Known vulnerabilities in Apache JSPWiki 2.5.139-beta

Vendor: Apache Foundation
Software: Apache JSPWiki
Version: 2.5.139-beta
Software CPE: cpe:2.3:a:apache_foundation:jspwiki:*:*:*:*:*:*:*:*
Website: https://www.apache.org
Total vulnerabilities: 18
Public exploits: 0
Known exploited (KEV): 0
Highest CVSSv4 Score: 8.8

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting Apache JSPWiki version 2.5.139-beta Apache JSPWiki 2.5.139-beta is affected by 18 vulnerabilities: 1 high, 6 medium, 11 low Critical High Medium Low

Vulnerabilities (18)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU145180 - Information Exposure Through an Error Message
CVE-2026-28811		 CWE-209 Medium
No
No
 2.12.4 25.08.2026 SB2026082557
#VU145179 - Improper Access Control
CVE-2026-28812		 CWE-284 Low
No
No
 2.12.4 25.08.2026 SB2026082557
#VU145178 - Insufficient Verification of Data Authenticity
CVE-2026-28813		 CWE-345 Medium
No
No
 2.12.4 25.08.2026 SB2026082557
#VU145177 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2026-48910		 CWE-79 Low
No
No
 2.12.4 25.08.2026 SB2026082557
#VU145176 - Missing Authentication for Critical Function
CVE-2026-28814		 CWE-306 Medium
No
No
 2.12.4 25.08.2026 SB2026082557
#VU93119 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2024-27136		 CWE-79 Low
No
No
 2.12.2 24.06.2024 SB2024062434
#VU76694 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2022-46907		 CWE-79 Medium
No
No
 2.12.0 31.05.2023 SB2023053120
#VU66193 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2022-27166		 CWE-79 Low
No
No
 2.11.3 08.08.2022 SB2022080838
#VU66192 - Cross-Site Request Forgery (CSRF)
CVE-2022-28731		 CWE-352 Medium
No
No
 2.11.3 08.08.2022 SB2022080838
#VU66191 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2022-28730		 CWE-79 Low
No
No
 2.11.3 08.08.2022 SB2022080838
#VU66190 - Cross-Site Request Forgery (CSRF)
CVE-2022-34158		 CWE-352 Medium
No
No
 2.11.3 08.08.2022 SB2022080838
#VU66188 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2022-28732		 CWE-79 Low
No
No
 2.11.3 08.08.2022 SB2022080838
#VU58385 - Improper Access Control
CVE-2021-44140		 CWE-284 High
No
No
 2.11.0 26.11.2021 SB2021112608
#VU58384 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2021-40369		 CWE-79 Low
No
No
 2.11.0 26.11.2021 SB2021112608
#VU21297 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2019-10089		 CWE-79 Low
No
No
 2.11.0.M5 24.09.2019 SB2019092408
#VU21296 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2019-10087		 CWE-79 Low
No
No
 2.11.0.M5 24.09.2019 SB2019092408
#VU21295 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2019-12407		 CWE-79 Low
No
No
 2.11.0.M5 24.09.2019 SB2019092408
#VU21294 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2019-10090		 CWE-79 Low
No
No
 2.11.0.M5 24.09.2019 SB2019092408