GCVE - cpe:2.3:a:apache:jspwiki:2.11.0:m4:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:apache:jspwiki:2.11.0:m4:*:*:*:*:*:*

part: a version: 2.11.0 update: m4

Vendor	Apache (`b0303047-b7dd-5cf8-abcc-71b7d9d80b95`)
Product	Jspwiki (`15b96a95-fde7-5978-a88f-5b4744f72ea6`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from NVD CPE 2.0 feed

PURL mappings

PURL	Source	Last updated
`pkg:apache/jspwiki`	purl2cpe	2026-06-01 10:14:31.590797
`pkg:docker/apache/jspwiki`	purl2cpe	2026-06-01 10:14:31.590799
`pkg:github/apache/jspwiki`	purl2cpe	2026-06-01 10:14:31.590800
`pkg:maven/org.apache.jspwiki/jspwiki-builder`	purl2cpe	2026-06-01 10:14:31.590801

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2019-12407`	vulnerable	2026-06-08 05:12:39.070398	Details available On Apache JSPWiki, up to version 2.11.0.M4, a carefully crafted plugin link invocation could trigger an XSS vulnerability on Apache JSPWiki, related to the remember parameter on some of the JSPs, which could allow the attacker to execute javascript in the victim's browser and get some sensitive information about the victim. Published: 2019-09-23T15:40:59.000Z Updated: 2024-08-04T23:17:40.131Z Open on db.gcve.eu Reference links https://jspwiki-wiki.apache.org/Wiki.jsp?page=CVE-2019-12407	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2019-12404`	vulnerable	2026-06-08 05:12:39.061831	Details available On Apache JSPWiki, up to version 2.11.0.M4, a carefully crafted plugin link invocation could trigger an XSS vulnerability on Apache JSPWiki, related to InfoContent.jsp, which could allow the attacker to execute javascript in the victim's browser and get some sensitive information about the victim. Published: 2019-09-23T14:54:35.000Z Updated: 2024-08-04T23:17:40.002Z Open on db.gcve.eu Reference links https://jspwiki-wiki.apache.org/Wiki.jsp?page=CVE-2019-12404	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2019-10090`	vulnerable	2026-06-08 05:12:22.217074	Details available On Apache JSPWiki, up to version 2.11.0.M4, a carefully crafted plugin link invocation could trigger an XSS vulnerability on Apache JSPWiki, related to the plain editor, which could allow the attacker to execute javascript in the victim's browser and get some sensitive information about the victim. Published: 2019-09-23T15:26:14.000Z Updated: 2024-08-04T22:10:09.441Z Open on db.gcve.eu Reference links https://jspwiki-wiki.apache.org/Wiki.jsp?page=CVE-2019-10090	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2019-10089`	vulnerable	2026-06-08 05:12:22.216281	Details available On Apache JSPWiki, up to version 2.11.0.M4, a carefully crafted plugin link invocation could trigger an XSS vulnerability on Apache JSPWiki, related to the WYSIWYG editor, which could allow the attacker to execute javascript in the victim's browser and get some sensitive information about the victim. Published: 2019-09-23T14:51:02.000Z Updated: 2024-08-04T22:10:09.549Z Open on db.gcve.eu Reference links https://jspwiki-wiki.apache.org/Wiki.jsp?page=CVE-2019-10089	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2019-10087`	vulnerable	2026-06-08 05:12:22.212909	Details available On Apache JSPWiki, up to version 2.11.0.M4, a carefully crafted plugin link invocation could trigger an XSS vulnerability on Apache JSPWiki, related to the Page Revision History, which could allow the attacker to execute javascript in the victim's browser and get some sensitive information about the victim. Published: 2019-09-23T14:47:13.000Z Updated: 2024-08-04T22:10:09.414Z Open on db.gcve.eu Reference links https://jspwiki-wiki.apache.org/Wiki.jsp?page=CVE-2019-10087	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.