CVE security advisories and vulnerability history for xwiki-commons by xwiki.
12
Total CVEs
Published
0
In CISA KEV
Exploited in the wild
6
Public exploits
PoC or exploit code
8.4
Avg CVSS
2022–2026
Last updated
Overview
xwiki xwiki-commons has 12 published CVE records since 2022, of which 0 are in CISA's Known Exploited Vulnerabilities catalog and 6 have a known public exploit. The average CVSS base score across scored CVEs is 8.4.
This page aggregates every publicly disclosed vulnerability (CVE) affecting xwiki xwiki-commons, with a severity breakdown, the affected and patched versions, the most common weakness types, and the full CVE list.
Severity and exploitation
How the CVSS severity of xwiki xwiki-commons's CVEs breaks down, plus how many are exploited in the wild or have public exploit code.
Critical7
High2
Medium3
Low0
In CISA’s Known Exploited Vulnerabilities catalog
0
None of xwiki xwiki-commons's CVEs are currently listed in CISA's KEV catalog.
Public exploits
6
6 of xwiki xwiki-commons's CVEs have a known public exploit available.
Affected versions and CVEs
Browse every xwiki xwiki-commons version named in a CVE, then pick one to see only the CVEs that affect it.
Common questions about xwiki xwiki-commons vulnerabilities.
How many CVEs does xwiki xwiki-commons have?
xwiki xwiki-commons has 12 published CVE records since 2022.
How many xwiki xwiki-commons CVEs are in CISA KEV?
None of xwiki xwiki-commons's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.
Are there public exploits for xwiki xwiki-commons vulnerabilities?
Yes — 6 of xwiki xwiki-commons's CVEs have a known public exploit.
Which versions of xwiki xwiki-commons are affected?
72 distinct xwiki xwiki-commons versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version.
What are the most common weakness types in xwiki xwiki-commons CVEs?
xwiki xwiki-commons's CVEs most often map to these CWE weakness types: CWE-79 (Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')), CWE-22 (Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')), CWE-23 (Relative Path Traversal), CWE-611 (Improper Restriction of XML External Entity Reference).
How many critical xwiki xwiki-commons vulnerabilities are there?
xwiki xwiki-commons has 7 critical and 2 high-severity CVEs.
What is the average severity of xwiki xwiki-commons CVEs?
The average CVSS base score across xwiki xwiki-commons's scored CVEs is 8.4.
