Jspwiki

Submit a proposal Propose CVE/GCVE/GHSA reference

Approved changes feed: RSS · Atom

cpe:2.3:a:apache:jspwiki:2.11.0:m1:*:*:*:*:*:*

part: a version: 2.11.0 update: m1

VendorApache (b0303047-b7dd-5cf8-abcc-71b7d9d80b95)
ProductJspwiki (15b96a95-fde7-5978-a88f-5b4744f72ea6)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:apache/jspwiki purl2cpe 2026-06-01 10:14:31.577202
pkg:docker/apache/jspwiki purl2cpe 2026-06-01 10:14:31.577204
pkg:github/apache/jspwiki purl2cpe 2026-06-01 10:14:31.577205
pkg:maven/org.apache.jspwiki/jspwiki-builder purl2cpe 2026-06-01 10:14:31.577207

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2019-12407 vulnerable 2026-06-08 05:12:39.070234 Details available
On Apache JSPWiki, up to version 2.11.0.M4, a carefully crafted plugin link invocation could trigger an XSS vulnerability on Apache JSPWiki, related to the remember parameter on some of the JSPs, which could allow the attacker to execute javascript in the victim's browser and get some sensitive information about the victim.
Published: 2019-09-23T15:40:59.000Z
Updated: 2024-08-04T23:17:40.131Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-12404 vulnerable 2026-06-08 05:12:39.057210 Details available
On Apache JSPWiki, up to version 2.11.0.M4, a carefully crafted plugin link invocation could trigger an XSS vulnerability on Apache JSPWiki, related to InfoContent.jsp, which could allow the attacker to execute javascript in the victim's browser and get some sensitive information about the victim.
Published: 2019-09-23T14:54:35.000Z
Updated: 2024-08-04T23:17:40.002Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-10090 vulnerable 2026-06-08 05:12:22.216726 Details available
On Apache JSPWiki, up to version 2.11.0.M4, a carefully crafted plugin link invocation could trigger an XSS vulnerability on Apache JSPWiki, related to the plain editor, which could allow the attacker to execute javascript in the victim's browser and get some sensitive information about the victim.
Published: 2019-09-23T15:26:14.000Z
Updated: 2024-08-04T22:10:09.441Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-10089 vulnerable 2026-06-08 05:12:22.216031 Details available
On Apache JSPWiki, up to version 2.11.0.M4, a carefully crafted plugin link invocation could trigger an XSS vulnerability on Apache JSPWiki, related to the WYSIWYG editor, which could allow the attacker to execute javascript in the victim's browser and get some sensitive information about the victim.
Published: 2019-09-23T14:51:02.000Z
Updated: 2024-08-04T22:10:09.549Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-10087 vulnerable 2026-06-08 05:12:22.202746 Details available
On Apache JSPWiki, up to version 2.11.0.M4, a carefully crafted plugin link invocation could trigger an XSS vulnerability on Apache JSPWiki, related to the Page Revision History, which could allow the attacker to execute javascript in the victim's browser and get some sensitive information about the victim.
Published: 2019-09-23T14:47:13.000Z
Updated: 2024-08-04T22:10:09.414Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-10078 vulnerable 2026-06-08 05:12:22.112320 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-10077 vulnerable 2026-06-08 05:12:22.111406 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-10076 vulnerable 2026-06-08 05:12:22.107291 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.