org.xwiki.platform:xwiki-platform-legacy-oldcore (Maven) — known CVEs & security advisories

Known CVE vulnerabilities and GitHub Security Advisories affecting the Maven package org.xwiki.platform:xwiki-platform-legacy-oldcore, with affected version ranges, CVSS severity, EPSS exploit prediction, and CISA KEV status.

CVEs (5)

• CVE-2023-26474 — CVSS 9.9 (critical): XWiki Platform is a generic wiki platform. Starting in version 13.10, it's possible to use the right of an existing document content author…
• CVE-2026-33229 — CVSS 9.8 (critical): XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. Prior to 17.4.8 and 17.10.1, an…
• CVE-2026-40104 — CVSS 8.2 (high): XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. Versions 1.8-rc-1, 17.0.0-rc-1 and…
• CVE-2025-54124 — CVSS 6.5 (medium): XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. XWiki Platform Legacy Old Core and…
• CVE-2025-54125 — CVSS 6.5 (medium): XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. XWiki Platform Legacy Old Core and…