Maven org.xwiki.platform:xwiki-platform-administration-ui

Name: Maven org.xwiki.platform:xwiki-platform-administration-ui
Brand: Maven

productUS

pkg:maven/org.xwiki.platform/xwiki-platform-administration-ui

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

KEV-listed

public exploit

unpatched

by severity

2critical7high2medium0low

updated 2026-10-28

vulnerabilities (11)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2024-21650US	critical9.8	93.5% (100th)	—	15.5.3	2024-01-08	3 versions
CVE-2023-46731US	critical9.8	88.5% (100th)	—	14.10.14	2023-11-06	2 versions
CVE-2022-23616US	high8.8	2.10% (82nd)	—	13.1RC1	2022-02-09	3.1-milestone-1 → 13.1RC1
CVE-2023-29514US	high8.8	1.86% (79th)	—	13.10.11	2023-04-19	3 versions
CVE-2023-29510US	high8.8	1.86% (79th)	—	14.10.2	2023-04-19	4.3-milestone-2 → 14.10.2
CVE-2023-50723US	high8.8	1.19% (68th)	—	15.7-rc-1	2023-12-15	3 versions
CVE-2024-55879US	high8.8OT elevated	1.07% (65th)	—	15.10.9	2024-12-12	2 versions
CVE-2023-29511US	high8.8	1.04% (64th)	—	13.10.11	2023-04-16	3 versions
CVE-2021-32732US	medium6.5	0.96% (62nd)	—	12.10.5	2022-02-04	2 versions
CVE-2023-50722US	high8.8	0.66% (51st)	—	14.10.15	2023-12-15	3 versions
CVE-2021-32730US	medium5.7	0.61% (49th)	—	13.2	2021-07-01	2 versions

The flaw types (CWEs) most of these CVEs share.

CWE-95Improper Neutralization of Directives in Dynamically Evaluated Code ('Eval Injection')4 CVEs
CWE-352Cross-Site Request Forgery (CSRF)3 CVEs
CWE-74Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')3 CVEs
CWE-94Improper Control of Generation of Code ('Code Injection')3 CVEs
CWE-79Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')1 CVEs
CWE-862Missing Authorization1 CVEs

Which sources assert this record, and when.

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.