Vendor
xwiki
On CISA KEV1Public exploit16Avg CVSS8.2
CVEs in the catalog
248
since 2020-05
Months in the top 100
23
months with a stored rank
Best rank
#7
one month recomputed
History
CVEs per ranked month
Last 23 of 23 ranked months. 0.4% of its CVEs are on the CISA KEV catalog.
May 20Jun 25
| Month | CVEs | Critical | Rank |
|---|---|---|---|
| Jun 25 | 9 | 1 | #47* |
| Apr 25 | 10 | 3 | #46* |
| Dec 24 | 5 | 3 | #80* |
| Apr 24 | 12 | 10 | #38* |
| Dec 23 | 6 | 3 | #56* |
| Nov 23 | 7 | 6 | #54* |
| Oct 23 | 10 | 8 | #41* |
| Aug 23 | 5 | 5 | #77* |
| Jun 23 | 22 | 17 | #12* |
| May 23 | 5 | 4 | #60* |
| Apr 23 | 38 | 27 | #7* |
| Mar 23 | 15 | 7 | #27* |
| Nov 22 | 11 | 4 | #25* |
| Sep 22 | 13 | 2 | #20* |
| May 22 | 6 | #36* | |
| Apr 22 | 4 | #59* | |
| Feb 22 | 10 | #21* | |
| Jul 21 | 3 | #40* | |
| May 21 | 2 | #52* | |
| Mar 21 | 2 | #59* | |
| Dec 20 | 1 | #93* | |
| Sep 20 | 1 | #74* | |
| May 20 | 1 | 1 | #89* |
Affected scope
Products and weakness classes
Products
| Product | CVEs | Share |
|---|---|---|
| xwiki platform | 231 | 93% |
| xwiki | 15 | 6% |
| xwiki commons | 9 | 4% |
| xwiki rendering | 6 | 2% |
| commons | 1 | 0.4% |
| org xwiki platform xwiki platform legacy oldcore | 1 | 0.4% |
| org xwiki platform xwiki platform oldcore | 1 | 0.4% |
| xwiki platform legacy oldcore | 1 | 0.4% |
| xwiki platform oldcore | 1 | 0.4% |
Weakness classes
| Weakness | CVEs | Share |
|---|---|---|
| CWE-79 | 35 | 14% |
| CWE-95 | 30 | 12% |
| CWE-862 | 24 | 10% |
| CWE-74 | 21 | 8% |
| CWE-94 | 15 | 6% |
| CWE-80 | 14 | 6% |
| CWE-359 | 12 | 5% |
| CWE-863 | 11 | 4% |
Latest CVEs
15 most recently published
Enriched records open their full page; the rest open their catalog record.
| CVE | Weakness | Signals | CVSS | Published |
|---|---|---|---|---|
| CVE-2026-48048 | CWE-359 | none yet | 7.5 | 2026-08-10 |
| CVE-2026-48047 | CWE-24 | none yet | 5.9 | 2026-08-07 |
| CVE-2026-33137 | CWE-862 | 1 | 9.3 | 2026-05-20 |
| CVE-2026-23734 | CWE-23 | none yet | 9.3 | 2026-05-20 |
| CVE-2026-40105 | CWE-80 | none yet | 6.5 | 2026-04-15 |
| CVE-2026-40104 | CWE-770 | none yet | 8.2 | 2026-04-15 |
| CVE-2026-33229 | CWE-862 | 1 | 9.8 | 2026-04-08 |
| CVE-2026-26000 | CWE-1021 | none yet | 5.3 | 2026-02-12 |
| CVE-2026-24128 | CWE-79, CWE-80 | none yet | 6.5 | 2026-01-23 |
| CVE-2025-66474 | CWE-95 | none yet | 8.7 | 2025-12-10 |
| CVE-2025-66473 | CWE-770 | none yet | 8.7 | 2025-12-10 |
| CVE-2025-66472 | CWE-79, CWE-80 | none yet | 6.5 | 2025-12-10 |
| CVE-2025-55749 | CWE-284 | none yet | 8.7 | 2025-12-01 |
| CVE-2025-52472 | CWE-89 | none yet | 9.3 | 2025-10-06 |
| CVE-2025-55748 | CWE-23 | none yet | 9.3 | 2025-09-03 |