Xwiki Vulnerabilità

Sequenza temporale

L'anno scorso

Versione

12.10.213
12.10.011
12.10.111
12.10.39
12.10.48

Contromisure

Official Fix119
Temporary Fix0
Workaround0
Unavailable1
Not Defined9

Sfruttabilità

High1
Functional0
Proof-of-Concept2
Unproven0
Not Defined126

Accesso al vettore

Not Defined0
Physical0
Local0
Adjacent1
Network128

Autenticazione

Not Defined0
High10
Low82
None37

Interazione dell'utente

Not Defined0
Required34
None95

C3BM Index

L'anno scorso

CVSSv3 Base

≤10
≤20
≤31
≤410
≤519
≤626
≤729
≤819
≤924
≤101

CVSSv3 Temp

≤10
≤20
≤32
≤410
≤519
≤639
≤720
≤818
≤920
≤101

VulDB

≤10
≤20
≤33
≤420
≤528
≤618
≤749
≤810
≤91
≤100

NVD

≤10
≤20
≤30
≤40
≤52
≤66
≤76
≤84
≤929
≤103

CNA

≤10
≤20
≤30
≤40
≤56
≤69
≤76
≤815
≤914
≤1027

Fornitore

≤10
≤20
≤30
≤40
≤50
≤60
≤70
≤80
≤90
≤100

Research

≤10
≤20
≤30
≤40
≤50
≤60
≤70
≤80
≤90
≤100

Exploiter 0 giorni

<1k13
<2k102
<5k14
<10k0
<25k0
<50k0
<100k0
≥100k0

Exploiter aujourd'hui

<1k129
<2k0
<5k0
<10k0
<25k0
<50k0
<100k0
≥100k0

Sfrutta il volume del mercato

L'anno scorso

🔴 CTI Attività

Affected Versions (217): 0.9.79, 0.9.84, 0.9.543, 0.9.793, 0.9.1252, 1.0, 1.0 B1, 1.0 B2, 1.1, 1.1 Rc1, 1.2, 1.3, 1.4, 1.5, 1.6, 1.7, 1.8, 1.9, 1.10, 1.11, 1.12, 1.13, 1.14, 1.15, 1.16, 1.17, 1.18, 1.19, 1.20, 1.21, 1.22, 1.23, 1.24, 1.25, 1.26, 1.27, 1.28, 1.29, 2.4, 3.4, 10.0, 10.1, 10.2, 10.3, 10.4, 10.5, 10.6, 10.7, 11.1, 11.10.1, 11.10.2, 11.10.3, 11.10.4, 11.10.5, 11.10.6, 11.10.7, 11.10.8, 11.10.9, 11.10.13, 12.0, 12.1, 12.2, 12.3, 12.4, 12.5, 12.6, 12.6.1, 12.6.2, 12.6.3, 12.6.4, 12.6.5, 12.6.6, 12.6.7, 12.6.8, 12.6.9, 12.6.11, 12.6.12, 12.6.13, 12.6.14, 12.6.15, 12.6.16, 12.6.17, 12.6.18, 12.6.19, 12.6.21, 12.6.22, 12.6.23, 12.6.24, 12.6.25, 12.6.26, 12.6.27, 12.6.28, 12.6.29, 12.6.31, 12.6.32, 12.6.33, 12.6.34, 12.6.35, 12.6.36, 12.6.37, 12.6.38, 12.6.39, 12.6.41, 12.6.42, 12.6.43, 12.6.44, 12.6.45, 12.6.46, 12.6.47, 12.6.48, 12.6.49, 12.6.51, 12.6.52, 12.6.53, 12.6.54, 12.6.55, 12.6.56, 12.6.57, 12.6.58, 12.6.59, 12.6.61, 12.6.62, 12.6.63, 12.6.64, 12.6.65, 12.6.66, 12.6.67, 12.6.68, 12.6.69, 12.6.71, 12.6.72, 12.6.73, 12.6.74, 12.6.75, 12.6.76, 12.6.77, 12.6.78, 12.6.79, 12.6.81, 12.6.82, 12.6.83, 12.6.84, 12.6.85, 12.6.86, 12.6.87, 12.7, 12.8, 12.10.1, 12.10.2, 12.10.3, 12.10.4, 12.10.5, 12.10.6, 12.10.7, 12.10.8, 12.10.9, 13.0, 13.1, 13.2, 13.3, 13.4, 13.4.1, 13.4.2, 13.4.3, 13.4.4, 13.4.5, 13.4.6, 13.5, 13.6, 13.7, 13.8, 13.9, 13.10, 13.10.1, 13.10.2, 13.10.3, 13.10.4, 13.10.5, 13.10.6, 13.10.7, 13.10.11, 14.0, 14.1, 14.2, 14.3, 14.4, 14.4.1, 14.4.2, 14.4.8, 14.5, 14.10.1, 14.10.2, 14.10.3, 14.10.4, 14.10.5, 14.10.6, 14.10.7, 14.10.8, 14.10.9, 14.10.11, 14.10.12, 14.10.13, 14.10.14, 14.10.15, 14.10.16, 15.0, 15.0-rc-1, 15.0RC1, 15.1, 15.2, 15.3, 15.4, 15.5, 15.5.1, 15.5.2, 15.6, 15.7

Tipo di software: Automation Software

Data di pubblicazioneBaseTempVulnerabilità0dayOggiSfrConCTICVE
10/04/20246.36.0XWiki xwiki-platform-uiextension-api UIExtension escalazione di privilegi$0-$5k$0-$5kNot DefinedOfficial Fix0.07CVE-2024-31997
10/04/20247.37.0XWiki xwiki-commons-velocity Escapetool Remote Code Execution$0-$5k$0-$5kNot DefinedOfficial Fix0.07CVE-2024-31996
10/04/20244.34.1XWiki xwiki-platform-realtime-ui HTML Converter API cross site request forgery$0-$5k$0-$5kNot DefinedOfficial Fix0.04CVE-2024-31988
10/04/20246.36.0XWiki xwiki-platform-oldcore Custom Skins Support escalazione di privilegi$0-$5k$0-$5kNot DefinedOfficial Fix0.03CVE-2024-31987
10/04/20244.34.1XWiki xwiki-platform-scheduler-ui Scheduler Job cross site request forgery$0-$5k$0-$5kNot DefinedOfficial Fix0.00CVE-2024-31986
10/04/20244.34.1XWiki xwiki-platform-scheduler-ui Job Scheduler cross site request forgery$0-$5k$0-$5kNot DefinedOfficial Fix0.03CVE-2024-31985
10/04/20246.36.0XWiki xwiki-platform-search-solr-ui Space Title Privilege Escalation$0-$5k$0-$5kNot DefinedOfficial Fix0.06CVE-2024-31984
10/04/20246.36.0XWiki xwiki-platform-localization-source-wiki Multilingual Wiki escalazione di privilegi$0-$5k$0-$5kNot DefinedOfficial Fix0.03CVE-2024-31983
10/04/20247.37.0XWiki xwiki-platform-search-ui DatabaseSearch Remote Code Execution$0-$5k$0-$5kNot DefinedOfficial Fix0.00CVE-2024-31982
10/04/20246.36.0XWiki xwiki-platform-oldcore PDFClass escalazione di privilegi$0-$5k$0-$5kNot DefinedOfficial Fix0.03CVE-2024-31981
10/04/20246.36.0XWiki xwiki-platform-search-ui SearchSuggestSourceSheet Privilege Escalation$0-$5k$0-$5kNot DefinedOfficial Fix0.00CVE-2024-31465
10/04/20242.72.6XWiki xwiki-platform-oldcore rivelazione di un 'informazione$0-$5k$0-$5kNot DefinedOfficial Fix0.03CVE-2024-31464
08/01/20247.77.6XWiki xwiki-platform/xwiki-platform-oldcore Rollback Action escalazione di privilegi$0-$5k$0-$5kNot DefinedOfficial Fix0.04CVE-2024-21648
08/01/20246.46.4XWiki xwiki-platform-distribution-war Attachment denial of service$0-$5k$0-$5kNot DefinedOfficial Fix0.02CVE-2024-21651
08/01/20249.08.9XWiki xwiki-platform User Registration Remote Code Execution$0-$5k$0-$5kNot DefinedOfficial Fix0.03CVE-2024-21650
20/12/20237.37.2XWiki xwiki-platform-index-tree-macro escalazione di privilegi$0-$5k$0-$5kNot DefinedOfficial Fix0.02CVE-2023-50732
27/07/20235.35.1XWiki xwiki-platform-livetable-ui Email Address rivelazione di un 'informazione$0-$5k$0-$5kNot DefinedOfficial Fix0.02CVE-2023-38509
09/05/20238.08.0XWiki xwiki-commons-xml HTML Sanitizer Privilege Escalation$0-$5k$0-$5kNot DefinedOfficial Fix0.00CVE-2023-31126
20/04/20236.26.2XWiki xwiki-commons-xml cross site scripting$0-$5k$0-$5kNot DefinedOfficial Fix0.02CVE-2023-29528
19/04/20236.26.1XWiki xwiki-platform-appwithinminutes escalazione di privilegi$0-$5k$0-$5kNot DefinedOfficial Fix0.07CVE-2023-29515
19/04/20238.38.2XWiki xwiki-platform-oldcore Macro escalazione di privilegi$0-$5k$0-$5kNot DefinedOfficial Fix0.00CVE-2023-29526
19/04/20238.38.2XWiki xwiki-platform-scheduler-ui Scheduler Application escalazione di privilegi$0-$5k$0-$5kNot DefinedOfficial Fix0.00CVE-2023-29524
19/04/20235.45.3XWiki xwiki-platform-localization-source-wiki vulnerabilità sconosciuta$0-$5k$0-$5kNot DefinedOfficial Fix0.00CVE-2023-29520
19/04/20235.25.1XWiki xwiki-platform-web-templates Template Macro escalazione di privilegi$0-$5k$0-$5kNot DefinedOfficial Fix0.00CVE-2023-29513
19/04/20238.17.9XWiki xwiki-platform-appwithinminutes-ui User Profile escalazione di privilegi$0-$5k$0-$5kNot DefinedOfficial Fix0.00CVE-2023-29527

104 non vengono visualizzate più voci

Do you want to use VulDB in your project?

Use the official API to access entries easily!