XW
Vendor
xwikisas
9
CVEs
0
On KEV
1
New 30D
Products
XW10.0
xwiki-pro-macros
xwikisas
7 CVEs0 on KEV1 new
AP5.3
application-admintools
xwikisas
1 CVEs0 on KEV0 new
AP5.7
application-urlshortener
xwikisas
1 CVEs0 on KEV0 new
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-44179 New | XW xwiki-pro-macros xwikisas | 9.9 | Oct 28 | XWiki Pro Macros: excerpt-include title and content injection executes code |
| CVE-2025-65036 | XW xwiki-pro-macros xwikisas | 8.3 | Dec 5 | XWiki Remote Macros vulnerable to remote code execution using the confluence details summary macro |
| CVE-2025-65089 | XW xwiki-pro-macros xwikisas | 6.5 | Nov 19 | XWiki view file macro: User can view content of office file without view rights on the attachment |
| CVE-2025-54990 | AP application-admintools xwikisas | 5.3 | Nov 18 | XWiki AdminTools application doesn't set permissions on the AdminTools space |
| CVE-2025-55730 | XW xwiki-pro-macros xwikisas | 10.0 | Sep 9 | XWiki Remote Macros vulnerable to remote code execution using the confluence paste code macro |
| CVE-2025-55729 | XW xwiki-pro-macros xwikisas | 10.0 | Sep 9 | XWiki Remote Macros vulnerable to remote code execution using the ConfluenceLayoutSection macro |
| CVE-2025-55728 | XW xwiki-pro-macros xwikisas | 9.8 | Sep 9 | XWiki Remote Macros vulnerable to remote code execution using the panel macro |
| CVE-2025-55727 | XW xwiki-pro-macros xwikisas | 9.8 | Sep 9 | XWiki Remote Macros vulnerable to remote code execution from width parameter in the column macro |
| CVE-2025-48885 | AP application-urlshortener xwikisas | 5.7 | May 30 | application-urlshortener users can create arbitrary pages as long as they have view access to them |