Shodan
Vulnerabilities
Vulnerable Software

Vulnerability Details CVE-2019-12407

On Apache JSPWiki, up to version 2.11.0.M4, a carefully crafted plugin link invocation could trigger an XSS vulnerability on Apache JSPWiki, related to the remember parameter on some of the JSPs, which could allow the attacker to execute javascript in the victim's browser and get some sensitive information about the victim.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.052
EPSS Ranking 89.5%
CVSS Severity
CVSS v3 Score 6.1
CVSS v2 Score 4.3
Products affected by CVE-2019-12407
  • Apache » Jspwiki » Version: N/A
    cpe:2.3:a:apache:jspwiki:-
  • Apache » Jspwiki » Version: 1.4.0
    cpe:2.3:a:apache:jspwiki:1.4.0
  • Apache » Jspwiki » Version: 1.5.0
    cpe:2.3:a:apache:jspwiki:1.5.0
  • Apache » Jspwiki » Version: 1.5.5
    cpe:2.3:a:apache:jspwiki:1.5.5
  • Apache » Jspwiki » Version: 1.5.7
    cpe:2.3:a:apache:jspwiki:1.5.7
  • Apache » Jspwiki » Version: 1.6.0
    cpe:2.3:a:apache:jspwiki:1.6.0
  • Apache » Jspwiki » Version: 1.6.11
    cpe:2.3:a:apache:jspwiki:1.6.11
  • Apache » Jspwiki » Version: 1.6.12
    cpe:2.3:a:apache:jspwiki:1.6.12
  • Apache » Jspwiki » Version: 1.7.0
    cpe:2.3:a:apache:jspwiki:1.7.0
  • Apache » Jspwiki » Version: 1.8.0
    cpe:2.3:a:apache:jspwiki:1.8.0
  • Apache » Jspwiki » Version: 1.8.2
    cpe:2.3:a:apache:jspwiki:1.8.2
  • Apache » Jspwiki » Version: 2.0.0
    cpe:2.3:a:apache:jspwiki:2.0.0
  • Apache » Jspwiki » Version: 2.0.14
    cpe:2.3:a:apache:jspwiki:2.0.14
  • Apache » Jspwiki » Version: 2.0.32
    cpe:2.3:a:apache:jspwiki:2.0.32
  • Apache » Jspwiki » Version: 2.0.36
    cpe:2.3:a:apache:jspwiki:2.0.36
  • Apache » Jspwiki » Version: 2.0.39
    cpe:2.3:a:apache:jspwiki:2.0.39
  • Apache » Jspwiki » Version: 2.0.45
    cpe:2.3:a:apache:jspwiki:2.0.45
  • Apache » Jspwiki » Version: 2.10.0
    cpe:2.3:a:apache:jspwiki:2.10.0
  • Apache » Jspwiki » Version: 2.10.1
    cpe:2.3:a:apache:jspwiki:2.10.1
  • Apache » Jspwiki » Version: 2.10.2
    cpe:2.3:a:apache:jspwiki:2.10.2
  • Apache » Jspwiki » Version: 2.10.3
    cpe:2.3:a:apache:jspwiki:2.10.3
  • Apache » Jspwiki » Version: 2.10.4
    cpe:2.3:a:apache:jspwiki:2.10.4
  • Apache » Jspwiki » Version: 2.10.5
    cpe:2.3:a:apache:jspwiki:2.10.5
  • Apache » Jspwiki » Version: 2.11.0
    cpe:2.3:a:apache:jspwiki:2.11.0
  • Apache » Jspwiki » Version: 2.2.13
    cpe:2.3:a:apache:jspwiki:2.2.13
  • Apache » Jspwiki » Version: 2.2.14
    cpe:2.3:a:apache:jspwiki:2.2.14
  • Apache » Jspwiki » Version: 2.2.16
    cpe:2.3:a:apache:jspwiki:2.2.16
  • Apache » Jspwiki » Version: 2.2.19
    cpe:2.3:a:apache:jspwiki:2.2.19
  • Apache » Jspwiki » Version: 2.2.20
    cpe:2.3:a:apache:jspwiki:2.2.20
  • Apache » Jspwiki » Version: 2.2.26
    cpe:2.3:a:apache:jspwiki:2.2.26
  • Apache » Jspwiki » Version: 2.2.28
    cpe:2.3:a:apache:jspwiki:2.2.28
  • Apache » Jspwiki » Version: 2.2.33
    cpe:2.3:a:apache:jspwiki:2.2.33
  • Apache » Jspwiki » Version: 2.3.50
    cpe:2.3:a:apache:jspwiki:2.3.50
  • Apache » Jspwiki » Version: 2.4.0
    cpe:2.3:a:apache:jspwiki:2.4.0
  • Apache » Jspwiki » Version: 2.4.100
    cpe:2.3:a:apache:jspwiki:2.4.100
  • Apache » Jspwiki » Version: 2.4.102
    cpe:2.3:a:apache:jspwiki:2.4.102
  • Apache » Jspwiki » Version: 2.4.103
    cpe:2.3:a:apache:jspwiki:2.4.103
  • Apache » Jspwiki » Version: 2.4.104
    cpe:2.3:a:apache:jspwiki:2.4.104
  • Apache » Jspwiki » Version: 2.4.15
    cpe:2.3:a:apache:jspwiki:2.4.15
  • Apache » Jspwiki » Version: 2.4.56
    cpe:2.3:a:apache:jspwiki:2.4.56
  • Apache » Jspwiki » Version: 2.4.69
    cpe:2.3:a:apache:jspwiki:2.4.69
  • Apache » Jspwiki » Version: 2.4.71
    cpe:2.3:a:apache:jspwiki:2.4.71
  • Apache » Jspwiki » Version: 2.4.87
    cpe:2.3:a:apache:jspwiki:2.4.87
  • Apache » Jspwiki » Version: 2.5.124
    cpe:2.3:a:apache:jspwiki:2.5.124
  • Apache » Jspwiki » Version: 2.5.139
    cpe:2.3:a:apache:jspwiki:2.5.139
  • Apache » Jspwiki » Version: 2.5.79
    cpe:2.3:a:apache:jspwiki:2.5.79
  • Apache » Jspwiki » Version: 2.5.93
    cpe:2.3:a:apache:jspwiki:2.5.93
  • Apache » Jspwiki » Version: 2.6.0
    cpe:2.3:a:apache:jspwiki:2.6.0
  • Apache » Jspwiki » Version: 2.6.1
    cpe:2.3:a:apache:jspwiki:2.6.1
  • Apache » Jspwiki » Version: 2.6.2
    cpe:2.3:a:apache:jspwiki:2.6.2
  • Apache » Jspwiki » Version: 2.6.3
    cpe:2.3:a:apache:jspwiki:2.6.3
  • Apache » Jspwiki » Version: 2.6.4
    cpe:2.3:a:apache:jspwiki:2.6.4
  • Apache » Jspwiki » Version: 2.8.0
    cpe:2.3:a:apache:jspwiki:2.8.0
  • Apache » Jspwiki » Version: 2.8.1
    cpe:2.3:a:apache:jspwiki:2.8.1
  • Apache » Jspwiki » Version: 2.8.2
    cpe:2.3:a:apache:jspwiki:2.8.2
  • Apache » Jspwiki » Version: 2.8.3
    cpe:2.3:a:apache:jspwiki:2.8.3
  • Apache » Jspwiki » Version: 2.8.4
    cpe:2.3:a:apache:jspwiki:2.8.4
  • Apache » Jspwiki » Version: 2.9.0
    cpe:2.3:a:apache:jspwiki:2.9.0
  • Apache » Jspwiki » Version: 2.9.1
    cpe:2.3:a:apache:jspwiki:2.9.1


Products
Pricing
Contact Us

Shodan ® - All rights reserved