tag
Groovy
Critical
XWiki SolrSearch Macro Unauthenticated Groovy RCE (CVE-2025-24893)
CVE-2025-24893·
XWiki (SolrSearch macro, Main.SolrSearch)
unpatched
Critical
Oracle Identity Manager `;.wadl` Authentication Bypass + Groovy Script RCE (CVE-2025-61757)
CVE-2025-61757·
Oracle Identity Manager (OIM) — applicationmanagement REST API
unpatched
Critical
XWiki Unauthenticated XAR Import Leading to RCE — CVE-2026-33137
CVE-2026-33137·
XWiki Platform
patched
Critical
Apache NiFi 2.8.0 — EXECUTE_CODE Permission Bypass to Groovy RCE (CVE-2026-39816)
CVE-2026-39816·
Apache NiFi (with the optional graph bundle / nifi-other-graph-services-nar)
patched