Alta
CVE-2026-34151
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 47
Restablecer filtros
Media
CVE-2026-40104
XWiki's REST APIs can list all pages/spaces, leading to unavailability
Alta
CVE-2026-33229
XWiki vulnerable to remote code execution with script right through unprotected Velocity scripting API
Alta
CVE-2025-66474
XWiki vulnerable to remote code execution through insufficient protection against {{/html}} injection
Alta
CVE-2025-54125
XWiki exposes passwords and emails stored in fields not named password/email in xml.vm
Alta
CVE-2025-54124
XWiki leaks password hashes and other accessible password properties
Alta
CVE-2025-54385
XWiki Platform vulnerable to SQL injection through XWiki#searchDocuments API
Alta
CVE-2025-49586
XWiki allows remote code execution through preview of XClass changes in AWM editor
Crítica
CVE-2024-56158
XWiki allows SQL injection in query endpoint of REST API with Oracle
Alta
CVE-2025-32968
org.xwiki.platform:xwiki-platform-oldcore allows SQL injection in short form select requests through the script query API
Crítica
CVE-2024-43400
XWiki Platform allows XSS through XClass name in string properties
Media
CVE-2024-37898
XWiki Platform vulnerable to document deletion and overwrite from edit
Crítica
CVE-2024-37899
XWiki Platform allows remote code execution from user account
Crítica
CVE-2024-31987
XWiki Platform remote code execution from account via custom skins support
Crítica
CVE-2024-31981
XWiki Platform: Privilege escalation (PR) from user registration through PDFClass
Media
CVE-2024-31464
XWiki Platform: Password hash might be leaked by diff once the xobject holding them is deleted
Alta
CVE-2024-21648
XWiki has no right protection on rollback action
Alta
CVE-2023-46243
XWiki Platform vulnerable to privilege escalation and remote code execution via the edit action
Crítica
CVE-2023-46242
XWiki Platform vulnerable to remote code execution via the edit action because it lacks CSRF token
Media
CVE-2023-37911
org.xwiki.platform:xwiki-platform-oldcore may leak data through deleted and re-created documents
Media
CVE-2023-41046
Velocity execution without script right through VelocityCode and VelocityWiki property
Alta
CVE-2023-40572
XWiki Platform vulnerable to CSRF privilege escalation/RCE via the create action
Crítica
CVE-2023-36468
Upgrading doesn't prevent exploiting vulnerable XWiki documents
Alta
CVE-2023-35157
XWiki Platform vulnerable to reflected cross-site scripting via delattachment action
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.