Xwiki Luki w zabezpieczeniach

Oś czasu

Rodzaj

Content Management System126
Automation Software1

Produkt

XWiki Platform58
XWiki xwiki-platform-oldcore9
XWiki xwiki-platform-scheduler-ui3
XWiki xwiki-commons-xml3
XWiki xwiki-platform-web-templates3

Przeciwdziałanie

Official Fix125
Temporary Fix0
Workaround0
Unavailable1
Not Defined1

Wykorzystywanie

High1
Functional0
Proof-of-Concept0
Unproven0
Not Defined126

Wektor dostępu

Not Defined0
Physical0
Local1
Adjacent2
Network124

Uwierzytelnianie

Not Defined0
High4
Low87
None36

Interakcja z użytkownikiem

Not Defined0
Required50
None77

C3BM Index

CVSSv3 Base

≤10
≤20
≤32
≤46
≤511
≤622
≤737
≤816
≤933
≤100

CVSSv3 Temp

≤10
≤20
≤32
≤46
≤511
≤635
≤728
≤817
≤928
≤100

VulDB

≤10
≤20
≤32
≤428
≤527
≤617
≤747
≤86
≤90
≤100

NVD

≤10
≤20
≤30
≤40
≤53
≤66
≤716
≤83
≤936
≤104

CNA

≤10
≤20
≤31
≤40
≤54
≤63
≤73
≤811
≤924
≤1045

Sprzedawca

≤10
≤20
≤30
≤40
≤50
≤60
≤70
≤80
≤90
≤100

Research

≤10
≤20
≤30
≤40
≤50
≤60
≤70
≤80
≤90
≤100

Exploit 0-day

<1k2
<2k125
<5k0
<10k0
<25k0
<50k0
<100k0
≥100k0

Wykorzystaj dzisiaj

<1k127
<2k0
<5k0
<10k0
<25k0
<50k0
<100k0
≥100k0

Wykorzystaj wielkość rynku

🔴 CTI Zajęcia

Affected Products (50): Admin Tools Application (2), CKEditor.HTMLConverter (1), Commons (1), CryptPad (2), Platform (59), Rendering (2), XWiki Enterprise (1), XWiki Watch (1), application-changerequest (1), application-collabora (1), xwiki-application-administration (1), xwiki-commons-velocity (1), xwiki-commons-xml (3), xwiki-platform (2), xwiki-platform-administration (1), xwiki-platform-administration-ui (2), xwiki-platform-appwithinminutes (1), xwiki-platform-appwithinminutes-ui (2), xwiki-platform-attachment-ui (2), xwiki-platform-distribution-war (2), xwiki-platform-flamingo (1), xwiki-platform-flamingo-theme-ui (2), xwiki-platform-index-tree-macro (1), xwiki-platform-invitation-ui (1), xwiki-platform-legacy-events-hibernate-ui (1), xwiki-platform-legacy-notification-activitymacro (1), xwiki-platform-livedata-macro (1), xwiki-platform-livetable-ui (1), xwiki-platform-localization-script (1), xwiki-platform-localization-source-wiki (2), xwiki-platform-logging-ui (1), xwiki-platform-notifications-ui (1), xwiki-platform-office-viewer (1), xwiki-platform-oldcore (9), xwiki-platform-panels-ui (2), xwiki-platform-realtime-ui (1), xwiki-platform-rendering-async-macro (1), xwiki-platform-rendering-macro-rss (1), xwiki-platform-rendering-xwiki (1), xwiki-platform-scheduler-ui (3), xwiki-platform-search-solr-ui (1), xwiki-platform-search-ui (2), xwiki-platform-security-authentication-default (1), xwiki-platform-skin-skinx (1), xwiki-platform-uiextension-api (1), xwiki-platform-vfs-ui (1), xwiki-platform-web (1), xwiki-platform-web-templates (3), xwiki-platform-wiki-ui-mainwiki (1), xwiki-platform-xclass-ui (1)

OpublikowanoBaseTempSłaby punktProdWykPrzEPSSCTICVE
2024-04-106.36.0XWiki xwiki-platform-uiextension-api UIExtension privilege escalationAutomation SoftwareNot DefinedOfficial Fix0.000450.07CVE-2024-31997
2024-04-107.37.0XWiki xwiki-commons-velocity Escapetool Remote Code ExecutionContent Management SystemNot DefinedOfficial Fix0.000440.07CVE-2024-31996
2024-04-104.34.1XWiki xwiki-platform-realtime-ui HTML Converter API cross site request forgeryContent Management SystemNot DefinedOfficial Fix0.000440.04CVE-2024-31988
2024-04-106.36.0XWiki xwiki-platform-oldcore Custom Skins Support privilege escalationContent Management SystemNot DefinedOfficial Fix0.000450.04CVE-2024-31987
2024-04-104.34.1XWiki xwiki-platform-scheduler-ui Scheduler Job cross site request forgeryContent Management SystemNot DefinedOfficial Fix0.000450.00CVE-2024-31986
2024-04-104.34.1XWiki xwiki-platform-scheduler-ui Job Scheduler cross site request forgeryContent Management SystemNot DefinedOfficial Fix0.000440.03CVE-2024-31985
2024-04-106.36.0XWiki xwiki-platform-search-solr-ui Space Title Privilege EscalationContent Management SystemNot DefinedOfficial Fix0.000440.06CVE-2024-31984
2024-04-106.36.0XWiki xwiki-platform-localization-source-wiki Multilingual Wiki privilege escalationContent Management SystemNot DefinedOfficial Fix0.000450.03CVE-2024-31983
2024-04-107.37.0XWiki xwiki-platform-search-ui DatabaseSearch Remote Code ExecutionContent Management SystemNot DefinedOfficial Fix0.000450.04CVE-2024-31982
2024-04-106.36.0XWiki xwiki-platform-oldcore PDFClass privilege escalationContent Management SystemNot DefinedOfficial Fix0.000450.03CVE-2024-31981
2024-04-106.36.0XWiki xwiki-platform-search-ui SearchSuggestSourceSheet Privilege EscalationContent Management SystemNot DefinedOfficial Fix0.000440.00CVE-2024-31465
2024-04-102.72.6XWiki xwiki-platform-oldcore information disclosureContent Management SystemNot DefinedOfficial Fix0.000450.03CVE-2024-31464
2024-01-087.77.6XWiki xwiki-platform/xwiki-platform-oldcore Rollback Action privilege escalationContent Management SystemNot DefinedOfficial Fix0.000630.04CVE-2024-21648
2024-01-086.46.4XWiki xwiki-platform-distribution-war Attachment denial of serviceContent Management SystemNot DefinedOfficial Fix0.000460.02CVE-2024-21651
2024-01-089.08.9XWiki xwiki-platform User Registration Remote Code ExecutionContent Management SystemNot DefinedOfficial Fix0.005850.04CVE-2024-21650
2023-12-207.37.2XWiki xwiki-platform-index-tree-macro privilege escalationContent Management SystemNot DefinedOfficial Fix0.000920.02CVE-2023-50732
2023-12-167.67.5XWiki Platform Admin Section cross site scriptingContent Management SystemNot DefinedOfficial Fix0.002100.00CVE-2023-50722
2023-12-168.38.2XWiki Platform Administration Interface Privilege EscalationContent Management SystemNot DefinedOfficial Fix0.001190.00CVE-2023-50723
2023-12-165.35.2XWiki Platform Email Address information disclosureContent Management SystemNot DefinedOfficial Fix0.000520.00CVE-2023-50720
2023-12-165.65.5XWiki Platform information disclosureContent Management SystemNot DefinedOfficial Fix0.000640.00CVE-2023-50719
2023-12-168.17.9XWiki Platform Search Administration Interface privilege escalationContent Management SystemNot DefinedOfficial Fix0.001990.00CVE-2023-50721
2023-12-056.26.1XWiki application-changerequest XML File information disclosureContent Management SystemNot DefinedOfficial Fix0.000660.00CVE-2023-49280
2023-11-206.46.3XWiki Platform privilege escalationContent Management SystemNot DefinedOfficial Fix0.000640.00CVE-2023-48241
2023-11-206.56.4XWiki Admin Tools Application cross site request forgeryContent Management SystemNot DefinedOfficial Fix0.000590.00CVE-2023-48293
2023-11-207.67.5XWiki Admin Tools Application cross site request forgeryContent Management SystemNot DefinedOfficial Fix0.000590.00CVE-2023-48292

102 więcej wpisów nie jest pokazywanych

🔒 Login Required

You need to signup and login to see more of the remaining 102 results.

◂ PoprzedniPrzeglądKolejny ▸

Might our Artificial Intelligence support you?

Check our Alexa App!