Login Request a demo
AJ
Product
Apache JSPWiki
by Apache Software Foundation · last CVE Jul 30, 2026
11
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Vulnerabilities11In the news0Timeline
Severity mix
Critical 1High 4Medium 6Low 0
Severity
All severities11Critical1High4Medium6Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Apache JSPWiki to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-28812
9.8
1%
Jul 30
Apache JSPWiki: UserManager does not sanity-check user database at startup
Affected: before 2.12.4
CVE-2026-28813
8.8
0%
Jul 30
Apache JSPWiki: JSPWiki vulnerable to JSON hijacking
Affected: before 2.12.4
CVE-2022-34158
8.8
1%
Aug 4
User Group Privilege Escalation
Affected: through Apache JSPWiki up to 2.11.2
CVE-2026-28814
7.5
1%
Jul 30
Apache JSPWiki: Pre-Authentication Arbitrary Wiki Markup Rendering
Affected: before 2.12.4
CVE-2026-28811
7.5
1%
Jul 30
Apache JSPWiki: Error Handling - Reveals Error Details
Affected: before up to 3.0.0
CVE-2026-48910
6.5
1%
Jul 30
Apache JSPWiki: Markdown parser allows XSS injection in Markdown error processing
Affected: through 2.12.3
CVE-2022-28731
6.5
59%
Aug 4
Apache JSPWiki CSRF in UserPreferences.jsp
Affected: Apache JSPWiki through Apache JSPWiki up to 2.11.2
CVE-2022-28732
6.1
83%
Aug 4
Apache JSPWiki Cross-site scripting vulnerability on WeblogPlugin
Affected: Apache JSPWiki through Apache JSPWiki up to 2.11.2
CVE-2022-28730
6.1
86%
Aug 4
Apache JSPWiki Cross-site scripting vulnerability on AJAXPreview.jsp
Affected: Apache JSPWiki through Apache JSPWiki up to 2.11.2
CVE-2022-27166
6.1
86%
Aug 4
XSS vulnerability on XHRHtml2Markup.jsp in JSPWiki 2.11.2
Affected: Apache JSPWiki through Apache JSPWiki up to 2.11.2
CVE-2018-20242
6.1
5%
Feb 11
A carefully crafted URL could trigger an XSS vulnerability on Apache JSPWiki, from versions up to 2.10.5, which could lead to session hijacking
Affected: prior to 2.10.5
Showing 11