Read the docs

Xapian

Records3All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high0CVSS 7.0–8.9

Exploited now

Xapian records in CISA KEV

No Xapian vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Omega 1 record LOW Xapian-core 1 record LOW

Records

3 records

TI-2018-00456 CVE-2018-0499 · GHSA-7qw4-w7hf-22q3

Cross-site scripting in Xapian xapian-core before 1.4.6

Priority LOW 29

A cross-site scripting vulnerability in queryparser/termgenerator_internal.cc in Xapian xapian-core before 1.4.6 exists due to incomplete HTML escaping by Xapian::MSet::snippet().

CVSS 3.0MEDIUM 6.1 Network No auth User interaction EPSS 0.01043 Published 2018-07-02 Fixed in 1.4.6 CWE-79
TI-2026-54113 CVE-2026-77643 · GHSA-955x-jgcw-hcxh

Cross-site scripting in xapian-core

Priority LOW 20

A cross-site scripting vulnerability in queryparser/termgenerator_internal.cc in Xapian xapian-core before 2.1.0 and before 1.4.32 exists due to incomplete HTML escaping by Xapian::MSet::snippet().

CVSS 3.1MEDIUM 4.4 Network Low privileges User interaction EPSS 0.00252 Published 2026-08-20 Partial fix · 2.1.0, 1.4.32 CWE-79
Open these records in search →