twiki twiki

Name: twiki twiki
Brand: twiki

productUS

cpe:2.3:a:twiki:twiki:*:*:*:*:*:*:*:*

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

KEV-listed

by severity

3critical6high20medium0low

updated 2026-10-28

vulnerabilities (29)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2005-2877US	high7.5	70.9% (99th)	Exploit	no fix	2005-09-16	5 versions
CVE-2004-1037US	high10.0	61.7% (99th)	Exploit	no fix	2005-03-01	= 2003-02-01
CVE-2014-7236US	critical9.1	55.6% (99th)	Exploit	no fix	2020-02-17	7 versions
CVE-2012-6330US	medium5.0	35.7% (98th)	Exploit	no fix	2013-01-04	3 versions
CVE-2008-3195US	medium6.8	8.28% (95th)	Exploit	no fix	2008-09-18	13 versions
CVE-2011-3010US	medium4.3	5.48% (93rd)	Exploit	no fix	2011-09-30	20 versions
CVE-2008-5305US	high10.0	4.64% (92nd)	Exploit	no fix	2008-12-10	13 versions
CVE-2006-3819US	high7.5	4.10% (91st)	Exploit	no fix	2006-07-27	6 versions
CVE-2006-4294US	medium5.0	3.92% (90th)	Exploit	no fix	2006-09-09	5 versions
CVE-2010-3841US	medium4.3	3.05% (88th)	Exploit	no fix	2010-10-18	24 versions
CVE-2011-1838US	medium4.3	2.73% (86th)	Exploit	no fix	2011-05-20	20 versions
CVE-2008-5304US	medium4.3	2.24% (83rd)	Exploit	no fix	2008-12-10	21 versions
CVE-2014-7237US	medium6.8	20.1% (97th)	—	no fix	2014-10-16	≤ 6.0.0
CVE-2013-1751US	critical9.8	4.87% (92nd)	—	5.1.4	2019-11-07	< 5.1.4
CVE-2005-3056US	critical9.8	3.48% (89th)	—	no fix	2019-11-01	= 20040902-3
CVE-2006-3336US	medium4.0	2.88% (87th)	—	no fix	2006-07-05	13 versions
CVE-2006-6071US	high9.0	2.17% (82nd)	—	no fix	2006-12-02	≤ 4.0.5
CVE-2012-0979US	medium4.3	2.05% (81st)	—	no fix	2012-02-02	2 versions
CVE-2014-9367US	medium4.3	1.90% (80th)	—	no fix	2014-12-31	2 versions
CVE-2014-9325US	medium4.3	1.90% (80th)	—	no fix	2014-12-31	= 6.0.1
CVE-2006-1386US	high7.5	1.78% (78th)	—	no fix	2006-03-26	2 versions
CVE-2007-5193US	medium5.0	1.63% (76th)	—	no fix	2007-10-04	= 4.1.2
CVE-2018-20212US	medium6.1	1.59% (76th)	—	no fix	2019-03-21	= 6.0.2
CVE-2006-2942US	medium5.1	1.57% (75th)	—	no fix	2006-06-20	3 versions
CVE-2006-1387US	medium4.0	1.33% (71st)	—	no fix	2006-03-26	9 versions
CVE-2009-1339US	medium6.0	0.75% (55th)	—	no fix	2009-04-30	7 versions
CVE-2009-4898US	medium6.8	0.58% (47th)	—	no fix	2010-09-07	16 versions
CVE-2007-0669US	medium4.6	0.39% (33rd)	—	no fix	2007-02-08	7 versions
CVE-2008-4998US	medium6.9	0.29% (21st)	—	no fix	2008-11-07	= 4.1.2

weaknesses (8)

The flaw types (CWEs) most of these CVEs share.

CWE-79Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')8 CVEs
CWE-94Improper Control of Generation of Code ('Code Injection')4 CVEs
CWE-284Improper Access Control3 CVEs
CWE-22Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')2 CVEs
CWE-266Incorrect Privilege Assignment2 CVEs
CWE-352Cross-Site Request Forgery (CSRF)2 CVEs
CWE-74Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')2 CVEs
CWE-78Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')2 CVEs

sources (1)

Which sources assert this record, and when.

USNVD / CVE29 CVEs

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.

Free scan