Apache Wicket vulnerabilities
22 known vulnerabilities affecting apache/wicket.
Total CVEs
22
CISA KEV
0
Public exploits
0
Exploited in wild
0
Severity breakdown
CRITICAL3HIGH6MEDIUM12LOW1
Vulnerabilities
Page 2 of 2
CVE-2012-3373P4MEDIUMCVSS 4.3v1.4.1v1.4.2+26 more2012-09-19
CVE-2012-3373 [MEDIUM] CWE-79 CVE-2012-3373: Cross-site scripting (XSS) vulnerability in Apache Wicket 1.4.x before 1.4.21 and 1.5.x before 1.5.8
Cross-site scripting (XSS) vulnerability in Apache Wicket 1.4.x before 1.4.21 and 1.5.x before 1.5.8 allows remote attackers to inject arbitrary web script or HTML via vectors involving a %00 sequence in an Ajax link URL associated with a Wicket app.
nvd
CVE-2011-2712P4LOWCVSS 2.6v1.4.0v1.4.1+16 more2011-08-29
CVE-2011-2712 [LOW] CWE-79 CVE-2011-2712: Cross-site scripting (XSS) vulnerability in Apache Wicket 1.4.x before 1.4.18, when setAutomaticMult
Cross-site scripting (XSS) vulnerability in Apache Wicket 1.4.x before 1.4.18, when setAutomaticMultiWindowSupport is enabled, allows remote attackers to inject arbitrary web script or HTML via unspecified parameters.
nvd
← Previous2 / 2