AUGUST 4, 2026
Live Feed
Back to database
Case File

CVE-2024-27136

MEDIUM · CVSS 6.1 EPSS 59.43%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2024-06-24 · Last synced 2026-08-04

CyberRota Analysis

This is a medium severity vulnerability with a CVSS score of 6.1. It affects Apache, Java. Its EPSS score suggests a 59.4% probability of exploitation in the next 30 days.

CVE
CVE-2024-27136
Severity
MEDIUM
CVSS
6.1
EPSS
59.43%
Apache Java

Original NVD Description

XSS in Upload page in Apache JSPWiki 2.12.1 and priors allows the attacker to execute javascript in the victim's browser and get some sensitive information about the victim. Apache JSPWiki users should upgrade to 2.12.2 or later.

Related CVEs

Other vulnerabilities affecting the same vendor(s)