Lucene search

K
cve[email protected]CVE-2013-2187
HistoryApr 22, 2014 - 2:23 p.m.

CVE-2013-2187

2014-04-2214:23:00
CWE-79
web.nvd.nist.gov
32
cve-2013-2187
cross-site scripting
xss
apache archiva
remote attack
security vulnerability
html injection
web script injection
nvd

5.8 Medium

AI Score

Confidence

High

4.3 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

0.059 Low

EPSS

Percentile

93.4%

Cross-site scripting (XSS) vulnerability in Apache Archiva 1.2 through 1.2.2 and 1.3 before 1.3.8 allows remote attackers to inject arbitrary web script or HTML via unspecified parameters, related to the home page.

5.8 Medium

AI Score

Confidence

High

4.3 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

0.059 Low

EPSS

Percentile

93.4%

Related for CVE-2013-2187