CVE-2014-3526
30.10.2017, 14:29
Apache Wicket before 1.5.12, 6.x before 6.17.0, and 7.x before 7.0.0-M3 might allow remote attackers to obtain sensitive information via vectors involving identifiers for storing page markup for temporary user sessions.Enginsight
| Vendor | Product | Version |
|---|---|---|
| apache | wicket | 1.5.0 ≤ 𝑥 < 1.5.12 |
| apache | wicket | 6.0.0 |
| apache | wicket | 6.0.0:beta1 |
| apache | wicket | 6.0.0:beta2 |
| apache | wicket | 6.0.0:beta3 |
| apache | wicket | 6.1.0 |
| apache | wicket | 6.1.1 |
| apache | wicket | 6.2.0 |
| apache | wicket | 6.3.0 |
| apache | wicket | 6.4.0 |
| apache | wicket | 6.5.0 |
| apache | wicket | 6.6.0 |
| apache | wicket | 6.7.0 |
| apache | wicket | 6.8.0 |
| apache | wicket | 6.9.0 |
| apache | wicket | 6.9.1 |
| apache | wicket | 6.10.0 |
| apache | wicket | 6.11.0 |
| apache | wicket | 6.12.0 |
| apache | wicket | 6.13.0 |
| apache | wicket | 6.14.0 |
| apache | wicket | 6.15.0 |
| apache | wicket | 6.16.0 |
| apache | wicket | 7.0.0 |
| apache | wicket | 7.0.0:milestone1 |
| apache | wicket | 7.0.0:milestone2 |
𝑥
= Vulnerable software versions
Common Weakness Enumeration