2
3.0-milestone3
2
3.0-milestone_2
2
3.0-rc1
2
3.0.1
2
3.1-milestone2
2
3.1.1
2
3.5
2
6.2
2
6.2-milestone1
2
6.2-milestone2
2
6.2.1
2
6.3
2
6.3-milestone2
2
1.5
1
1.8-rc1
1
1.8-rc2
1
1.9
1
1.9-milestone2
1
10.11.1
1
11.10.1
1
11.10.2
1
11.6
1
11.6-rc1
1
11.8
1
11.8-milestone1
1
11.8.1
1
12.5
1
12.6.4
1
12.6.6
1
12.9
1
12.9-rc1
1
13.10
1
13.9
1
14.4.1
1
14.4.5
1
14.8
1
15.5-rc1
1
15.7
1
15.9
1
16.0
1
2.0
1
2.2.1
1
2.3-milestone1
1
3.0-milestone1
1
3.0-milestone2
1
3.1
1
3.1-milestone1
1
3.1-rc1
1
3.2-milestone3
1
3.3
1
3.3-milestone2
1
3.4
1
3.4-milestone-1
1
3.5-rc-1
1
4.1-milestone2
1
4.1.1
1
4.2
1
4.2-milestone3
1
4.3-milestone2
1
4.3.1
1
4.5
1
5.0
1
5.0-milestone1
1
5.0-milestone2
1
5.1
1
5.2
1
5.2-milestone2
1
5.2-rc1
1
5.3
1
5.3-milestone2
1
5.4
1
5.4.4
1
6.0-milestone1
1
6.0-milestone2
1
6.0.1
1
6.1
1
6.1-milestone1
1
6.1-milestone2
1
6.1-rc1
1
6.2.4
1
6.3-milestone1
1
6.3-rc1
1
6.4
1
6.4-milestone2
1
6.4-milestone3
1
7.0
1
7.2
1
7.2-milestone2
1
7.2-milestone3
1
7.3
1
7.4.4
1
8.1
1
9.2
1
9.4
1
9.4-rc-1
1
9.6
1
9.7
1
maven/org.xwiki.platform:xwiki-platform-administration-uiXWiki Remote Code Execution vulnerability via user registration
10
EPSS
0.58%
First published (updated )
maven/org.xwiki.commons:xwiki-commons-velocityXWiki Commons missing escaping of `{` in Velocity escapetool allows remote code execution
10
EPSS
0.04%
First published (updated )
Xwiki XwikiXWiki Platform: Remote code execution from account via SearchSuggestSourceSheet
10
EPSS
0.04%
First published (updated )
maven/org.xwiki.platform:xwiki-platform-uiextension-apiXWiki Platform remote code execution from account through UIExtension parameters
10
EPSS
0.04%
First published (updated )
maven/org.xwiki.platform:xwiki-platform-rendering-macro-includeXWiki programming rights may be inherited by inclusion
10
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
maven/org.xwiki.platform:xwiki-platform-search-uiXWiki Platform vulnerable to remote code execution from account via SearchSuggestConfigSheet
10
First published (updated )
Xwiki XwikiImproper Neutralization of Directives in Dynamically Evaluated Code ('Eval Injection') in org.xwiki.platform:xwiki-platform-skin-ui
10
First published (updated )
Xwiki XwikiXWiki Platform vulnerable to privilege escalation via async macro and IconThemeSheet from the user profile
10
First published (updated )
Xwiki XwikiXWiki Platform vulnerable to privilege escalation via properties with wiki syntax that are executed with wrong author
10
First published (updated )
Xwiki Xwikiorg.xwiki.platform:xwiki-platform-flamingo-theme-ui Eval Injection vulnerability
10
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Xwiki XwikiXWiki Platform users may execute anything with superadmin right through comments and async macro
10
First published (updated )
Xwiki XwikiXWiki Platform vulnerable to Remote Code Execution in Annotations
10
First published (updated )
Xwiki XwikiImproper Neutralization of Directives in Dynamically Evaluated Code in org.xwiki.platform:xwiki-platform-panels-ui
10
First published (updated )
Xwiki Xwikiorg.xwiki.platform:xwiki-platform-flamingo-theme-ui Eval Injection vulnerability
10
First published (updated )
Xwiki XwikiCode injection from account through XWiki.SchedulerJobSheet in xwiki-platform
10
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Xwiki XwikiCode injection in display method used in user profiles in xwiki-platform
10
First published (updated )
maven/org.xwiki.platform:xwiki-platform-distribution-warPrivilege escalation from view right on XWiki.Notifications.Code.LegacyNotificationAdministration in xwiki-platform
10
First published (updated )
Xwiki XwikiCode injection in template provider administration in xwiki-platform
10
First published (updated )
Xwiki XwikiCode injection via unescaped translations in xwiki-platform
10
First published (updated )
Xwiki XwikiAsync and display macro allow displaying and interacting with any document in restricted mode
10
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Xwiki XwikiCode injection from account through AWM view sheet in xwiki platform
10
First published (updated )
Xwiki XwikiXWiki Platform privilege escalation (PR)/RCE from account through class sheet
10
First published (updated )
Xwiki XwikiCode injection in icon themes of XWiki Platform
10
First published (updated )
Xwiki XwikiUpgrading doesn't prevent exploiting vulnerable XWiki documents
10
First published (updated )
Xwiki XwikiCode injection through NotificationRSSService in XWiki Platform
10
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
maven/org.xwiki.platform:xwiki-platform-help-uiPrivilege escalation (PR) from account through TipsPanel
10
First published (updated )
Xwiki XwikiXWiki Platform vulnerable to privilege escalation (PR) from account through like LiveTableResults
10
First published (updated )
Xwiki XwikiXWiki Platform's Mail.MailConfig can be edited by any user with edit rights
10
First published (updated )
maven/org.xwiki.platform:xwiki-platform-menu-uiPrivilege escalation (PR)/remote code execution from account through Menu.UIExtensionSheet
10
First published (updated )
Xwiki Xwikiorg.xwiki.platform:xwiki-platform-office-importer vulnerable to arbitrary server side file writing from account through office converter
10
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.