NVD

Id
38281  
Name
CVE-2013-2187  
Description
Cross-site scripting (XSS) vulnerability in Apache Archiva 1.2 through 1.2.2 and 1.3 before 1.3.8 allows remote attackers to inject arbitrary web script or HTML via unspecified parameters, related to the home page.  
Reject
 
CVSS Version
2  
CVSS Score
4.3  
Severity
Medium  
CVSS Base Score
4.3  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:N/I:P/A:N)  
Pub Date
2017-01-18  
Published
2014-04-22  
Modified Date
2016-12-30  
Seq
2013-2187  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
195774 38281 CVE-2013-2187 http://archiva.apache.org/security.html  View
195775 38281 CVE-2013-2187 20140419 [SECURITY] CVE-2013-2187: Apache Archiva Cross-Site Scripting vulnerability  View
195776 38281 CVE-2013-2187 66991  View
195777 38281 CVE-2013-2187 1030130  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
24773 JVNDB-2013-006348 Apache Archiva におけるクロスサイトスクリプティングの脆弱性 Apache Archiva には、ホームページに関する処理に不備があるため、クロスサイトスクリプティングの脆弱性が存在します。 CVE-2013-2187 62129 CVE-2013-2187 38281 4.3 http://jvndb.jvn.jp/ja/contents/2013/JVNDB-2013-006348.html 2013-02-19 2014-04-25 View