Xwiki Vulnerabilità

Sequenza temporale

Genere

Content Management System126
Automation Software1

Prodotto

XWiki Platform58
XWiki xwiki-platform-oldcore9
XWiki xwiki-platform-scheduler-ui3
XWiki xwiki-commons-xml3
XWiki xwiki-platform-web-templates3

Contromisure

Official Fix125
Temporary Fix0
Workaround0
Unavailable1
Not Defined1

Sfruttabilità

High1
Functional0
Proof-of-Concept0
Unproven0
Not Defined126

Accesso al vettore

Not Defined0
Physical0
Local1
Adjacent2
Network124

Autenticazione

Not Defined0
High4
Low87
None36

Interazione dell'utente

Not Defined0
Required50
None77

C3BM Index

CVSSv3 Base

≤10
≤20
≤32
≤46
≤511
≤622
≤737
≤816
≤933
≤100

CVSSv3 Temp

≤10
≤20
≤32
≤46
≤511
≤635
≤728
≤817
≤928
≤100

VulDB

≤10
≤20
≤32
≤428
≤527
≤617
≤747
≤86
≤90
≤100

NVD

≤10
≤20
≤30
≤40
≤53
≤66
≤716
≤83
≤936
≤104

CNA

≤10
≤20
≤31
≤40
≤54
≤63
≤73
≤811
≤924
≤1045

Fornitore

≤10
≤20
≤30
≤40
≤50
≤60
≤70
≤80
≤90
≤100

Research

≤10
≤20
≤30
≤40
≤50
≤60
≤70
≤80
≤90
≤100

Exploiter 0 giorni

<1k2
<2k125
<5k0
<10k0
<25k0
<50k0
<100k0
≥100k0

Exploiter aujourd'hui

<1k127
<2k0
<5k0
<10k0
<25k0
<50k0
<100k0
≥100k0

Sfrutta il volume del mercato

🔴 CTI Attività

Affected Products (50): Admin Tools Application (2), CKEditor.HTMLConverter (1), Commons (1), CryptPad (2), Platform (59), Rendering (2), XWiki Enterprise (1), XWiki Watch (1), application-changerequest (1), application-collabora (1), xwiki-application-administration (1), xwiki-commons-velocity (1), xwiki-commons-xml (3), xwiki-platform (2), xwiki-platform-administration (1), xwiki-platform-administration-ui (2), xwiki-platform-appwithinminutes (1), xwiki-platform-appwithinminutes-ui (2), xwiki-platform-attachment-ui (2), xwiki-platform-distribution-war (2), xwiki-platform-flamingo (1), xwiki-platform-flamingo-theme-ui (2), xwiki-platform-index-tree-macro (1), xwiki-platform-invitation-ui (1), xwiki-platform-legacy-events-hibernate-ui (1), xwiki-platform-legacy-notification-activitymacro (1), xwiki-platform-livedata-macro (1), xwiki-platform-livetable-ui (1), xwiki-platform-localization-script (1), xwiki-platform-localization-source-wiki (2), xwiki-platform-logging-ui (1), xwiki-platform-notifications-ui (1), xwiki-platform-office-viewer (1), xwiki-platform-oldcore (9), xwiki-platform-panels-ui (2), xwiki-platform-realtime-ui (1), xwiki-platform-rendering-async-macro (1), xwiki-platform-rendering-macro-rss (1), xwiki-platform-rendering-xwiki (1), xwiki-platform-scheduler-ui (3), xwiki-platform-search-solr-ui (1), xwiki-platform-search-ui (2), xwiki-platform-security-authentication-default (1), xwiki-platform-skin-skinx (1), xwiki-platform-uiextension-api (1), xwiki-platform-vfs-ui (1), xwiki-platform-web (1), xwiki-platform-web-templates (3), xwiki-platform-wiki-ui-mainwiki (1), xwiki-platform-xclass-ui (1)

Data di pubblicazioneBaseTempVulnerabilitàProdSfrConEPSSCTICVE
10/04/20246.36.0XWiki xwiki-platform-uiextension-api UIExtension escalazione di privilegiAutomation SoftwareNot DefinedOfficial Fix0.000450.07CVE-2024-31997
10/04/20247.37.0XWiki xwiki-commons-velocity Escapetool Remote Code ExecutionContent Management SystemNot DefinedOfficial Fix0.000440.07CVE-2024-31996
10/04/20244.34.1XWiki xwiki-platform-realtime-ui HTML Converter API cross site request forgeryContent Management SystemNot DefinedOfficial Fix0.000440.04CVE-2024-31988
10/04/20246.36.0XWiki xwiki-platform-oldcore Custom Skins Support escalazione di privilegiContent Management SystemNot DefinedOfficial Fix0.000450.04CVE-2024-31987
10/04/20244.34.1XWiki xwiki-platform-scheduler-ui Scheduler Job cross site request forgeryContent Management SystemNot DefinedOfficial Fix0.000450.00CVE-2024-31986
10/04/20244.34.1XWiki xwiki-platform-scheduler-ui Job Scheduler cross site request forgeryContent Management SystemNot DefinedOfficial Fix0.000440.03CVE-2024-31985
10/04/20246.36.0XWiki xwiki-platform-search-solr-ui Space Title Privilege EscalationContent Management SystemNot DefinedOfficial Fix0.000440.06CVE-2024-31984
10/04/20246.36.0XWiki xwiki-platform-localization-source-wiki Multilingual Wiki escalazione di privilegiContent Management SystemNot DefinedOfficial Fix0.000450.03CVE-2024-31983
10/04/20247.37.0XWiki xwiki-platform-search-ui DatabaseSearch Remote Code ExecutionContent Management SystemNot DefinedOfficial Fix0.000450.04CVE-2024-31982
10/04/20246.36.0XWiki xwiki-platform-oldcore PDFClass escalazione di privilegiContent Management SystemNot DefinedOfficial Fix0.000450.03CVE-2024-31981
10/04/20246.36.0XWiki xwiki-platform-search-ui SearchSuggestSourceSheet Privilege EscalationContent Management SystemNot DefinedOfficial Fix0.000440.00CVE-2024-31465
10/04/20242.72.6XWiki xwiki-platform-oldcore rivelazione di un 'informazioneContent Management SystemNot DefinedOfficial Fix0.000450.03CVE-2024-31464
08/01/20247.77.6XWiki xwiki-platform/xwiki-platform-oldcore Rollback Action escalazione di privilegiContent Management SystemNot DefinedOfficial Fix0.000630.04CVE-2024-21648
08/01/20246.46.4XWiki xwiki-platform-distribution-war Attachment denial of serviceContent Management SystemNot DefinedOfficial Fix0.000460.02CVE-2024-21651
08/01/20249.08.9XWiki xwiki-platform User Registration Remote Code ExecutionContent Management SystemNot DefinedOfficial Fix0.005850.03CVE-2024-21650
20/12/20237.37.2XWiki xwiki-platform-index-tree-macro escalazione di privilegiContent Management SystemNot DefinedOfficial Fix0.000920.02CVE-2023-50732
16/12/20237.67.5XWiki Platform Admin Section cross site scriptingContent Management SystemNot DefinedOfficial Fix0.002100.00CVE-2023-50722
16/12/20238.38.2XWiki Platform Administration Interface Privilege EscalationContent Management SystemNot DefinedOfficial Fix0.001190.00CVE-2023-50723
16/12/20235.35.2XWiki Platform Email Address rivelazione di un 'informazioneContent Management SystemNot DefinedOfficial Fix0.000520.00CVE-2023-50720
16/12/20235.65.5XWiki Platform rivelazione di un 'informazioneContent Management SystemNot DefinedOfficial Fix0.000640.02CVE-2023-50719
16/12/20238.17.9XWiki Platform Search Administration Interface escalazione di privilegiContent Management SystemNot DefinedOfficial Fix0.001990.00CVE-2023-50721
05/12/20236.26.1XWiki application-changerequest XML File rivelazione di un 'informazioneContent Management SystemNot DefinedOfficial Fix0.000660.00CVE-2023-49280
20/11/20236.46.3XWiki Platform escalazione di privilegiContent Management SystemNot DefinedOfficial Fix0.000640.00CVE-2023-48241
20/11/20236.56.4XWiki Admin Tools Application cross site request forgeryContent Management SystemNot DefinedOfficial Fix0.000590.00CVE-2023-48293
20/11/20237.67.5XWiki Admin Tools Application cross site request forgeryContent Management SystemNot DefinedOfficial Fix0.000590.00CVE-2023-48292

102 non vengono visualizzate più voci

🔒 Login Required

You need to signup and login to see more of the remaining 102 results.

◂ PrecedenteVisione D'insiemeIl prossimo ▸

Want to stay up to date on a daily basis?

Enable the mail alert feature now!