Vulnerabilities > Xwiki > Xwiki > 14.4

DATE CVE VULNERABILITY TITLE RISK
2022-11-23 CVE-2022-41930 Missing Authorization vulnerability in Xwiki
org.xwiki.platform:xwiki-platform-user-profile-ui is missing authorization to enable or disable users.
network
low complexity
xwiki CWE-862
8.2
2022-11-22 CVE-2022-41936 Privacy Violation vulnerability in Xwiki
XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it.
network
low complexity
xwiki CWE-359
7.5
2022-11-22 CVE-2022-41937 Missing Authorization vulnerability in Xwiki
XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it.
network
low complexity
xwiki CWE-862
8.1