GCVE - cpe:2.3:a:apache:couchdb:0.9.0:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:apache:couchdb:0.9.0:*:*:*:*:*:*:*

part: a version: 0.9.0 update: *

Vendor	Apache (`b0303047-b7dd-5cf8-abcc-71b7d9d80b95`)
Product	Couchdb (`3de04e4d-acf5-50dd-b2a1-80e025817e6a`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from NVD CPE 2.0 feed

PURL mappings

PURL	Source	Last updated
`pkg:apache/couchdb`	purl2cpe	2026-06-01 10:14:25.191290
`pkg:docker/couchdb`	purl2cpe	2026-06-01 10:14:25.191291
`pkg:github/apache/couchdb`	purl2cpe	2026-06-01 10:14:25.191293
`pkg:gitlab/kalilinux/couchdb`	purl2cpe	2026-06-01 10:14:25.191294
`pkg:rpm/fedora/couchdb`	purl2cpe	2026-06-01 10:14:25.191295
`pkg:rpm/opensuse/couchdb`	purl2cpe	2026-06-01 10:14:25.191297

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2010-3854`	vulnerable	2026-06-08 04:55:17.599305	Details available Multiple cross-site scripting (XSS) vulnerabilities in the web administration interface (aka Futon) in Apache CouchDB 0.8.0 through 1.0.1 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors. Published: 2011-02-02T00:00:00.000Z Updated: 2024-08-07T03:26:12.348Z Open on db.gcve.eu Reference links https://exchange.xforce.ibmcloud.com/vulnerabilities/65050 http://mail-archives.apache.org/mod_mbox/couchdb-dev/201101.mbox/%3CC840F655-C8C5-4EC6-8AA8-DD223E39C34A%40apache.org%3E http://osvdb.org/70734 http://www.vupen.com/english/advisories/2011/0263 http://www.securityfocus.com/bid/46066	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2010-2234`	vulnerable	2026-06-08 04:54:12.345033	Details available Cross-site request forgery (CSRF) vulnerability in Apache CouchDB 0.8.0 through 0.11.0 allows remote attackers to hijack the authentication of administrators for direct requests to an installation URL. Published: 2010-08-19T20:00:00.000Z Updated: 2024-08-07T02:25:07.400Z Open on db.gcve.eu Reference links http://seclists.org/fulldisclosure/2010/Aug/199 http://www.securityfocus.com/archive/1/513174/100/0/threaded https://bugzilla.redhat.com/show_bug.cgi?id=624764 http://www.securityfocus.com/bid/42501	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2010-0009`	vulnerable	2026-06-08 04:51:52.284271	Details available Apache CouchDB 0.8.0 through 0.10.1 allows remote attackers to obtain sensitive information by measuring the completion time of operations that verify (1) hashes or (2) passwords. Published: 2010-04-05T16:00:00.000Z Updated: 2024-08-07T00:30:47.025Z Open on db.gcve.eu Reference links http://www.securityfocus.com/bid/39116 https://bugzilla.redhat.com/show_bug.cgi?id=578572 http://www.securityfocus.com/archive/1/510427/100/0/threaded http://secunia.com/advisories/39146 http://archives.neohapsis.com/archives/bugtraq/2010-03/0267.html	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.