Shodan
Vulnerabilities
Vulnerable Software

Vulnerability Details CVE-2018-20242

A carefully crafted URL could trigger an XSS vulnerability on Apache JSPWiki, from versions up to 2.10.5, which could lead to session hijacking.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.054
EPSS Ranking 91.8%
CVSS Severity
CVSS v3 Score 6.1
CVSS v2 Score 4.3
References
Products affected by CVE-2018-20242
  • Apache » Jspwiki » Version: N/A
    cpe:2.3:a:apache:jspwiki:-
  • Apache » Jspwiki » Version: 1.4.0
    cpe:2.3:a:apache:jspwiki:1.4.0
  • Apache » Jspwiki » Version: 1.5.0
    cpe:2.3:a:apache:jspwiki:1.5.0
  • Apache » Jspwiki » Version: 1.5.5
    cpe:2.3:a:apache:jspwiki:1.5.5
  • Apache » Jspwiki » Version: 1.5.7
    cpe:2.3:a:apache:jspwiki:1.5.7
  • Apache » Jspwiki » Version: 1.6.0
    cpe:2.3:a:apache:jspwiki:1.6.0
  • Apache » Jspwiki » Version: 1.6.11
    cpe:2.3:a:apache:jspwiki:1.6.11
  • Apache » Jspwiki » Version: 1.6.12
    cpe:2.3:a:apache:jspwiki:1.6.12
  • Apache » Jspwiki » Version: 1.7.0
    cpe:2.3:a:apache:jspwiki:1.7.0
  • Apache » Jspwiki » Version: 1.8.0
    cpe:2.3:a:apache:jspwiki:1.8.0
  • Apache » Jspwiki » Version: 1.8.2
    cpe:2.3:a:apache:jspwiki:1.8.2
  • Apache » Jspwiki » Version: 2.0.0
    cpe:2.3:a:apache:jspwiki:2.0.0
  • Apache » Jspwiki » Version: 2.0.14
    cpe:2.3:a:apache:jspwiki:2.0.14
  • Apache » Jspwiki » Version: 2.0.32
    cpe:2.3:a:apache:jspwiki:2.0.32
  • Apache » Jspwiki » Version: 2.0.36
    cpe:2.3:a:apache:jspwiki:2.0.36
  • Apache » Jspwiki » Version: 2.0.39
    cpe:2.3:a:apache:jspwiki:2.0.39
  • Apache » Jspwiki » Version: 2.0.45
    cpe:2.3:a:apache:jspwiki:2.0.45
  • Apache » Jspwiki » Version: 2.10.0
    cpe:2.3:a:apache:jspwiki:2.10.0
  • Apache » Jspwiki » Version: 2.10.1
    cpe:2.3:a:apache:jspwiki:2.10.1
  • Apache » Jspwiki » Version: 2.10.2
    cpe:2.3:a:apache:jspwiki:2.10.2
  • Apache » Jspwiki » Version: 2.10.3
    cpe:2.3:a:apache:jspwiki:2.10.3
  • Apache » Jspwiki » Version: 2.10.4
    cpe:2.3:a:apache:jspwiki:2.10.4
  • Apache » Jspwiki » Version: 2.10.5
    cpe:2.3:a:apache:jspwiki:2.10.5
  • Apache » Jspwiki » Version: 2.2.13
    cpe:2.3:a:apache:jspwiki:2.2.13
  • Apache » Jspwiki » Version: 2.2.14
    cpe:2.3:a:apache:jspwiki:2.2.14
  • Apache » Jspwiki » Version: 2.2.16
    cpe:2.3:a:apache:jspwiki:2.2.16
  • Apache » Jspwiki » Version: 2.2.19
    cpe:2.3:a:apache:jspwiki:2.2.19
  • Apache » Jspwiki » Version: 2.2.20
    cpe:2.3:a:apache:jspwiki:2.2.20
  • Apache » Jspwiki » Version: 2.2.26
    cpe:2.3:a:apache:jspwiki:2.2.26
  • Apache » Jspwiki » Version: 2.2.28
    cpe:2.3:a:apache:jspwiki:2.2.28
  • Apache » Jspwiki » Version: 2.2.33
    cpe:2.3:a:apache:jspwiki:2.2.33
  • Apache » Jspwiki » Version: 2.3.50
    cpe:2.3:a:apache:jspwiki:2.3.50
  • Apache » Jspwiki » Version: 2.4.0
    cpe:2.3:a:apache:jspwiki:2.4.0
  • Apache » Jspwiki » Version: 2.4.100
    cpe:2.3:a:apache:jspwiki:2.4.100
  • Apache » Jspwiki » Version: 2.4.102
    cpe:2.3:a:apache:jspwiki:2.4.102
  • Apache » Jspwiki » Version: 2.4.103
    cpe:2.3:a:apache:jspwiki:2.4.103
  • Apache » Jspwiki » Version: 2.4.104
    cpe:2.3:a:apache:jspwiki:2.4.104
  • Apache » Jspwiki » Version: 2.4.15
    cpe:2.3:a:apache:jspwiki:2.4.15
  • Apache » Jspwiki » Version: 2.4.56
    cpe:2.3:a:apache:jspwiki:2.4.56
  • Apache » Jspwiki » Version: 2.4.69
    cpe:2.3:a:apache:jspwiki:2.4.69
  • Apache » Jspwiki » Version: 2.4.71
    cpe:2.3:a:apache:jspwiki:2.4.71
  • Apache » Jspwiki » Version: 2.4.87
    cpe:2.3:a:apache:jspwiki:2.4.87
  • Apache » Jspwiki » Version: 2.5.124
    cpe:2.3:a:apache:jspwiki:2.5.124
  • Apache » Jspwiki » Version: 2.5.139
    cpe:2.3:a:apache:jspwiki:2.5.139
  • Apache » Jspwiki » Version: 2.5.79
    cpe:2.3:a:apache:jspwiki:2.5.79
  • Apache » Jspwiki » Version: 2.5.93
    cpe:2.3:a:apache:jspwiki:2.5.93
  • Apache » Jspwiki » Version: 2.6.0
    cpe:2.3:a:apache:jspwiki:2.6.0
  • Apache » Jspwiki » Version: 2.6.1
    cpe:2.3:a:apache:jspwiki:2.6.1
  • Apache » Jspwiki » Version: 2.6.2
    cpe:2.3:a:apache:jspwiki:2.6.2
  • Apache » Jspwiki » Version: 2.6.3
    cpe:2.3:a:apache:jspwiki:2.6.3
  • Apache » Jspwiki » Version: 2.6.4
    cpe:2.3:a:apache:jspwiki:2.6.4
  • Apache » Jspwiki » Version: 2.8.0
    cpe:2.3:a:apache:jspwiki:2.8.0
  • Apache » Jspwiki » Version: 2.8.1
    cpe:2.3:a:apache:jspwiki:2.8.1
  • Apache » Jspwiki » Version: 2.8.2
    cpe:2.3:a:apache:jspwiki:2.8.2
  • Apache » Jspwiki » Version: 2.8.3
    cpe:2.3:a:apache:jspwiki:2.8.3
  • Apache » Jspwiki » Version: 2.8.4
    cpe:2.3:a:apache:jspwiki:2.8.4
  • Apache » Jspwiki » Version: 2.9.0
    cpe:2.3:a:apache:jspwiki:2.9.0
  • Apache » Jspwiki » Version: 2.9.1
    cpe:2.3:a:apache:jspwiki:2.9.1


Products
Pricing
Contact Us

Shodan ® - All rights reserved