xwiki 厂商相关 250 条 CVE 漏洞，含 AI 中文分析、POC、CVSS 评分与受影响产品。
XWiki 是一款基于 Java 的企业级开源 Wiki 平台，核心用于构建知识库与协作系统。其历史漏洞多集中于远程代码执行、跨站脚本及越权访问，部分源于插件或 API 组件的输入验证缺陷。尽管项目持续强化安全机制，但累计 243 条 CVE 记录显示其攻击面较广。用户需及时更新版本并严格审查自定义扩展，以防范已知风险，确保企业数据交互的安全性。
| CVE ID | 标题 | CVSS | 风险等级 | Published |
|---|---|---|---|---|
| CVE-2022-36096 | XWiki Platform 跨站脚本漏洞 — xwiki-platform CWE-79 | 8.9 | High | 2022-09-08 |
| CVE-2022-36095 | XWiki Platform 跨站请求伪造漏洞 — xwiki-platform CWE-352 | 4.3 | Medium | 2022-09-08 |
| CVE-2022-36094 | XWiki Platform 跨站脚本漏洞 — xwiki-platform CWE-79 | 8.9 | High | 2022-09-08 |
| CVE-2022-36093 | XWiki Platform 授权问题漏洞 — xwiki-platform CWE-288 | 8.5 | High | 2022-09-08 |
| CVE-2022-36092 | XWiki Platform 授权问题漏洞 — xwiki-platform CWE-287 | 7.5 | High | 2022-09-08 |
| CVE-2022-36091 | XWiki Platform 安全漏洞 — xwiki-platform CWE-862 | 7.5 | High | 2022-09-08 |
| CVE-2022-36090 | XWiki Platform 安全漏洞 — xwiki-platform CWE-285 | 8.1 | High | 2022-09-08 |
| CVE-2022-31166 | XWiki Platform 安全漏洞 — xwiki-platform CWE-269 | 8.1 | High | 2022-09-07 |
| CVE-2022-31167 | XWiki Platform 安全漏洞 — xwiki-platform CWE-285 | 7.1 | High | 2022-09-07 |
| CVE-2022-29258 | XWiki Platform 跨站脚本漏洞 — xwiki-platform CWE-80 | 7.4 | High | 2022-05-31 |
| CVE-2022-29251 | Xwiki Platform 跨站脚本漏洞 — xwiki-platform CWE-80 | 7.4 | High | 2022-05-25 |
| CVE-2022-29252 | XWiki Platform 跨站脚本漏洞 — xwiki-platform CWE-80 | 7.4 | High | 2022-05-25 |
| CVE-2022-29253 | XWiki Platform 路径遍历漏洞 — xwiki-platform CWE-24 | 2.7 | Low | 2022-05-25 |
| CVE-2022-29161 | XWiki 加密问题漏洞 — xwiki-platform CWE-327 | 5.4 | Medium | 2022-05-05 |
| CVE-2022-24897 | XWiki Commons 路径遍历漏洞 — xwiki-commons CWE-22 | 7.5 | High | 2022-05-02 |
| CVE-2022-24898 | XWiki Commons代码问题漏洞 — xwiki-commons CWE-611 | 4.9 | Medium | 2022-04-28 |
| CVE-2022-24820 | Xwiki Platform 访问控制错误漏洞 — xwiki-platform CWE-359 | 5.3 | Medium | 2022-04-08 |
| CVE-2022-24819 | XWiki Platform 安全漏洞 — xwiki-platform CWE-359 | 5.3 | Medium | 2022-04-08 |
| CVE-2022-24821 | XWiki Platform 安全漏洞 — xwiki-platform CWE-648 | 6.8 | Medium | 2022-04-08 |
| CVE-2022-23622 | Xwiki Platform 跨站脚本漏洞 — xwiki-platform CWE-79 | 7.4 | High | 2022-02-09 |
| CVE-2022-23621 | XWiki Platform 安全漏洞 — xwiki-platform CWE-862 | 5.5 | Medium | 2022-02-09 |
| CVE-2022-23620 | XWiki Platform 路径遍历漏洞 — xwiki-platform CWE-22 | 6.8 | Medium | 2022-02-09 |
| CVE-2022-23619 | Xwiki Platform 授权问题漏洞 — xwiki-platform CWE-200 | 5.3 | Medium | 2022-02-09 |
| CVE-2022-23618 | Xwiki Platform 输入验证错误漏洞 — xwiki-platform CWE-601 | 4.7 | Medium | 2022-02-09 |
| CVE-2022-23617 | XWiki Platform 安全漏洞 — xwiki-platform CWE-862 | 6.5 | Medium | 2022-02-09 |
| CVE-2022-23616 | Xwiki Platform 注入漏洞 — xwiki-platform CWE-74 | 8.8 | High | 2022-02-09 |
| CVE-2022-23615 | XWiki Platform 安全漏洞 — xwiki-platform CWE-863 | 5.4 | Medium | 2022-02-09 |
| CVE-2021-43841 | Xwiki Platform 跨站脚本漏洞 — xwiki-platform CWE-79 | 5.4 | Medium | 2022-02-04 |
| CVE-2021-32732 | Xwiki Platform 跨站请求伪造漏洞 — xwiki-platform CWE-352 | 7.5 | High | 2022-02-04 |
| CVE-2021-32731 | XWiki Platform 信息泄露漏洞 — xwiki-platform CWE-200 | 5.3 | Medium | 2021-07-01 |
本页汇总了 xwiki 厂商截至目前公开的全部 250 条 CVE 漏洞。每条漏洞均包含 CVSS 评分、CWE 弱点分类、受影响产品与参考链接，并附带 AI 生成的中文分析以便快速判断风险。