Sploitus

58 exploited vulnerabilities in Xwiki

Showing 1–50 of 58, highest-scoring first

Vendors
Xwiki, Hibernate, Oracle, Ckeditor, Unknown
With known exploits
58
Affected Xwiki Full Calendar Macro versions
< 2.4.5
Affected Xwiki versions
< 15.10.16, 16.4.7, 16.10.2, 16.4.6, 16.10.1, 13.10.11, 14.4.7, 14.10, 4.2, 14.7, 16.10.6, 17.2.2, 15.10.14, 16.9.0, 17.3.0, 16.10.3, 7.2, 17.0.0, 12.0, 12.7, 16.10.4, 17.1.0, 15.10.8, 16.2.0, 15.10.12, 16.4.3, 16.8.0, 14.8, 3.0, 14.5, 1.8, 11.10.6, 12.5, 13.10.10, 14.4.6, 14.9, 1.9, 13.10.6, 14.3, 16.10.11, 17.4.4, 17.6.0, 17.7.0
Affected Xwiki Commons versions
< 14.10.6, 15.0, 15.1, 14.10, 4.2
Affected Xwiki Xwiki-rendering versions
< 14.10.6, 15.0, 16.10.10, 17.4.3, 17.5.0, 14.10.4
Affected Xwiki Blog Application versions
< 9.15.7

Vulnerabilities with exploits

Highest CVSS first — 1 of these already have exploit code on Sploitus

CVE-2025-65091
CVSS 10.0 CRITICAL 2025-07-04FIX AVAILABLE
CVE-2025-49594
CVSS 10.0 CRITICAL 2025-10-06FIX AVAILABLE
CVE-2024-56158
CVSS 10.0 CRITICAL 2024-12-17FIX AVAILABLE
CVE-2025-32969
CVSS 10.0 CRITICAL 2024-12-06FIX AVAILABLE
CVE-2025-32968
CVSS 10.0 HIGH 2025-04-23FIX AVAILABLE
CVE-2023-36471
CVSS 10.0 CRITICAL 2023-06-29FIX AVAILABLE
CVE-2023-29209
CVSS 10.0 CRITICAL 2023-04-12FIX AVAILABLE
CVE-2025-53836
CVSS 9.9 CRITICAL 2025-07-14FIX AVAILABLE
CVE-2023-29509
CVSS 9.9 CRITICAL 2023-04-12FIX AVAILABLE
CVE-2023-29214
CVSS 9.9 CRITICAL 2023-04-12FIX AVAILABLE
CVE-2023-29212
CVSS 9.9 CRITICAL 2023-04-12FIX AVAILABLE
CVE-2023-29211
CVSS 9.9 CRITICAL 2023-04-12FIX AVAILABLE
CVE-2023-29210
CVSS 9.9 CRITICAL 2023-04-12FIX AVAILABLE
CVE-2023-29205
CVSS 9.9 CRITICAL 2023-04-12FIX AVAILABLE
CVE-2023-37912
CVSS 9.9 CRITICAL 2023-10-25FIX AVAILABLE
CVE-2025-54385
CVSS 9.8 CRITICAL 2025-07-25FIX AVAILABLE
CVE-2025-46557
CVSS 9.8 CRITICAL 2024-10-24FIX AVAILABLE
CVE-2023-29507
CVSS 9.1 CRITICAL 2023-04-12FIX AVAILABLE
CVE-2025-66024 2 exploits
CVSS 9.0 CRITICAL 2026-03-04FIX AVAILABLE
📄 XWiki Blog Cross Site ScriptingExploit for CVE-2025-66024
CVE-2025-66474
CVSS 9.0 HIGH 2025-07-14FIX AVAILABLE
CVE-2025-51991
CVSS 9.0 HIGH 2025-08-16
CVE-2025-53835
CVSS 9.0 CRITICAL 2022-04-28FIX AVAILABLE
CVE-2025-49586
CVSS 9.0 HIGH 2024-12-06FIX AVAILABLE
CVE-2025-49585
CVSS 9.0 HIGH 2024-09-02FIX AVAILABLE
CVE-2025-49582
CVSS 9.0 HIGH 2025-02-07FIX AVAILABLE
CVE-2025-49581
CVSS 9.0 HIGH 2025-06-13FIX AVAILABLE
CVE-2025-49580
CVSS 9.0 HIGH 2025-06-13FIX AVAILABLE
CVE-2025-32974
CVSS 9.0 CRITICAL 2024-03-19FIX AVAILABLE
CVE-2025-32973
CVSS 9.0 CRITICAL 2024-08-28FIX AVAILABLE
CVE-2023-37908
CVSS 9.0 CRITICAL 2023-05-11FIX AVAILABLE
CVE-2023-29206
CVSS 9.0 CRITICAL 2023-04-12FIX AVAILABLE
CVE-2023-29202
CVSS 9.0 CRITICAL 2023-04-12FIX AVAILABLE
CVE-2023-29528
CVSS 9.0 CRITICAL 2023-04-20FIX AVAILABLE
CVE-2020-15252
CVSS 9.0 HIGH 2020-10-16FIX AVAILABLE
CVE-2023-29508
CVSS 8.9 HIGH 2023-04-12FIX AVAILABLE
CVE-2023-29207
CVSS 8.9 HIGH 2023-04-12FIX AVAILABLE
CVE-2022-36094
CVSS 8.9 HIGH 2022-09-08FIX AVAILABLE
CVE-2025-48063
CVSS 8.8 HIGH 2025-02-06FIX AVAILABLE
CVE-2025-66473
CVSS 8.7 HIGH 2025-07-04FIX AVAILABLE
CVE-2025-55749
CVSS 8.7 HIGH 2025-08-06FIX AVAILABLE
CVE-2025-58365
CVSS 8.7 HIGH 2025-09-08FIX AVAILABLE
CVE-2022-36090
CVSS 8.1 HIGH 2022-09-08FIX AVAILABLE
CVE-2025-49587
CVSS 8.0 HIGH 2024-08-30FIX AVAILABLE
CVE-2024-52299
CVSS 7.8 HIGH 2024-11-13FIX AVAILABLE
CVE-2022-24897
CVSS 7.5 HIGH 2022-04-28FIX AVAILABLE
CVE-2021-32732
CVSS 7.5 HIGH 2022-02-04FIX AVAILABLE
CVE-2025-65089
CVSS 6.8 MEDIUM 2025-11-18FIX AVAILABLE
CVE-2025-32970
CVSS 6.4 MEDIUM 2024-09-05FIX AVAILABLE
CVE-2025-51990
CVSS 5.5 MEDIUM 2025-08-16FIX AVAILABLE
CVE-2025-32971
CVSS 5.5 MEDIUM 2025-04-29FIX AVAILABLE