Login Request a demo
JS
Product
Jspwiki
by Apache · last CVE Jul 30, 2026
29
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Vulnerabilities29In the news0Timeline
Severity mix
Critical 2High 7Medium 20Low 0
Severity
All severities29Critical2High7Medium20Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Jspwiki to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-28813
8.8
0%
Jul 30
Apache JSPWiki: JSPWiki vulnerable to JSON hijacking
Affected: before 2.12.4
CVE-2022-34158
8.8
1%
Aug 4
User Group Privilege Escalation
Affected: before 2.11.3
CVE-2022-24947
8.8
1%
Feb 25
Apache JSPWiki user preferences form is vulnerable to CSRF attacks, which can lead to account takeover
Affected: before 2.11.2
CVE-2026-28814
7.5
1%
Jul 30
Apache JSPWiki: Pre-Authentication Arbitrary Wiki Markup Rendering
Affected: before 2.12.4
CVE-2026-28811
7.5
1%
Jul 30
Apache JSPWiki: Error Handling - Reveals Error Details
Affected: before 2.12.4
CVE-2025-24853
7.5
1%
Jul 31
A carefully crafted request when creating a header link using the wiki markup syntax, which could allow the attacker to execute javascript in the victim's browser and get some…
Affected: before 2.12.3
CVE-2019-0225
7.5
10%
Mar 28
A specially crafted url could be used to access files under the ROOT directory of the application on Apache JSPWiki 2.9.0 to 2.11.0.M2, which could be used by an attacker to…
Affected: 2.9.0 before 2.11.0; 2.11.0; 2.11.0; 2.11.0; 2.11.0; 2.11.0; +1 more
Showing 7