Apache Software Foundation Wicket 7.0.0 Milestone2
Approved changes feed: RSS · Atom
cpe:2.3:a:apache:wicket:7.0.0:milestone2:*:*:*:*:*:*
part: a version: 7.0.0 update: milestone2
| Vendor | Apache (b0303047-b7dd-5cf8-abcc-71b7d9d80b95) |
|---|---|
| Product | Wicket (47617a88-095f-5d07-871a-faa63ba3b71d) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from NVD CPE 2.0 feed |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:apache/wicket |
purl2cpe | 2026-06-01 10:14:30.304248 |
pkg:github/apache/wicket |
purl2cpe | 2026-06-01 10:14:30.304250 |
pkg:maven/org.apache.wicket/wicket-core |
purl2cpe | 2026-06-01 10:14:30.304251 |
pkg:sourceforge/wicket |
purl2cpe | 2026-06-01 10:14:30.304252 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2014-7808 |
vulnerable | 2026-06-08 05:05:59.812739 |
Details available
Apache Wicket before 1.5.13, 6.x before 6.19.0, and 7.x before 7.0.0-M5 make it easier for attackers to defeat a cryptographic protection mechanism and predict encrypted URLs by leveraging use of CryptoMapper as the default encryption provider.
Published: 2017-09-15T20:00:00.000Z
Updated: 2024-08-06T13:03:27.296Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2014-3526 |
vulnerable | 2026-06-08 05:05:33.261872 |
Details available
Apache Wicket before 1.5.12, 6.x before 6.17.0, and 7.x before 7.0.0-M3 might allow remote attackers to obtain sensitive information via vectors involving identifiers for storing page markup for temporary user sessions.
Published: 2017-10-30T14:00:00.000Z
Updated: 2024-08-06T10:50:16.801Z Reference links |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.