Jspwiki

Submit a proposal Propose CVE/GCVE/GHSA reference

Approved changes feed: RSS · Atom

cpe:2.3:a:apache:jspwiki:2.11.0:m2:*:*:*:*:*:*

part: a version: 2.11.0 update: m2

VendorApache (b0303047-b7dd-5cf8-abcc-71b7d9d80b95)
ProductJspwiki (15b96a95-fde7-5978-a88f-5b4744f72ea6)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:apache/jspwiki purl2cpe 2026-06-01 10:14:31.583316
pkg:docker/apache/jspwiki purl2cpe 2026-06-01 10:14:31.583318
pkg:github/apache/jspwiki purl2cpe 2026-06-01 10:14:31.583320
pkg:maven/org.apache.jspwiki/jspwiki-builder purl2cpe 2026-06-01 10:14:31.583321

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2019-12407 vulnerable 2026-06-08 05:12:39.070311 Details available
On Apache JSPWiki, up to version 2.11.0.M4, a carefully crafted plugin link invocation could trigger an XSS vulnerability on Apache JSPWiki, related to the remember parameter on some of the JSPs, which could allow the attacker to execute javascript in the victim's browser and get some sensitive information about the victim.
Published: 2019-09-23T15:40:59.000Z
Updated: 2024-08-04T23:17:40.131Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-12404 vulnerable 2026-06-08 05:12:39.059327 Details available
On Apache JSPWiki, up to version 2.11.0.M4, a carefully crafted plugin link invocation could trigger an XSS vulnerability on Apache JSPWiki, related to InfoContent.jsp, which could allow the attacker to execute javascript in the victim's browser and get some sensitive information about the victim.
Published: 2019-09-23T14:54:35.000Z
Updated: 2024-08-04T23:17:40.002Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-10090 vulnerable 2026-06-08 05:12:22.216798 Details available
On Apache JSPWiki, up to version 2.11.0.M4, a carefully crafted plugin link invocation could trigger an XSS vulnerability on Apache JSPWiki, related to the plain editor, which could allow the attacker to execute javascript in the victim's browser and get some sensitive information about the victim.
Published: 2019-09-23T15:26:14.000Z
Updated: 2024-08-04T22:10:09.441Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-10089 vulnerable 2026-06-08 05:12:22.216108 Details available
On Apache JSPWiki, up to version 2.11.0.M4, a carefully crafted plugin link invocation could trigger an XSS vulnerability on Apache JSPWiki, related to the WYSIWYG editor, which could allow the attacker to execute javascript in the victim's browser and get some sensitive information about the victim.
Published: 2019-09-23T14:51:02.000Z
Updated: 2024-08-04T22:10:09.549Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-10087 vulnerable 2026-06-08 05:12:22.204122 Details available
On Apache JSPWiki, up to version 2.11.0.M4, a carefully crafted plugin link invocation could trigger an XSS vulnerability on Apache JSPWiki, related to the Page Revision History, which could allow the attacker to execute javascript in the victim's browser and get some sensitive information about the victim.
Published: 2019-09-23T14:47:13.000Z
Updated: 2024-08-04T22:10:09.414Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-10078 vulnerable 2026-06-08 05:12:22.112390 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-10077 vulnerable 2026-06-08 05:12:22.111476 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-10076 vulnerable 2026-06-08 05:12:22.109975 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.