XW
Product
Xwiki
On CISA KEVExploited in the wild
248
CVEs
1
On KEV
9.9
Max CVSS
0
New 30D
Severity mix
Critical 32High 119Medium 88Low 3
Watch
Add Xwiki to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2025-49584 | 7.5 | Jun 13 | XWiki makes title of inaccessible pages available through the class property values REST API Affected: 10.9 before 16.4.7; 16.5.0 before 16.10.3; 17.0.0 |
| CVE-2025-29924 | 7.5 | Mar 19 | XWiki uses the wrong wiki reference in AuthorizationManager Affected: 6.1 before 15.10.14; 16.0.0 before 16.4.6; 16.5.0 through 16.10.0 |
| CVE-2023-50719 | 7.5 | Dec 15 | XWiki Platform is a generic wiki platform Affected: 7.3 before 14.10.5; 15.0 before 15.5.2; 7.2; 7.2; 15.6; 15.6; +1 more |
| CVE-2023-48241 | 7.5 | Nov 20 | XWiki Platform is a generic wiki platform Affected: 6.4 before 14.10.5; 15.0 before 15.5.1; 6.3; 6.3 |
| CVE-2023-35151 | 7.5 | Jun 23 | XWiki Platform is a generic wiki platform Affected: 7.4 before 14.4.8; 14.10 before 14.10.6; 7.3; 15.0; 15.0 |
| CVE-2023-34467 | 7.5 | Jun 23 | XWiki Platform is a generic wiki platform Affected: 3.5.1 before 14.4.8; 14.10 before 14.10.4; 3.5 |
| CVE-2023-29517 | 7.5 | Apr 19 | XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it Affected: before 13.10.11; 14.0 before 14.4.8; 14.5 before 14.10.1 |
| CVE-2023-29208 | 7.5 | Apr 15 | XWiki Commons are technical libraries common to several other top level XWiki projects Affected: 1.1 before 13.10.11; 14.4.0 before 14.4.7; 14.5 before 14.10 |
| CVE-2023-26476 | 7.5 | Mar 2 | XWiki Platform is a generic wiki platform Affected: 3.3 before 13.4.4; 13.5.0 before 13.10.9; 14.0 before 14.7; 3.2; 14.7 |
| CVE-2023-26470 | 7.5 | Mar 2 | XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it Affected: before 14.0 |
| CVE-2022-41936 | 7.5 | Nov 22 | XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it Affected: 8.1 before 13.10.8; 14.0 before 14.4.3; 14.5 before 14.6 |
| CVE-2022-36092 | 7.5 | Sep 8 | XWiki Platform Old Core is a core package for XWiki Platform, a generic wiki platform Affected: before 13.10.4; 14.0 before 14.2 |
| CVE-2022-36091 | 7.5 | Sep 8 | XWiki Platform Web Templates are templates for XWiki Platform, a generic wiki platform Affected: 1.3 before 13.10.4; 14.0 before 14.2 |
| CVE-2022-24897 | 7.5 | May 2 | APIs to evaluate content with Velocity is a package for APIs to evaluate content with Velocity Affected: 2.3 before 12.6.7; 12.7 before 12.10.3 |
| CVE-2022-23619 | 7.5 | Feb 9 | XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it Affected: before 12.10.9; 13.0 through 13.4; 13.4.2 through 13.6 |
| CVE-2020-13654 | 7.5 | Dec 31 | XWiki Platform before 12.8 mishandles escaping in the property displayer Affected: before 12.8 |
| CVE-2022-41927 | 7.4 | Nov 23 | XWiki Platform is vulnerable to Cross-Site Request Forgery (CSRF) that may allow attackers to delete or rename tags without needing any confirmation Affected: after 3.2 before 13.10.7; 3.2; 3.2; 14.4 |
| CVE-2023-29507 | 7.2 | Apr 16 | XWiki Commons are technical libraries common to several other top level XWiki projects Affected: 14.4.1 before 14.4.7; 14.10 |
| CVE-2022-36093 | 7.1 | Sep 8 | XWiki Platform Web Templates are templates for XWiki Platform, a generic wiki platform Affected: 8.0 before 13.10.5; 14.0 before 14.3 |