Crítica
CVE-2025-46558
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 7.074
Restablecer filtros
Alta
CVE-2025-46557
Any user with view access to the XWiki space can change the authenticator
Media
CVE-2025-46554
XWiki missing authorization when accessing the wiki level attachments list and metadata via REST API
Crítica
CVE-2025-32974
org.xwiki.platform:xwiki-platform-security-requiredrights-default required rights analysis doesn't consider TextAreas with default content type
Crítica
CVE-2025-32973
org.xwiki.platform:xwiki-platform-component-wiki provides no warning when granting XWiki.ComponentClass programming right
Baja
CVE-2025-32972
The lesscss script service allows cache clearing without programming right
Baja
CVE-2025-32971
Solr script service doesn't take dropped programming right into account
Media
CVE-2025-32970
org.xwiki.platform:xwiki-platform-wysiwyg-api Open Redirect vulnerability
Media
CVE-2025-31650
Apache Tomcat Denial of Service via invalid HTTP priority header
Baja
CVE-2025-31651
Apache Tomcat Rewrite rule bypass
Alta
CVE-2025-22235
Spring Boot EndpointRequest.to() creates wrong matcher if actuator endpoint is not exposed
Media
CVE-2025-3985
Apereo CAS has inefficient regular expression complexity
Media
CVE-2025-3986
Apereo CAS has inefficient regular expression complexity
Baja
CVE-2025-3984
Apereo CAS code injection vulnerability
Alta
CVE-2025-27820
Apache HttpClient disables domain checks
Crítica
CVE-2025-32969
org.xwiki.platform:xwiki-platform-rest-server allows SQL injection in query endpoint of REST API
Alta
CVE-2025-32968
org.xwiki.platform:xwiki-platform-oldcore allows SQL injection in short form select requests through the script query API
Media
CVE-2025-32961
XSS in the /download Endpoint of the JPA Web API
Media
CVE-2025-32960
XSS in the /files Endpoint of the Generic REST API
Media
CVE-2025-32959
Cuba has a DoS in the File Storage
Media
CVE-2025-32952
io.jmix.localfs:jmix-localfs affected by DoS in the Local File Storage
Media
CVE-2025-32951
io.jmix.rest:jmix-rest allows XSS in the /files Endpoint of the Generic REST API
Media
CVE-2025-32950
io.jmix.localfs:jmix-localfs has a Path Traversal in Local File Storage
Crítica
CVE-2025-29287
MCMS allows arbitrary file uploads in the ueditor component
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.