XWiki is a generic wiki platform. Rated low severity (CVSS 3.8), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available.
Authentication Bypass
Xwiki
NVD
GitHub
CVSS 3.1
3.8
EPSS
0.1%
Missing "no cache" headers in HCL Leap permits sensitive data to be cached. Rated low severity (CVSS 3.2), this vulnerability is low attack complexity. No vendor patch available.
Information Disclosure
Domino Leap
NVD
CVSS 3.1
3.2
EPSS
0.2%
XWiki is a generic wiki platform. Rated low severity (CVSS 2.7), this vulnerability is remotely exploitable, low attack complexity.
Authentication Bypass
Xwiki
NVD
GitHub
CVSS 3.1
2.7
EPSS
0.1%
Unverified Password Change for ANC software that allows an authenticated attacker to bypass the old Password check in the password change form via a web HMI1.4 and earlier. Rated low severity (CVSS 2.1). No vendor patch available.
Authentication Bypass
NVD
CVSS 4.0
2.1
EPSS
0.1%