XW
Vendor
xwikisas
17
CVEs
0
On KEV
1
New 30D
Products
XW10.0
xwiki-pro-macros
xwikisas
8 CVEs0 on KEV1 new
MA9.0
macro-pdfviewer
xwikisas
4 CVEs0 on KEV0 new
AP9.1
application-confluence-migrator-pro
xwikisas
2 CVEs0 on KEV0 new
AP5.3
application-admintools
xwikisas
1 CVEs0 on KEV0 new
AP5.3
application-licensing
xwikisas
1 CVEs0 on KEV0 new
AP5.7
application-urlshortener
xwikisas
1 CVEs0 on KEV0 new
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-44179 New | XW xwiki-pro-macros xwikisas | 9.9 | Oct 28 | XWiki Pro Macros: excerpt-include title and content injection executes code |
| CVE-2025-65036 | XW xwiki-pro-macros xwikisas | 8.3 | Dec 5 | XWiki Remote Macros vulnerable to remote code execution using the confluence details summary macro |
| CVE-2025-65089 | XW xwiki-pro-macros xwikisas | 6.5 | Nov 19 | XWiki view file macro: User can view content of office file without view rights on the attachment |
| CVE-2025-54990 | AP application-admintools xwikisas | 5.3 | Nov 18 | XWiki AdminTools application doesn't set permissions on the AdminTools space |
| CVE-2025-55730 | XW xwiki-pro-macros xwikisas | 10.0 | Sep 9 | XWiki Remote Macros vulnerable to remote code execution using the confluence paste code macro |
| CVE-2025-55729 | XW xwiki-pro-macros xwikisas | 10.0 | Sep 9 | XWiki Remote Macros vulnerable to remote code execution using the ConfluenceLayoutSection macro |
| CVE-2025-55728 | XW xwiki-pro-macros xwikisas | 9.8 | Sep 9 | XWiki Remote Macros vulnerable to remote code execution using the panel macro |
| CVE-2025-55727 | XW xwiki-pro-macros xwikisas | 9.8 | Sep 9 | XWiki Remote Macros vulnerable to remote code execution from width parameter in the column macro |
| CVE-2025-48885 | AP application-urlshortener xwikisas | 5.7 | May 30 | application-urlshortener users can create arbitrary pages as long as they have view access to them |
| CVE-2025-27604 | AP application-confluence-migrator-pro xwikisas | 7.5 | Mar 7 | XWiki Confluence Migrator Pro's homepage is public |
| CVE-2025-27603 | AP application-confluence-migrator-pro xwikisas | 9.1 | Mar 7 | XWiki Confluence Migrator Pro allows Remote Code Execution via unescaped translations |
| CVE-2024-52298 | MA macro-pdfviewer xwikisas | 7.5 | Nov 13 | macro-pdfviewer's preview in WYSIWYG editor allows accessing any PDF document as the last author |
| CVE-2024-52299 | MA macro-pdfviewer xwikisas | 7.5 | Nov 13 | The PDF viewer macro allows accessing any attachment without access right checks |
| CVE-2024-52300 | MA macro-pdfviewer xwikisas | 9.0 | Nov 13 | macro-pdfviewer has a XSS through the width parameter |
| CVE-2024-42489 | XW xwiki-pro-macros xwikisas | 8.8 | Aug 12 | Pro Macros Remote Code Execution via Viewpdf and similar macros |
| CVE-2024-30263 | MA macro-pdfviewer xwikisas | 7.7 | Apr 4 | The PDF Viewer macro can be used to view PDF attachments with restricted access |
| CVE-2024-26138 | AP application-licensing xwikisas | 5.3 | Feb 21 | License information is public, exposing instance id and license holder details |