Xwiki Luki w zabezpieczeniach

Oś czasu

Ostatni rok

Wersja

12.10.213
12.10.011
12.10.111
12.10.39
12.10.48

Przeciwdziałanie

Official Fix119
Temporary Fix0
Workaround0
Unavailable1
Not Defined9

Wykorzystywanie

High1
Functional0
Proof-of-Concept2
Unproven0
Not Defined126

Wektor dostępu

Not Defined0
Physical0
Local0
Adjacent1
Network128

Uwierzytelnianie

Not Defined0
High10
Low82
None37

Interakcja z użytkownikiem

Not Defined0
Required34
None95

C3BM Index

Ostatni rok

CVSSv3 Base

≤10
≤20
≤31
≤410
≤519
≤626
≤729
≤819
≤924
≤101

CVSSv3 Temp

≤10
≤20
≤32
≤410
≤519
≤639
≤720
≤818
≤920
≤101

VulDB

≤10
≤20
≤33
≤420
≤528
≤618
≤749
≤810
≤91
≤100

NVD

≤10
≤20
≤30
≤40
≤52
≤66
≤76
≤84
≤929
≤103

CNA

≤10
≤20
≤30
≤40
≤56
≤69
≤76
≤815
≤914
≤1027

Sprzedawca

≤10
≤20
≤30
≤40
≤50
≤60
≤70
≤80
≤90
≤100

Research

≤10
≤20
≤30
≤40
≤50
≤60
≤70
≤80
≤90
≤100

Exploit 0-day

<1k13
<2k102
<5k14
<10k0
<25k0
<50k0
<100k0
≥100k0

Wykorzystaj dzisiaj

<1k128
<2k1
<5k0
<10k0
<25k0
<50k0
<100k0
≥100k0

Wykorzystaj wielkość rynku

Ostatni rok

🔴 CTI Zajęcia

Affected Versions (217): 0.9.79, 0.9.84, 0.9.543, 0.9.793, 0.9.1252, 1.0, 1.0 B1, 1.0 B2, 1.1, 1.1 Rc1, 1.2, 1.3, 1.4, 1.5, 1.6, 1.7, 1.8, 1.9, 1.10, 1.11, 1.12, 1.13, 1.14, 1.15, 1.16, 1.17, 1.18, 1.19, 1.20, 1.21, 1.22, 1.23, 1.24, 1.25, 1.26, 1.27, 1.28, 1.29, 2.4, 3.4, 10.0, 10.1, 10.2, 10.3, 10.4, 10.5, 10.6, 10.7, 11.1, 11.10.1, 11.10.2, 11.10.3, 11.10.4, 11.10.5, 11.10.6, 11.10.7, 11.10.8, 11.10.9, 11.10.13, 12.0, 12.1, 12.2, 12.3, 12.4, 12.5, 12.6, 12.6.1, 12.6.2, 12.6.3, 12.6.4, 12.6.5, 12.6.6, 12.6.7, 12.6.8, 12.6.9, 12.6.11, 12.6.12, 12.6.13, 12.6.14, 12.6.15, 12.6.16, 12.6.17, 12.6.18, 12.6.19, 12.6.21, 12.6.22, 12.6.23, 12.6.24, 12.6.25, 12.6.26, 12.6.27, 12.6.28, 12.6.29, 12.6.31, 12.6.32, 12.6.33, 12.6.34, 12.6.35, 12.6.36, 12.6.37, 12.6.38, 12.6.39, 12.6.41, 12.6.42, 12.6.43, 12.6.44, 12.6.45, 12.6.46, 12.6.47, 12.6.48, 12.6.49, 12.6.51, 12.6.52, 12.6.53, 12.6.54, 12.6.55, 12.6.56, 12.6.57, 12.6.58, 12.6.59, 12.6.61, 12.6.62, 12.6.63, 12.6.64, 12.6.65, 12.6.66, 12.6.67, 12.6.68, 12.6.69, 12.6.71, 12.6.72, 12.6.73, 12.6.74, 12.6.75, 12.6.76, 12.6.77, 12.6.78, 12.6.79, 12.6.81, 12.6.82, 12.6.83, 12.6.84, 12.6.85, 12.6.86, 12.6.87, 12.7, 12.8, 12.10.1, 12.10.2, 12.10.3, 12.10.4, 12.10.5, 12.10.6, 12.10.7, 12.10.8, 12.10.9, 13.0, 13.1, 13.2, 13.3, 13.4, 13.4.1, 13.4.2, 13.4.3, 13.4.4, 13.4.5, 13.4.6, 13.5, 13.6, 13.7, 13.8, 13.9, 13.10, 13.10.1, 13.10.2, 13.10.3, 13.10.4, 13.10.5, 13.10.6, 13.10.7, 13.10.11, 14.0, 14.1, 14.2, 14.3, 14.4, 14.4.1, 14.4.2, 14.4.8, 14.5, 14.10.1, 14.10.2, 14.10.3, 14.10.4, 14.10.5, 14.10.6, 14.10.7, 14.10.8, 14.10.9, 14.10.11, 14.10.12, 14.10.13, 14.10.14, 14.10.15, 14.10.16, 15.0, 15.0-rc-1, 15.0RC1, 15.1, 15.2, 15.3, 15.4, 15.5, 15.5.1, 15.5.2, 15.6, 15.7

Typ oprogramowania: Automation Software

OpublikowanoBaseTempSłaby punkt0dayDzisiajWykPrzCTICVE
2024-04-106.36.0XWiki xwiki-platform-uiextension-api UIExtension privilege escalation$0-$5k$0-$5kNot DefinedOfficial Fix0.07CVE-2024-31997
2024-04-107.37.0XWiki xwiki-commons-velocity Escapetool Remote Code Execution$0-$5k$0-$5kNot DefinedOfficial Fix0.07CVE-2024-31996
2024-04-104.34.1XWiki xwiki-platform-realtime-ui HTML Converter API cross site request forgery$0-$5k$0-$5kNot DefinedOfficial Fix0.04CVE-2024-31988
2024-04-106.36.0XWiki xwiki-platform-oldcore Custom Skins Support privilege escalation$0-$5k$0-$5kNot DefinedOfficial Fix0.04CVE-2024-31987
2024-04-104.34.1XWiki xwiki-platform-scheduler-ui Scheduler Job cross site request forgery$0-$5k$0-$5kNot DefinedOfficial Fix0.00CVE-2024-31986
2024-04-104.34.1XWiki xwiki-platform-scheduler-ui Job Scheduler cross site request forgery$0-$5k$0-$5kNot DefinedOfficial Fix0.03CVE-2024-31985
2024-04-106.36.0XWiki xwiki-platform-search-solr-ui Space Title Privilege Escalation$0-$5k$0-$5kNot DefinedOfficial Fix0.06CVE-2024-31984
2024-04-106.36.0XWiki xwiki-platform-localization-source-wiki Multilingual Wiki privilege escalation$0-$5k$0-$5kNot DefinedOfficial Fix0.03CVE-2024-31983
2024-04-107.37.0XWiki xwiki-platform-search-ui DatabaseSearch Remote Code Execution$0-$5k$0-$5kNot DefinedOfficial Fix0.04CVE-2024-31982
2024-04-106.36.0XWiki xwiki-platform-oldcore PDFClass privilege escalation$0-$5k$0-$5kNot DefinedOfficial Fix0.03CVE-2024-31981
2024-04-106.36.0XWiki xwiki-platform-search-ui SearchSuggestSourceSheet Privilege Escalation$0-$5k$0-$5kNot DefinedOfficial Fix0.00CVE-2024-31465
2024-04-102.72.6XWiki xwiki-platform-oldcore information disclosure$0-$5k$0-$5kNot DefinedOfficial Fix0.03CVE-2024-31464
2024-01-087.77.6XWiki xwiki-platform/xwiki-platform-oldcore Rollback Action privilege escalation$0-$5k$0-$5kNot DefinedOfficial Fix0.04CVE-2024-21648
2024-01-086.46.4XWiki xwiki-platform-distribution-war Attachment denial of service$0-$5k$0-$5kNot DefinedOfficial Fix0.02CVE-2024-21651
2024-01-089.08.9XWiki xwiki-platform User Registration Remote Code Execution$0-$5k$0-$5kNot DefinedOfficial Fix0.04CVE-2024-21650
2023-12-207.37.2XWiki xwiki-platform-index-tree-macro privilege escalation$0-$5k$0-$5kNot DefinedOfficial Fix0.02CVE-2023-50732
2023-07-275.35.1XWiki xwiki-platform-livetable-ui Email Address information disclosure$0-$5k$0-$5kNot DefinedOfficial Fix0.02CVE-2023-38509
2023-05-098.08.0XWiki xwiki-commons-xml HTML Sanitizer Privilege Escalation$0-$5k$0-$5kNot DefinedOfficial Fix0.00CVE-2023-31126
2023-04-206.26.2XWiki xwiki-commons-xml cross site scripting$0-$5k$0-$5kNot DefinedOfficial Fix0.02CVE-2023-29528
2023-04-196.26.1XWiki xwiki-platform-appwithinminutes privilege escalation$0-$5k$0-$5kNot DefinedOfficial Fix0.07CVE-2023-29515
2023-04-198.38.2XWiki xwiki-platform-oldcore Macro privilege escalation$0-$5k$0-$5kNot DefinedOfficial Fix0.00CVE-2023-29526
2023-04-198.38.2XWiki xwiki-platform-scheduler-ui Scheduler Application privilege escalation$0-$5k$0-$5kNot DefinedOfficial Fix0.00CVE-2023-29524
2023-04-195.45.3XWiki xwiki-platform-localization-source-wiki nieznana luka$0-$5k$0-$5kNot DefinedOfficial Fix0.00CVE-2023-29520
2023-04-195.25.1XWiki xwiki-platform-web-templates Template Macro privilege escalation$0-$5k$0-$5kNot DefinedOfficial Fix0.00CVE-2023-29513
2023-04-198.17.9XWiki xwiki-platform-appwithinminutes-ui User Profile privilege escalation$0-$5k$0-$5kNot DefinedOfficial Fix0.00CVE-2023-29527

104 więcej wpisów nie jest pokazywanych

🔒 Login Required

You need to signup and login to see more of the remaining 104 results.

◂ PoprzedniPrzeglądKolejny ▸

Do you need the next level of professionalism?

Upgrade your account now!