Xwikisas - vulnerabilities (CVEs)
19 CVEs in 10 products, 1 in the last 30 days, newest from 2026-10-28.
Products
- Xwiki-pro-macros - 8 CVEs
- Macro-pdfviewer - 4 CVEs
- Macro Pdfviewer - 4 CVEs
- Application-confluence-migrator-pro - 2 CVEs
- Application-admintools - 1 CVEs
- Application-collabora - 1 CVEs
- Application-licensing - 1 CVEs
- Application-urlshortener - 1 CVEs
- Application Licensing - 1 CVEs
- Identity-oauth - 1 CVEs
Newest CVEs of Xwikisas
- CVE-2026-44179 - CVSS 9.9 (critical), 2026-10-28: XWiki Remote Macros provides XWiki rendering macros that are useful when migrating content from Confluence. From 1.13 until 1.14.5, the `excerpt-include`…
- CVE-2025-65036 - CVSS 8.3 (high), 2025-12-05: XWiki Remote Macros provides XWiki rendering macros that are useful when migrating content from Confluence. Prior to 1.27.1, the macro executes Velocity from…
- CVE-2025-65089 - CVSS 6.8 (medium), 2025-11-19: XWiki Remote Macros provides XWiki rendering macros that are useful when migrating content from Confluence. Prior to version 1.27.0, a user with no view…
- CVE-2025-54990 - CVSS 5.3 (medium), 2025-11-18: XWiki AdminTools integrates administrative tools for managing a running XWiki instance. Prior to version 1.1, users without admin rights have access to…
- CVE-2025-55730 - CVSS 10 (critical), 2025-09-09: XWiki Remote Macros provides XWiki rendering macros that are useful when migrating content from Confluence. Starting in version 1.0 and prior to version…
- CVE-2025-55729 - CVSS 10 (critical), 2025-09-09: XWiki Remote Macros provides XWiki rendering macros that are useful when migrating content from Confluence. Starting in version 1.0 and prior to version…
- CVE-2025-55728 - CVSS 10 (critical), 2025-09-09: XWiki Remote Macros provides XWiki rendering macros that are useful when migrating content from Confluence. Starting in version 1.0 and prior to version…
- CVE-2025-55727 - CVSS 10 (critical), 2025-09-09: XWiki Remote Macros provides XWiki rendering macros that are useful when migrating content from Confluence. Starting in version 1.0 and prior to version…
- CVE-2025-48885 - CVSS 5.7 (medium), 2025-05-30: application-urlshortener create shortened URLs for XWiki pages. Versions prior to 1.2.4 are vulnerable to users with view access being able to create…
- CVE-2025-27604 - CVSS 7.5 (high), 2025-03-07: XWiki Confluence Migrator Pro helps admins to import confluence packages into their XWiki instance. The homepage of the application is public which enables a…
- CVE-2025-27603 - CVSS 9.1 (critical), 2025-03-07: XWiki Confluence Migrator Pro helps admins to import confluence packages into their XWiki instance. A user that doesn't have programming rights can execute…
- CVE-2024-52300 - CVSS 9.1 (critical), 2024-11-13: macro-pdfviewer is a PDF Viewer Macro for XWiki using Mozilla pdf.js. The width parameter of the PDF viewer macro isn't properly escaped, allowing XSS for any…
- CVE-2024-52299 - CVSS 7.5 (high), 2024-11-13: macro-pdfviewer is a PDF Viewer Macro for XWiki using Mozilla pdf.js. Any user with view right on XWiki.PDFViewerService can access any attachment stored in…
- CVE-2024-52298 - CVSS 7.5 (high), 2024-11-13: macro-pdfviewer is a PDF Viewer Macro for XWiki using Mozilla pdf.js. The PDF Viewer macro allows an attacker to view any attachment using the "Delegate my…
- CVE-2024-42489 - CVSS 10 (critical), 2024-08-12: Pro Macros provides XWiki rendering macros. Missing escaping in the Viewpdf macro allows any user with view right on the `CKEditor.HTMLConverter` page or edit…
- CVE-2024-30263 - CVSS 7.7 (high), 2024-04-04: macro-pdfviewer is a PDF Viewer Macro for XWiki using Mozilla pdf.js. Users with edit rights can access restricted PDF attachments using the PDF Viewer macro,…
- CVE-2024-26138 - CVSS 5.3 (medium), 2024-02-21: The XWiki licensor application, which manages and enforce application licenses for paid extensions, includes the document `Licenses.Code.LicenseJSON` that…
- CVE-2023-46743 - CVSS 7.4 (high), 2023-11-09: application-collabora is an integration of Collabora Online in XWiki. As part of the application use cases, depending on the rights that a user has over a…
- CVE-2023-45144 - CVSS 10 (critical), 2023-10-16: com.xwiki.identity-oauth:identity-oauth-ui is a package to aid in building identity and service providers based on OAuth authorizations. When a user logs in…
