Approved changes feed: RSS · Atom
cpe:2.3:a:apache:jspwiki:2.11.0:m2-rc1:*:*:*:*:*:*
part: a version: 2.11.0 update: m2-rc1
| Vendor | Apache (b0303047-b7dd-5cf8-abcc-71b7d9d80b95) |
|---|---|
| Product | Jspwiki (15b96a95-fde7-5978-a88f-5b4744f72ea6) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from purl2cpe mapping |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:apache/jspwiki |
purl2cpe | 2026-06-01 10:14:31.590774 |
pkg:docker/apache/jspwiki |
purl2cpe | 2026-06-01 10:14:31.590776 |
pkg:github/apache/jspwiki |
purl2cpe | 2026-06-01 10:14:31.590778 |
pkg:maven/org.apache.jspwiki/jspwiki-builder |
purl2cpe | 2026-06-01 10:14:31.590779 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2019-12407 |
vulnerable | 2026-06-08 05:12:39.070330 |
Details available
On Apache JSPWiki, up to version 2.11.0.M4, a carefully crafted plugin link invocation could trigger an XSS vulnerability on Apache JSPWiki, related to the remember parameter on some of the JSPs, which could allow the attacker to execute javascript in the victim's browser and get some sensitive information about the victim.
Published: 2019-09-23T15:40:59.000Z
Updated: 2024-08-04T23:17:40.131Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-12404 |
vulnerable | 2026-06-08 05:12:39.059849 |
Details available
On Apache JSPWiki, up to version 2.11.0.M4, a carefully crafted plugin link invocation could trigger an XSS vulnerability on Apache JSPWiki, related to InfoContent.jsp, which could allow the attacker to execute javascript in the victim's browser and get some sensitive information about the victim.
Published: 2019-09-23T14:54:35.000Z
Updated: 2024-08-04T23:17:40.002Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-10090 |
vulnerable | 2026-06-08 05:12:22.216816 |
Details available
On Apache JSPWiki, up to version 2.11.0.M4, a carefully crafted plugin link invocation could trigger an XSS vulnerability on Apache JSPWiki, related to the plain editor, which could allow the attacker to execute javascript in the victim's browser and get some sensitive information about the victim.
Published: 2019-09-23T15:26:14.000Z
Updated: 2024-08-04T22:10:09.441Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-10089 |
vulnerable | 2026-06-08 05:12:22.216208 |
Details available
On Apache JSPWiki, up to version 2.11.0.M4, a carefully crafted plugin link invocation could trigger an XSS vulnerability on Apache JSPWiki, related to the WYSIWYG editor, which could allow the attacker to execute javascript in the victim's browser and get some sensitive information about the victim.
Published: 2019-09-23T14:51:02.000Z
Updated: 2024-08-04T22:10:09.549Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-10087 |
vulnerable | 2026-06-08 05:12:22.204149 |
Details available
On Apache JSPWiki, up to version 2.11.0.M4, a carefully crafted plugin link invocation could trigger an XSS vulnerability on Apache JSPWiki, related to the Page Revision History, which could allow the attacker to execute javascript in the victim's browser and get some sensitive information about the victim.
Published: 2019-09-23T14:47:13.000Z
Updated: 2024-08-04T22:10:09.414Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-10078 |
vulnerable | 2026-06-08 05:12:22.112407 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-10077 |
vulnerable | 2026-06-08 05:12:22.111493 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-10076 |
vulnerable | 2026-06-08 05:12:22.110879 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.