CveMateVulnerability intelligence

Apache Jspwiki vulnerabilities, page 2

29 vulnerabilities

Known vulnerabilities in Apache Jspwiki, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

CVE-2019-10077apache software foundationapache jspwiki+37y ago20-05-2019 20:46

A carefully crafted InterWiki link could trigger an XSS vulnerability on Apache JSPWiki 2.9.0 to 2.11.0.M3, which could lead to session hijacking.CVE-2019-10076apache software foundationapache jspwiki+37y ago20-05-2019 20:31

A carefully crafted malicious attachment could trigger an XSS vulnerability on Apache JSPWiki 2.9.0 to 2.11.0.M3, which could lead to session hijacking.CVE-2019-12404apachejspwiki+17y ago23-09-2019 14:54

On Apache JSPWiki, up to version 2.11.0.M4, a carefully crafted plugin link invocation could trigger an XSS vulnerability on Apache JSPWiki, related to InfoContent.jsp, which could allow the attacker to execute javascript in the victim's browser and get some sensitive information about the victim.CVE-2019-12407apachejspwiki+27y ago23-09-2019 15:40

On Apache JSPWiki, up to version 2.11.0.M4, a carefully crafted plugin link invocation could trigger an XSS vulnerability on Apache JSPWiki, related to the remember parameter on some of the JSPs, which could allow the attacker to execute javascript in the victim's browser and get some sensitive information about the victim.CVE-2026-48910apache software foundationapache jspwiki+12mo ago30-07-2026 15:56

A carefully crafted editing request could trigger an XSS vulnerability on Apache JSPWiki when parsing errors on the markdown renderer, which could allow the attacker to execute javascript in the victim's browser and get some sensitive information about the victim. This issue affects Apache JSPWiki: through 2.12.3. Users are recommended to upgrade to version 2.12.4, which fixes the issue.CVE-2026-28814apache software foundationapache jspwiki+12mo ago30-07-2026 15:55

Arbitrary Wiki Markup rendering due to lack of authentication in Apache JSPWiki up to 2.12.3 allows attacker to obtain sensitive data stored in JSPWiki variables. Users are recommended to upgrade to version 2.12.4 or 3.0.0, which fixes this issue.CVE-2026-28812apache software foundationapache jspwiki+12mo ago30-07-2026 15:52

UserManager lack of checks allows impersonation in Apache JSPWiki up to 2.12.3 which may allow attackers to escalate privileges. Users are recommended to upgrade to version 2.12.4 or newer which fixes this issue.CVE-2026-28813apache software foundationapache jspwiki+12mo ago30-07-2026 15:54

Apache JSPWiki, up to 2.12.3, is vulnerable to JSON Hijacking, which leads to csrf vulnerabilities. Users are recommended to upgrade to version 2.12.4, which fixes this issue.CVE-2026-28811apache software foundationapache jspwiki+12mo ago30-07-2026 15:51

Debug Messages Revealing Unnecessary Information in Apache JSPWiki up to 2.12.3. Users are recommended to upgrade to version 2.12.4, which fixes this issue.