Severity Critical High Medium Low Informational Vulnerability Categories Abuse Of Functionality Acumonitor Arbitrary File Creation Arbitrary File Read Arbitrary File Write Authentication Bypass BOLA Bruteforce Possible Buffer Overflow CSRF CSTI Code Execution Configuration Crlf Injection Deepscan Default Credentials Denial-of-service Dev Files Directory Listing Directory Traversal Eli Injection Error Handling File Inclusion Http Parameter Pollution Http Response Splitting Information Disclosure Insecure Admin Access Insecure Deserialization Internal Ip Disclosure Known Vulnerabilitie Known Vulnerabilities Ldap Injection Malware Missing Update Path Traversal Privilege Escalation Remote Code Execution SSRF SSTI Sensitive Data Not Over Ssl Server Side Template Injection Session Fixation Source Code Disclosure Sql Injection Test Files Unauthenticated File Upload Url Redirection Weak Credentials Weak Crypto XFS XSS XXE Xpath Injection Vulnerability Name CVE CWE CWE Severity XWiki Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2010-4642) Medium XWiki Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2018-16277) Medium XWiki Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2021-3137) Medium XWiki Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2021-29459) Medium XWiki Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2022-23622) Medium XWiki Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2022-29251) Medium XWiki Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2022-29252) Medium XWiki Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2022-29258) Medium XWiki Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2022-36097) Medium XWiki Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2023-26480) Medium XWiki Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2023-29205) Medium XWiki Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2023-29206) Medium XWiki Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2023-29506) Medium XWiki Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2023-29508) Medium XWiki Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2023-29515) Medium XWiki Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2023-32070) Medium XWiki Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2023-34464) Medium XWiki Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2023-35153) Medium XWiki Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2023-35155) Medium XWiki Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2023-35156) Medium XWiki Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2023-35157) Medium XWiki Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2023-35159) Medium XWiki Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2023-35160) Medium XWiki Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2023-35161) Medium XWiki Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2023-35162) Medium XWiki Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2023-36477) Medium XWiki Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2023-40176) Medium XWiki Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2023-45137) Medium XWiki Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2023-46732) Medium XWiki Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2024-43400) Medium XWiki Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection') Vulnerability (CVE-2020-15171) Medium XWiki Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection') Vulnerability (CVE-2022-23616) Medium XWiki Improper Preservation of Permissions Vulnerability (CVE-2021-21379) Medium XWiki Incorrect Authorization Vulnerability (CVE-2021-32620) Medium XWiki Incorrect Authorization Vulnerability (CVE-2022-23615) Medium XWiki Incorrect Authorization Vulnerability (CVE-2023-26056) Medium XWiki Incorrect Authorization Vulnerability (CVE-2023-50732) Medium XWiki Incorrect Authorization Vulnerability (CVE-2024-38369) Medium XWiki Incorrect Permission Assignment for Critical Resource Vulnerability (CVE-2021-32729) Medium XWiki Insufficiently Protected Credentials Vulnerability (CVE-2022-41933) Medium XWiki Missing Authentication for Critical Function Vulnerability (CVE-2022-24820) Medium XWiki Missing Authorization Vulnerability (CVE-2022-23617) Medium XWiki Missing Authorization Vulnerability (CVE-2022-31167) Medium XWiki Missing Authorization Vulnerability (CVE-2022-41929) Medium XWiki Missing Authorization Vulnerability (CVE-2023-41046) Medium XWiki Other Vulnerability (CVE-2022-41935) Medium XWiki Permissions, Privileges, and Access Controls Vulnerability (CVE-2006-7223) Medium XWikiplatform Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2024-31985) Medium XWikiplatform Improper Control of Generation of Code ('Code Injection') Vulnerability (CVE-2024-37900) Medium XWikiplatform Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2024-41947) Medium XWikiplatform Missing Authorization Vulnerability (CVE-2024-37898) Medium XWikiplatform Missing Authorization Vulnerability (CVE-2024-45591) Medium XWikiplatform Other Vulnerability (CVE-2024-46978) Medium XWikiplatform Other Vulnerability (CVE-2024-46979) Medium XWikiplatform Use of Password Hash With Insufficient Computational Effort Vulnerability (CVE-2024-31464) Medium XWiki Transmission of Private Resources into a New Sphere ('Resource Leak') Vulnerability (CVE-2023-38509) Medium XWiki Uncontrolled Resource Consumption Vulnerability (CVE-2024-21651) Medium XWiki URL Redirection to Untrusted Site ('Open Redirect') Vulnerability (CVE-2022-23618) Medium XWiki URL Redirection to Untrusted Site ('Open Redirect') Vulnerability (CVE-2023-29204) Medium XWiki URL Redirection to Untrusted Site ('Open Redirect') Vulnerability (CVE-2023-32068) Medium XXE in Ivanti Connect Secure, Policy Secure and Neurons (CVE-2024-22024) Medium YetiForce CRM Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2021-4092) Medium YetiForce CRM Improper Input Validation Vulnerability (CVE-2021-4111) Medium YetiForce CRM Improper Input Validation Vulnerability (CVE-2021-4117) Medium YetiForce CRM Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') Vulnerability (CVE-2023-49508) Medium YetiForce CRM Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2021-4107) Medium YetiForce CRM Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2021-4116) Medium YetiForce CRM Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2021-4121) Medium YetiForce CRM Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2022-1340) Medium YetiForce CRM Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2022-2829) Medium YetiForce CRM Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2022-2885) Medium YetiForce CRM Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2022-2890) Medium YetiForce CRM Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2022-2924) Medium YetiForce CRM Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2022-3000) Medium YetiForce CRM Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2022-3002) Medium 1...104105106107 105 / 107
