GCVE - cpe:2.3:a:apache:jspwiki:2.11.0:m1-rc3:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:apache:jspwiki:2.11.0:m1-rc3:*:*:*:*:*:*

part: a version: 2.11.0 update: m1-rc3

Vendor	Apache (`b0303047-b7dd-5cf8-abcc-71b7d9d80b95`)
Product	Jspwiki (`15b96a95-fde7-5978-a88f-5b4744f72ea6`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from NVD CPE 2.0 feed

PURL mappings

PURL	Source	Last updated
`pkg:apache/jspwiki`	purl2cpe	2026-06-01 10:14:31.580020
`pkg:docker/apache/jspwiki`	purl2cpe	2026-06-01 10:14:31.580022
`pkg:github/apache/jspwiki`	purl2cpe	2026-06-01 10:14:31.580023
`pkg:maven/org.apache.jspwiki/jspwiki-builder`	purl2cpe	2026-06-01 10:14:31.580024

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2019-12407`	vulnerable	2026-06-08 05:12:39.070294	Details available On Apache JSPWiki, up to version 2.11.0.M4, a carefully crafted plugin link invocation could trigger an XSS vulnerability on Apache JSPWiki, related to the remember parameter on some of the JSPs, which could allow the attacker to execute javascript in the victim's browser and get some sensitive information about the victim. Published: 2019-09-23T15:40:59.000Z Updated: 2024-08-04T23:17:40.131Z Open on db.gcve.eu Reference links https://jspwiki-wiki.apache.org/Wiki.jsp?page=CVE-2019-12407	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2019-12404`	vulnerable	2026-06-08 05:12:39.058714	Details available On Apache JSPWiki, up to version 2.11.0.M4, a carefully crafted plugin link invocation could trigger an XSS vulnerability on Apache JSPWiki, related to InfoContent.jsp, which could allow the attacker to execute javascript in the victim's browser and get some sensitive information about the victim. Published: 2019-09-23T14:54:35.000Z Updated: 2024-08-04T23:17:40.002Z Open on db.gcve.eu Reference links https://jspwiki-wiki.apache.org/Wiki.jsp?page=CVE-2019-12404	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2019-10090`	vulnerable	2026-06-08 05:12:22.216780	Details available On Apache JSPWiki, up to version 2.11.0.M4, a carefully crafted plugin link invocation could trigger an XSS vulnerability on Apache JSPWiki, related to the plain editor, which could allow the attacker to execute javascript in the victim's browser and get some sensitive information about the victim. Published: 2019-09-23T15:26:14.000Z Updated: 2024-08-04T22:10:09.441Z Open on db.gcve.eu Reference links https://jspwiki-wiki.apache.org/Wiki.jsp?page=CVE-2019-10090	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2019-10089`	vulnerable	2026-06-08 05:12:22.216090	Details available On Apache JSPWiki, up to version 2.11.0.M4, a carefully crafted plugin link invocation could trigger an XSS vulnerability on Apache JSPWiki, related to the WYSIWYG editor, which could allow the attacker to execute javascript in the victim's browser and get some sensitive information about the victim. Published: 2019-09-23T14:51:02.000Z Updated: 2024-08-04T22:10:09.549Z Open on db.gcve.eu Reference links https://jspwiki-wiki.apache.org/Wiki.jsp?page=CVE-2019-10089	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2019-10087`	vulnerable	2026-06-08 05:12:22.204076	Details available On Apache JSPWiki, up to version 2.11.0.M4, a carefully crafted plugin link invocation could trigger an XSS vulnerability on Apache JSPWiki, related to the Page Revision History, which could allow the attacker to execute javascript in the victim's browser and get some sensitive information about the victim. Published: 2019-09-23T14:47:13.000Z Updated: 2024-08-04T22:10:09.414Z Open on db.gcve.eu Reference links https://jspwiki-wiki.apache.org/Wiki.jsp?page=CVE-2019-10087	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.