mediawiki mediawiki

Name: mediawiki mediawiki
Brand: mediawiki

productEU

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

KEV-listed

public exploit

EPSS ≥ 10%

critical

by severity

0critical6high11medium0low

updated 2026-10-28

vulnerabilities (17)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2018-0504US	medium6.5	2.88% (87th)	—	no fix	2018-10-04	≤ before 1.31.1, 1.30.1, 1.29.3 and 1.27.5
CVE-2013-1816US	high7.5	2.68% (86th)	—	no fix	2019-11-20	2 versions
CVE-2013-1817US	high7.5	2.51% (85th)	—	no fix	2019-11-20	2 versions
CVE-2018-13258US	medium5.3	2.25% (83rd)	—	no fix	2018-10-04	≤ 1.31 before 1.31.1
CVE-2018-0505US	medium6.5	1.97% (80th)	—	no fix	2018-10-04	≤ before 1.31.1, 1.30.1, 1.29.3 and 1.27.5
CVE-2017-0367US	high8.8	1.80% (78th)	—	no fix	2018-04-13	≤ n/a
CVE-2018-0503US	medium4.3	1.56% (75th)	—	no fix	2018-10-04	≤ before 1.31.1, 1.30.1, 1.29.3 and 1.27.5
CVE-2017-0368US	medium5.3	1.47% (74th)	—	no fix	2018-04-13	≤ n/a
CVE-2017-0370US	medium5.3	1.38% (72nd)	—	no fix	2018-04-13	≤ n/a
CVE-2012-0046US	high7.5	1.37% (72nd)	—	no fix	2019-10-29	≤ 1.16
CVE-2017-0366US	medium5.4	1.30% (70th)	—	no fix	2018-04-13	≤ n/a
CVE-2017-0369US	medium6.5OT elevated	1.17% (67th)	—	no fix	2018-04-13	≤ n/a
CVE-2017-0365US	medium4.7	1.15% (67th)	—	no fix	2018-04-13	≤ n/a
CVE-2017-0364US	medium6.1	1.08% (65th)	—	no fix	2018-04-13	≤ n/a
CVE-2017-0363US	medium6.1	1.08% (65th)	—	no fix	2018-04-13	≤ n/a
CVE-2017-0362US	high8.8	0.76% (55th)	—	no fix	2018-04-13	≤ n/a
CVE-2017-0361US	high7.8	0.43% (38th)	—	no fix	2018-04-13	≤ n/a

The flaw types (CWEs) most of these CVEs share.

CWE-200Exposure of Sensitive Information to an Unauthorized Actor5 CVEs
CWE-20Improper Input Validation4 CVEs
CWE-601URL Redirection to Untrusted Site ('Open Redirect')2 CVEs
CWE-79Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')2 CVEs
CWE-269Improper Privilege Management1 CVEs
CWE-276Incorrect Default Permissions1 CVEs
CWE-284Improper Access Control1 CVEs
CWE-285Improper Authorization1 CVEs

Which sources assert this record, and when.

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.