XW
Product
Xwiki
On CISA KEVExploited in the wild
248
CVEs
1
On KEV
9.9
Max CVSS
0
New 30D
Severity mix
Critical 32High 119Medium 88Low 3
Watch
Add Xwiki to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2025-51991 | 8.8 | Aug 20 | XWiki through version 17.3.0 is vulnerable to Server-Side Template Injection (SSTI) in the Administration interface, specifically within the HTTP Meta Info field of the Global… Affected: through 17.3.0 |
| CVE-2025-53836 | 8.8 | Jul 14 | XWiki Rendering is vulnerable to RCE attacks when processing nested macros Affected: 4.3 before 13.10.11; 14.0 before 14.4.7; 14.5 before 14.10; 4.2; 4.2; 4.2; +1 more |
| CVE-2025-49586 | 8.8 | Jun 13 | XWiki allows remote code execution through preview of XClass changes in AWM editor Affected: 7.3 before 16.4.7; 16.5.0 before 16.10.3; 7.2; 7.2; 17.0.0 |
| CVE-2025-49581 | 8.8 | Jun 13 | XWiki allows remote code execution through default value of wiki macro wiki-type parameters Affected: 11.10.11 before 12.0; 12.6.3 before 12.7; 12.8 before 16.4.7; 16.5.0 before 16.10.3; 17.0.0 |
| CVE-2025-48063 | 8.8 | May 21 | XWiki Platform Security Authorization Bridge allows users with just edit right can enforce required rights with programming right Affected: 16.10.0 before 16.10.4; 17.0.0; 17.0.0 |
| CVE-2025-32968 | 8.8 | Apr 23 | org.xwiki.platform:xwiki-platform-oldcore allows SQL injection in short form select requests through the script query API Affected: 1.6 before 15.10.16; 16.0.0 before 16.4.6; 16.5.0 through 16.10.1 |
| CVE-2024-55879 | 8.8 | Dec 12 | XWiki Platform is a generic wiki platform Affected: 2.3 before 15.10.9; 16.0.0 before 16.3.0 |
| CVE-2024-55877 | 8.8 | Dec 12 | XWiki Platform is a generic wiki platform Affected: 9.7 before 15.10.11; 16.0.0 before 16.4.1; 16.5.0 |
| CVE-2024-55662 | 8.8 | Dec 12 | XWiki Platform is a generic wiki platform Affected: 3.3 before 15.10.9; 16.0.0 before 16.3.0 |
| CVE-2024-37901 | 8.8 | Jul 31 | XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it Affected: 9.2 before 14.10.21; 15.0 before 15.5.5; 15.6 before 15.10.2 |
| CVE-2024-31997 | 8.8 | Apr 10 | XWiki Platform is a generic wiki platform Affected: before 14.10.19; 15.0 before 15.5.4; 15.6 before 15.9 |
| CVE-2024-31988 | 8.8 | Apr 10 | XWiki Platform is a generic wiki platform Affected: 13.9 before 14.10.19; 15.0 before 15.5.4; 15.6 before 15.9 |
| CVE-2024-31987 | 8.8 | Apr 10 | XWiki Platform is a generic wiki platform Affected: 6.4 before 14.10.19; 15.0 before 15.5.4; 15.6 before 15.10 |
| CVE-2024-31986 | 8.8 | Apr 10 | XWiki Platform is a generic wiki platform Affected: 3.1.1 before 14.10.19; 15.0 before 15.5.4; 15.6 before 15.9 |
| CVE-2024-31984 | 8.8 | Apr 10 | XWiki Platform is a generic wiki platform Affected: 7.3 before 14.10.20; 15.0 before 15.5.4; 15.6 before 15.10; 7.2; 7.2 |
| CVE-2024-31983 | 8.8 | Apr 10 | XWiki Platform is a generic wiki platform Affected: 4.3.1 before 14.10.20; 15.0 before 15.5.4; 15.6 before 15.10; 4.3; 4.3; 4.3 |
| CVE-2024-31981 | 8.8 | Apr 10 | XWiki Platform is a generic wiki platform Affected: 3.0.1 before 14.10.19; 15.0 before 15.5.4; 15.6 before 15.9 |
| CVE-2024-31465 | 8.8 | Apr 10 | XWiki Platform is a generic wiki platform Affected: 5.3 before 14.10.20; 15.0 before 15.5.4; 15.6 before 15.10; 5.2; 5.2; 5.2 |
| CVE-2024-21648 | 8.8 | Jan 9 | XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it Affected: before 14.10.17; 15.0 before 15.5.3; 15.6 before 15.8 |
| CVE-2023-50723 | 8.8 | Dec 15 | XWiki Platform is a generic wiki platform Affected: 2.3 before 14.10.5; 15.0 before 15.5.2; 15.6; 15.6; 15.7 |
| CVE-2023-50722 | 8.8 | Dec 15 | XWiki Platform is a generic wiki platform Affected: 2.3 before 14.10.5; 15.0 before 15.5.2; 15.6; 15.6; 15.7 |
| CVE-2023-50721 | 8.8 | Dec 15 | XWiki Platform is a generic wiki platform Affected: 4.5 before 14.10.5; 15.0 before 15.5.2; 15.6; 15.6; 15.7 |
| CVE-2023-48293 | 8.8 | Nov 20 | The XWiki Admin Tools Application provides tools to help the administration of XWiki Affected: before 4.5.1 |
| CVE-2023-48240 | 8.8 | Nov 20 | XWiki Platform is a generic wiki platform Affected: 11.10.1 before 14.10.15; 15.0 before 15.5.1; 15.6 |
| CVE-2023-46243 | 8.8 | Nov 7 | XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it Affected: 1.0 before 14.10.6; 15.0 before 15.2 |
| CVE-2023-46244 | 8.8 | Nov 7 | XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it Affected: 3.3 before 14.10.7; 15.0 before 15.2; 3.2 |
| CVE-2023-46242 | 8.8 | Nov 7 | XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it Affected: 1.0 before 14.10.7; 15.0 before 15.2 |
| CVE-2023-37913 | 8.8 | Oct 25 | XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it Affected: 3.5 before 14.10.8; 15.0 before 15.3 |
| CVE-2023-37909 | 8.8 | Oct 25 | XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it Affected: 5.1 before 14.10.8 |
| CVE-2023-40573 | 8.8 | Aug 24 | XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it Affected: before 14.10.9; 15.0; 15.0; 15.1; 15.1; 15.2; +3 more |
| CVE-2023-40177 | 8.8 | Aug 23 | XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it Affected: 4.3.1 before 14.10.5; 4.3; 15.0; 15.0 |
| CVE-2023-37914 | 8.8 | Aug 17 | XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it Affected: 2.5 before 14.4.8; 14.5.0 before 14.10.6; 15.0 before 15.2 |
| CVE-2023-37462 | 8.8 | Jul 14 | XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it Affected: 7.0 before 14.4.8; 14.5 before 14.10.4 |
| CVE-2023-36470 | 8.8 | Jun 29 | XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it Affected: 6.2 before 14.10.6; 15.0; 15.0; 15.1; 15.1 |
| CVE-2023-36469 | 8.8 | Jun 29 | XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it Affected: 9.6 before 14.10.6; 15.0; 15.0; 15.1; 15.1 |
| CVE-2023-36468 | 8.8 | Jun 29 | XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it Affected: 2.0 before 14.10.7; 15.0; 15.0; 15.1; 15.1 |
| CVE-2023-35152 | 8.8 | Jun 23 | XWiki Platform is a generic wiki platform Affected: 12.9 before 14.4.8; 14.10 before 14.10.6; 12.9; 15.0; 15.0 |
| CVE-2023-35166 | 8.8 | Jun 20 | XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it Affected: 8.1 before 14.10.5 |
| CVE-2023-32069 | 8.8 | May 9 | XWiki Platform is a generic wiki platform Affected: 3.4 before 14.10.4; 3.3 |
| CVE-2023-29527 | 8.8 | Apr 19 | XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it Affected: 7.4.4 before 14.10.3 |
| CVE-2023-29526 | 8.8 | Apr 19 | XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it Affected: 10.11.1 before 13.10.11; 14.0 before 14.4.8; 14.5 before 14.10.3 |
| CVE-2023-29525 | 8.8 | Apr 19 | XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it Affected: before 14.4.8; 14.5 before 14.10.3 |
| CVE-2023-29524 | 8.8 | Apr 19 | XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it Affected: before 14.10.3 |
| CVE-2023-29523 | 8.8 | Apr 19 | XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it Affected: before 13.10.11; 14.0 before 14.4.8; 14.5 before 14.10.2 |
| CVE-2023-29522 | 8.8 | Apr 19 | XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it Affected: before 14.4.8; 14.5 before 14.10.3 |
| CVE-2023-29521 | 8.8 | Apr 19 | XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it Affected: before 13.10.11; 14.0 before 14.4.8; 14.5 before 14.10.2 |
| CVE-2023-29519 | 8.8 | Apr 19 | XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it Affected: before 13.10.11; 14.0 before 14.4.8; 14.5 before 14.10.2 |
| CVE-2023-29518 | 8.8 | Apr 19 | XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it Affected: before 13.10.11; 14.0 before 14.4.8; 14.5 before 14.10.1 |
| CVE-2023-29516 | 8.8 | Apr 19 | XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it Affected: before 13.10.11; 14.0 before 14.4.8; 14.5 before 14.10.1 |
| CVE-2023-29514 | 8.8 | Apr 19 | XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it Affected: before 13.10.11; 14.0 before 14.4.8; 14.5 before 14.10.1 |