Every applicability statement published about this vulnerability, kept as each source wrote it rather than merged into one verdict. Where sources disagree, both positions are shown.
A statement that names no version covers the whole product, which is not the same as your version falling inside a range. Orderings marked best effort come from schemes with no published comparison algorithm; exact ones follow a published specification.
Precedence decides which claim wins when two sources describe the same product over the same version range. It is a property of the source, not of the claim, and changing it re-ranks the data without re-reading a single document.
| Product | Status | Versions | Remediation | Source | |
|---|---|---|---|---|---|
| https://github.com/xwiki/xwiki-commons | affected | >= 4fe4d2339906f3ea2f440469e1e060a0cfb397be, < 19099ac5630b3ac7fe63653880853d04e2cbcfc1 | vendor fix → 19099ac5630b3ac7fe63653880853d04e2cbcfc1 | osv | |
| https://github.com/xwiki/xwiki-commons | affected | >= 918ea43fe0d277c28efa21a871175b329c75157c, < 7b37609e4597937576d9ab789fa3fb6ab52a24fb | vendor fix → 7b37609e4597937576d9ab789fa3fb6ab52a24fb | osv | |
| https://github.com/xwiki/xwiki-commons | affected | >= 13711861b3a6ce3ff5e82db5c6e669993cfacbb2, <= 72192e8502e9a2f1e6082b231226dcf9e4b2472b | none available | osv | |
| https://github.com/xwiki/xwiki-commons | affected | >= 22816f9c286eda56c349ed82f229ae641f9e8fe3, < 197973569f711b6ee116096b4887d30410493f06 | vendor fix → 197973569f711b6ee116096b4887d30410493f06 | osv | |
| https://github.com/xwiki/xwiki-commons | affected | >= 3c6f5cf138d8095f63631e554ba448e4b780e162, < c5e378200ac0047419ddd8c5071396ac35df9025 | vendor fix → c5e378200ac0047419ddd8c5071396ac35df9025 | osv | |
| https://github.com/xwiki/xwiki-commons | affected | >= 4eae63485bbddcaf0a91d354f9e27b9ca01528f6, < 67021db9b8ed26c2236a653269302a86bf01ef40 | vendor fix → 67021db9b8ed26c2236a653269302a86bf01ef40 | osv | |
| org.xwiki.platform:xwiki-platform-search-solr-ui | affected | >= 5.3-milestone-2, < 15.10.11 | vendor fix → 15.10.11 | osv GHSA-rr6p-3pfg-562j | |
| org.xwiki.platform:xwiki-platform-search-solr-ui | affected | >= 16.0.0-rc-1, < 16.4.1 | vendor fix → 16.4.1 | osv GHSA-rr6p-3pfg-562j | |
| https://github.com/xwiki/xwiki-commons | fixed | 19099ac5630b3ac7fe63653880853d04e2cbcfc1 | vendor fix → 19099ac5630b3ac7fe63653880853d04e2cbcfc1 | osv | |
| https://github.com/xwiki/xwiki-commons | fixed | 7b37609e4597937576d9ab789fa3fb6ab52a24fb | vendor fix → 7b37609e4597937576d9ab789fa3fb6ab52a24fb | osv | |
| https://github.com/xwiki/xwiki-commons | fixed | 197973569f711b6ee116096b4887d30410493f06 | vendor fix → 197973569f711b6ee116096b4887d30410493f06 | osv | |
| https://github.com/xwiki/xwiki-commons | fixed | c5e378200ac0047419ddd8c5071396ac35df9025 | vendor fix → c5e378200ac0047419ddd8c5071396ac35df9025 | osv | |
| https://github.com/xwiki/xwiki-commons | fixed | 67021db9b8ed26c2236a653269302a86bf01ef40 | vendor fix → 67021db9b8ed26c2236a653269302a86bf01ef40 | osv | |
| org.xwiki.platform:xwiki-platform-search-solr-ui | fixed | 15.10.11 | vendor fix → 15.10.11 | osv GHSA-rr6p-3pfg-562j | |
| org.xwiki.platform:xwiki-platform-search-solr-ui | fixed | 16.4.1 | vendor fix → 16.4.1 | osv GHSA-rr6p-3pfg-562j | |
| xwiki/xwiki-platform xwiki · xwiki-platform | affected | >= 5.3-milestone-2, < 15.10.11 | none available | cve_cna | |
| xwiki/xwiki-platform xwiki · xwiki-platform | affected | >= 16.0.0-rc-1, < 16.4.1 | none available | cve_cna |
A claim with no version range is shown as written rather than expanded: a government catalog naming only a vendor and product is a real statement at zero granularity, and inventing bounds for it would put precision in the record that the source never offered.