apache jspwiki

Name: apache jspwiki
Brand: apache

productUS

cpe:2.3:a:apache:jspwiki:*:*:*:*:*:*:*:*

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

KEV-listed

by severity

1critical3high18medium0low

updated 2026-10-28

vulnerabilities (29)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2019-0225US	high7.5	9.99% (96th)	Exploit	2.11.0	2019-03-28	2 versions
CVE-2019-10078US	medium6.1	4.94% (92nd)	Exploit	no fix	2019-05-20	2 versions
CVE-2019-10076US	medium6.1	4.72% (92nd)	Exploit	no fix	2019-05-20	2 versions
CVE-2019-10077US	medium6.1	4.68% (92nd)	Exploit	no fix	2019-05-20	2 versions
CVE-2019-10089US	medium6.1	2.89% (87th)	Exploit	no fix	2019-09-23	2 versions
CVE-2022-46907US	medium6.1	1.16% (67th)	Exploit	2.12.0	2023-05-25	< 2.12.0
CVE-2022-28730US	medium6.1	86.2% (100th)	—	2.11.3	2022-08-04	< 2.11.3
CVE-2022-27166US	medium6.1	86.2% (100th)	—	2.11.3	2022-08-04	< 2.11.3
CVE-2022-28732US	medium6.1	82.8% (100th)	—	2.11.3	2022-08-04	< 2.11.3
CVE-2024-27136US	medium6.1	60.8% (99th)	—	2.12.2	2024-06-24	< 2.12.2
CVE-2022-28731US	medium6.5	58.7% (99th)	—	2.11.3	2022-08-04	< 2.11.3
CVE-2021-44140US	critical9.1OT elevated	6.36% (94th)	—	2.11.0	2021-11-24	< 2.11.0
CVE-2018-20242US	medium6.1	5.36% (93rd)	—	no fix	2019-02-11	≤ 2.10.5
CVE-2019-0224US	medium6.1	5.15% (92nd)	—	no fix	2019-03-28	2 versions
CVE-2021-40369US	medium6.1	3.42% (89th)	—	2.11.0	2021-11-24	< 2.11.0
CVE-2019-12407US	medium6.1	2.91% (87th)	—	no fix	2019-09-23	2 versions
CVE-2019-12404US	medium6.1	2.91% (87th)	—	no fix	2019-09-23	2 versions
CVE-2019-10087US	medium6.1	2.91% (87th)	—	no fix	2019-09-23	2 versions
CVE-2019-10090US	medium6.1	2.89% (87th)	—	no fix	2019-09-23	2 versions
CVE-2022-24948US	medium6.1	2.25% (83rd)	—	2.11.2	2022-02-25	< 2.11.2
CVE-2022-34158US	high8.8	1.28% (70th)	—	2.11.3	2022-08-04	< 2.11.3
CVE-2022-24947US	high8.8	1.16% (67th)	—	2.11.2	2022-02-25	< 2.11.2
CVE-2026-28811US	—	0.79% (56th)	—	2.12.4	2026-07-30	< 2.12.4
CVE-2026-28812US	—	0.69% (53rd)	—	2.12.4	2026-07-30	< 2.12.4
CVE-2026-28814US	—OT elevated	0.66% (51st)	—	2.12.4	2026-07-30	< 2.12.4
CVE-2026-48910US	—	0.56% (46th)	—	2.12.4	2026-07-30	< 2.12.4
CVE-2025-24853US	—	0.56% (46th)	—	2.12.3	2025-07-31	< 2.12.3
CVE-2025-24854US	—	0.47% (41st)	—	2.12.3	2025-07-31	< 2.12.3
CVE-2026-28813US	—	0.27% (19th)	—	2.12.4	2026-07-30	< 2.12.4

weaknesses (8)

The flaw types (CWEs) most of these CVEs share.

CWE-79Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')19 CVEs
CWE-352Cross-Site Request Forgery (CSRF)4 CVEs
CWE-1295Debug Messages Revealing Unnecessary Information1 CVEs
CWE-22Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')1 CVEs
CWE-276Incorrect Default Permissions1 CVEs
CWE-290Authentication Bypass by Spoofing1 CVEs
CWE-306Missing Authentication for Critical Function1 CVEs
CWE-80Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS)1 CVEs

sources (1)

Which sources assert this record, and when.

USNVD / CVE29 CVEs

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.

Free scan