xwiki 厂商相关 250 条 CVE 漏洞，含 AI 中文分析、POC、CVSS 评分与受影响产品。
XWiki 是一款基于 Java 的企业级开源 Wiki 平台，核心用于构建知识库与协作系统。其历史漏洞多集中于远程代码执行、跨站脚本及越权访问，部分源于插件或 API 组件的输入验证缺陷。尽管项目持续强化安全机制，但累计 243 条 CVE 记录显示其攻击面较广。用户需及时更新版本并严格审查自定义扩展，以防范已知风险，确保企业数据交互的安全性。
| CVE ID | 标题 | CVSS | 风险等级 | Published |
|---|---|---|---|---|
| CVE-2025-53837 | XWiki XML渲染库代码执行漏洞 — xwiki-rendering CWE-95 | 9.9 | Critical | 2026-09-18 |
| CVE-2026-53966 | XWiki Platform 编辑权提权脚本漏洞 — xwiki-platform CWE-862 | 7.1 | High | 2026-09-15 |
| CVE-2026-34151 | XWiki Platform 路径遍历漏洞 — xwiki-platform CWE-24 | 8.2 | High | 2026-09-14 |
| CVE-2026-48048 | XWiki Platform 信息泄露漏洞 — xwiki-platform CWE-359 | 7.5 | High | 2026-08-10 |
| CVE-2026-48047 | xwiki platform 路径遍历漏洞 — xwiki-platform CWE-24 | 5.9 | Medium | 2026-08-07 |
| CVE-2026-33137 | XWiki Platform 安全漏洞 — xwiki-platform CWE-862 | - | - | 2026-05-20 |
| CVE-2026-23734 | XWiki Platform 安全漏洞 — xwiki-commons CWE-23 | - | - | 2026-05-20 |
| CVE-2026-40105 | XWiki Platform 安全漏洞 — xwiki-platform CWE-80 | 8.8 | - | 2026-04-15 |
| CVE-2026-40104 | XWiki Platform 安全漏洞 — org.xwiki.platform:xwiki-platform-oldcore CWE-770 | 7.5 | - | 2026-04-15 |
| CVE-2026-33229 | XWiki Platform 安全漏洞 — xwiki-platform CWE-862 | 9.9AI | Critical AI | 2026-04-08 |
| CVE-2026-26000 | XWiki Platform 安全漏洞 — xwiki-platform CWE-1021 | 4.1AI | Medium AI | 2026-02-12 |
| CVE-2026-24128 | XWiki Platform 安全漏洞 — xwiki-platform CWE-79 | 9.6 | - | 2026-01-23 |
| CVE-2025-66474 | XWiki Rendering 安全漏洞 — xwiki-rendering CWE-95 | 8.8AI | High AI | 2025-12-10 |
| CVE-2025-66473 | XWiki Platform 安全漏洞 — xwiki-platform CWE-770 | 7.5AI | High AI | 2025-12-10 |
| CVE-2025-66472 | XWiki Platform 安全漏洞 — xwiki-platform CWE-79 | 6.1AI | Medium AI | 2025-12-10 |
| CVE-2025-55749 | XWiki Platform 访问控制错误漏洞 — xwiki-platform CWE-284 | 7.5AI | High AI | 2025-12-01 |
| CVE-2025-52472 | XWiki Platform SQL注入漏洞 — xwiki-platform CWE-89 | 7.1AI | High AI | 2025-10-06 |
| CVE-2025-55748 | XWiki Platform 安全漏洞 — xwiki-platform CWE-23 | 7.5AI | High AI | 2025-09-03 |
| CVE-2025-55747 | XWiki Platform 安全漏洞 — xwiki-platform CWE-23 | 7.5AI | High AI | 2025-09-03 |
| CVE-2025-58049 | XWiki Platform 安全漏洞 — xwiki-platform CWE-212 | 5.8 | Medium | 2025-08-28 |
| CVE-2025-54125 | XWiki Platform 安全漏洞 — xwiki-platform CWE-359 | 8.1AI | High AI | 2025-08-05 |
| CVE-2025-54124 | XWiki Platform 安全漏洞 — xwiki-platform CWE-359 | 6.5AI | Medium AI | 2025-08-05 |
| CVE-2025-32430 | XWiki Platform 安全漏洞 — xwiki-platform CWE-79 | 6.1AI | Medium AI | 2025-08-05 |
| CVE-2025-54385 | XWiki Platform 输入验证错误漏洞 — xwiki-platform CWE-20 | 8.8 | - | 2025-07-26 |
| CVE-2025-32429 | XWiki Platform SQL注入漏洞 — xwiki-platform CWE-89 | 9.8 | - | 2025-07-24 |
| CVE-2025-53836 | XWiki Rendering 安全漏洞 — xwiki-rendering CWE-863 | 10.0 | Critical | 2025-07-14 |
| CVE-2025-53835 | XWiki Rendering 安全漏洞 — xwiki-rendering CWE-79 | 9.1 | Critical | 2025-07-14 |
| CVE-2025-49587 | XWiki Platform 安全漏洞 — xwiki-platform CWE-357 | 5.4AI | Medium AI | 2025-06-13 |
| CVE-2025-49586 | XWiki Platform 安全漏洞 — xwiki-platform CWE-863 | 8.8AI | High AI | 2025-06-13 |
| CVE-2025-49585 | XWiki Platform 安全漏洞 — xwiki-platform CWE-357 | 6.3AI | Medium AI | 2025-06-13 |
本页汇总了 xwiki 厂商截至目前公开的全部 250 条 CVE 漏洞。每条漏洞均包含 CVSS 评分、CWE 弱点分类、受影响产品与参考链接，并附带 AI 生成的中文分析以便快速判断风险。