Known vulnerabilities in Apache JSPWiki - page 2

Vendor: Apache Foundation
Software: Apache JSPWiki
Software CPE: cpe:2.3:a:apache_foundation:jspwiki:*:*:*:*:*:*:*:*
Website: https://www.apache.org
Total vulnerabilities: 27
Public exploits: 0
Known exploited (KEV): 0
Highest CVSSv4 Score: 8.8

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Apache JSPWiki Apache JSPWiki is affected by 27 known vulnerabilities: 1 high, 7 medium, 19 low Critical High Medium Low

Vulnerabilities (27)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU21302 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2019-0224		 CWE-79 Low
No
No
 2.11.0.M3 24.09.2019 SB2019032824
#VU21301 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2019-0225		 CWE-22 Medium
No
No
 2.11.0.M3 24.09.2019 SB2019032824
#VU21300 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2019-10078		 CWE-79 Low
No
No
 2.11.0.M4 24.09.2019 SB2019052008
#VU21299 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2019-10077		 CWE-79 Low
No
No
 2.11.0.M4 24.09.2019 SB2019052008
#VU21298 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2019-10076		 CWE-79 Low
No
No
 2.11.0.M4 24.09.2019 SB2019052008
#VU21293 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2019-12404		 CWE-79 Low
No
No
 2.11.0.M5 24.09.2019 SB2019092408
#VU17345 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2018-20242		 CWE-79 Low
No
No
 2.11.0.M1 01.02.2019 SB2019020104


Showing elements 21 - 40 out of 27