Vulnerabilities
Vulnerable Software

Vulnerability Details CVE-2022-27166

A carefully crafted request on XHRHtml2Markup.jsp could trigger an XSS vulnerability on Apache JSPWiki up to and including 2.11.2, which could allow the attacker to execute javascript in the victim's browser and get some sensitive information about the victim.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.403
EPSS Ranking 97.2%
CVSS Severity
CVSS v3 Score 6.1
Products affected by CVE-2022-27166
  • Apache » Jspwiki » Version: N/A
    cpe:2.3:a:apache:jspwiki:-
  • Apache » Jspwiki » Version: 1.4.0
    cpe:2.3:a:apache:jspwiki:1.4.0
  • Apache » Jspwiki » Version: 1.5.0
    cpe:2.3:a:apache:jspwiki:1.5.0
  • Apache » Jspwiki » Version: 1.5.5
    cpe:2.3:a:apache:jspwiki:1.5.5
  • Apache » Jspwiki » Version: 1.5.7
    cpe:2.3:a:apache:jspwiki:1.5.7
  • Apache » Jspwiki » Version: 1.6.0
    cpe:2.3:a:apache:jspwiki:1.6.0
  • Apache » Jspwiki » Version: 1.6.11
    cpe:2.3:a:apache:jspwiki:1.6.11
  • Apache » Jspwiki » Version: 1.6.12
    cpe:2.3:a:apache:jspwiki:1.6.12
  • Apache » Jspwiki » Version: 1.7.0
    cpe:2.3:a:apache:jspwiki:1.7.0
  • Apache » Jspwiki » Version: 1.8.0
    cpe:2.3:a:apache:jspwiki:1.8.0
  • Apache » Jspwiki » Version: 1.8.2
    cpe:2.3:a:apache:jspwiki:1.8.2
  • Apache » Jspwiki » Version: 2.0.0
    cpe:2.3:a:apache:jspwiki:2.0.0
  • Apache » Jspwiki » Version: 2.0.14
    cpe:2.3:a:apache:jspwiki:2.0.14
  • Apache » Jspwiki » Version: 2.0.32
    cpe:2.3:a:apache:jspwiki:2.0.32
  • Apache » Jspwiki » Version: 2.0.36
    cpe:2.3:a:apache:jspwiki:2.0.36
  • Apache » Jspwiki » Version: 2.0.39
    cpe:2.3:a:apache:jspwiki:2.0.39
  • Apache » Jspwiki » Version: 2.0.45
    cpe:2.3:a:apache:jspwiki:2.0.45
  • Apache » Jspwiki » Version: 2.10.0
    cpe:2.3:a:apache:jspwiki:2.10.0
  • Apache » Jspwiki » Version: 2.10.1
    cpe:2.3:a:apache:jspwiki:2.10.1
  • Apache » Jspwiki » Version: 2.10.2
    cpe:2.3:a:apache:jspwiki:2.10.2
  • Apache » Jspwiki » Version: 2.10.3
    cpe:2.3:a:apache:jspwiki:2.10.3
  • Apache » Jspwiki » Version: 2.10.4
    cpe:2.3:a:apache:jspwiki:2.10.4
  • Apache » Jspwiki » Version: 2.10.5
    cpe:2.3:a:apache:jspwiki:2.10.5
  • Apache » Jspwiki » Version: 2.11.0
    cpe:2.3:a:apache:jspwiki:2.11.0
  • Apache » Jspwiki » Version: 2.11.1
    cpe:2.3:a:apache:jspwiki:2.11.1
  • Apache » Jspwiki » Version: 2.11.2
    cpe:2.3:a:apache:jspwiki:2.11.2
  • Apache » Jspwiki » Version: 2.2.13
    cpe:2.3:a:apache:jspwiki:2.2.13
  • Apache » Jspwiki » Version: 2.2.14
    cpe:2.3:a:apache:jspwiki:2.2.14
  • Apache » Jspwiki » Version: 2.2.16
    cpe:2.3:a:apache:jspwiki:2.2.16
  • Apache » Jspwiki » Version: 2.2.19
    cpe:2.3:a:apache:jspwiki:2.2.19
  • Apache » Jspwiki » Version: 2.2.20
    cpe:2.3:a:apache:jspwiki:2.2.20
  • Apache » Jspwiki » Version: 2.2.26
    cpe:2.3:a:apache:jspwiki:2.2.26
  • Apache » Jspwiki » Version: 2.2.28
    cpe:2.3:a:apache:jspwiki:2.2.28
  • Apache » Jspwiki » Version: 2.2.33
    cpe:2.3:a:apache:jspwiki:2.2.33
  • Apache » Jspwiki » Version: 2.3.50
    cpe:2.3:a:apache:jspwiki:2.3.50
  • Apache » Jspwiki » Version: 2.4.0
    cpe:2.3:a:apache:jspwiki:2.4.0
  • Apache » Jspwiki » Version: 2.4.100
    cpe:2.3:a:apache:jspwiki:2.4.100
  • Apache » Jspwiki » Version: 2.4.102
    cpe:2.3:a:apache:jspwiki:2.4.102
  • Apache » Jspwiki » Version: 2.4.103
    cpe:2.3:a:apache:jspwiki:2.4.103
  • Apache » Jspwiki » Version: 2.4.104
    cpe:2.3:a:apache:jspwiki:2.4.104
  • Apache » Jspwiki » Version: 2.4.15
    cpe:2.3:a:apache:jspwiki:2.4.15
  • Apache » Jspwiki » Version: 2.4.56
    cpe:2.3:a:apache:jspwiki:2.4.56
  • Apache » Jspwiki » Version: 2.4.69
    cpe:2.3:a:apache:jspwiki:2.4.69
  • Apache » Jspwiki » Version: 2.4.71
    cpe:2.3:a:apache:jspwiki:2.4.71
  • Apache » Jspwiki » Version: 2.4.87
    cpe:2.3:a:apache:jspwiki:2.4.87
  • Apache » Jspwiki » Version: 2.5.124
    cpe:2.3:a:apache:jspwiki:2.5.124
  • Apache » Jspwiki » Version: 2.5.139
    cpe:2.3:a:apache:jspwiki:2.5.139
  • Apache » Jspwiki » Version: 2.5.79
    cpe:2.3:a:apache:jspwiki:2.5.79
  • Apache » Jspwiki » Version: 2.5.93
    cpe:2.3:a:apache:jspwiki:2.5.93
  • Apache » Jspwiki » Version: 2.6.0
    cpe:2.3:a:apache:jspwiki:2.6.0
  • Apache » Jspwiki » Version: 2.6.1
    cpe:2.3:a:apache:jspwiki:2.6.1
  • Apache » Jspwiki » Version: 2.6.2
    cpe:2.3:a:apache:jspwiki:2.6.2
  • Apache » Jspwiki » Version: 2.6.3
    cpe:2.3:a:apache:jspwiki:2.6.3
  • Apache » Jspwiki » Version: 2.6.4
    cpe:2.3:a:apache:jspwiki:2.6.4
  • Apache » Jspwiki » Version: 2.8.0
    cpe:2.3:a:apache:jspwiki:2.8.0
  • Apache » Jspwiki » Version: 2.8.1
    cpe:2.3:a:apache:jspwiki:2.8.1
  • Apache » Jspwiki » Version: 2.8.2
    cpe:2.3:a:apache:jspwiki:2.8.2
  • Apache » Jspwiki » Version: 2.8.3
    cpe:2.3:a:apache:jspwiki:2.8.3
  • Apache » Jspwiki » Version: 2.8.4
    cpe:2.3:a:apache:jspwiki:2.8.4
  • Apache » Jspwiki » Version: 2.9.0
    cpe:2.3:a:apache:jspwiki:2.9.0
  • Apache » Jspwiki » Version: 2.9.1
    cpe:2.3:a:apache:jspwiki:2.9.1


Contact Us

Shodan ® - All rights reserved