F
Foswiki
Security Risk Profile
20
/100
lowSecurity Risk Score
Comprehensive risk assessment based on 13 vulnerabilities, EPSS scores, exploitation status, and remediation availability.
📅 Data spans from April 30, 2009 to present
13
Total CVEs
3
Critical+High
0
Exploited
0
Unpatched
Threat Assessment
Avg CVSS
6.1
Base severity
Avg EPSS
0%
Exploit probability
Unpatched
0
Critical/High
Risk Level
20/100
low
Severity Distribution
Critical
1High
2Medium
5Low
1Exploit Likelihood
>50% chance
020-50%
05-20%
0<5%
1Age Distribution
Common Weaknesses (CWE)
1
Path Traversal
2
2
XSS
2
3
Infoleak
1
4
Code Injection
1
5
CSRF
1
Most Affected Products
1. Foswiki Foswiki35
2. JumpBox JumpBox4
3. Twiki TWiki3
4. Foswiki1
5. debian1
Recent Vulnerabilities
See more →https://seclists.org/oss-sec/2026/q1/318
unknown
Foswiki 2.1.11 is leased, fixes CVE-2026-2861
Mar 16, 2026🔧 No Patch
https://seclists.org/oss-sec/2026/q1/316
unknown
Foswiki 2.1.11 is leased, fixes CVE-2026-2861
Mar 16, 2026🔧 No Patch
https://seclists.org/oss-sec/2026/q1/315
unknown
Foswiki 2.1.11 is leased, fixes CVE-2026-2861
Mar 15, 2026🔧 No Patch
CVE-2026-2861
CVSS 5.5EPSS 0%medium
Foswiki Changes/Viewfile/Oops information disclosure
Feb 21, 2026
CVE-2023-33756
CVSS 7.5high
Aug 8, 2023
CVE-2023-24698
CVSS 7.5high
Aug 8, 2023
https://seclists.org/oss-sec/2023/q3/93
unknown
Foswiki-2.1.8 has been released
Aug 7, 2023🔧 No Patch
CVE-2013-1666
CVSS 9.8critical
Nov 1, 2019
CVE-2012-6330
CVSS 5.0medium
Jan 4, 2013🔧 No Patch
CVE-2012-1004
CVSS 2.1low
Feb 8, 2012🔧 No Patch
Monitor Foswiki in Real-Time
Get instant alerts when new vulnerabilities are discovered. Stay ahead of security threats with SecAlerts.