2025-04-29

2025-04-30

2025-05-01

All (4) Critical (9) High (43) Medium (54) Low (4)

CVE-2025-32971 Apr 30, 15:16 LOW POC PATCH Monitor

XWiki is a generic wiki platform. Rated low severity (CVSS 3.8), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available.

Authentication Bypass Xwiki

NVD GitHub

CVSS 3.1

3.8

EPSS

0.1%

CVE-2023-37517 Apr 30, 22:15 LOW Monitor

Missing "no cache" headers in HCL Leap permits sensitive data to be cached. Rated low severity (CVSS 3.2), this vulnerability is low attack complexity. No vendor patch available.

Information Disclosure Domino Leap Hcltech

NVD

CVSS 3.1

3.2

EPSS

0.2%

CVE-2025-32972 Apr 30, 15:16 LOW PATCH Monitor

XWiki is a generic wiki platform. Rated low severity (CVSS 2.7), this vulnerability is remotely exploitable, low attack complexity.

Authentication Bypass Xwiki

NVD GitHub

CVSS 3.1

2.7

EPSS

0.1%

CVE-2024-47784 Apr 30, 19:15 LOW Monitor

Unverified Password Change for ANC software that allows an authenticated attacker to bypass the old Password check in the password change form via a web HMI1.4 and earlier. Rated low severity (CVSS 2.1). No vendor patch available.

Authentication Bypass

NVD

CVSS 4.0

2.1

EPSS

0.1%