GCVE - cpe:2.3:a:apache:archiva:1.3.3:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:apache:archiva:1.3.3:*:*:*:*:*:*:*

part: a version: 1.3.3 update: *

Vendor	Apache (`b0303047-b7dd-5cf8-abcc-71b7d9d80b95`)
Product	Archiva (`bbee34a2-efc3-51a6-a883-52d5da614833`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from NVD CPE 2.0 feed

PURL mappings

PURL	Source	Last updated
`pkg:apache/archiva`	purl2cpe	2026-06-01 10:14:30.406866
`pkg:github/apache/archiva`	purl2cpe	2026-06-01 10:14:30.406867
`pkg:maven/org.apache.archiva/archiva`	purl2cpe	2026-06-01 10:14:30.406869

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2013-2187`	vulnerable	2026-06-08 05:03:58.908895	Details available Cross-site scripting (XSS) vulnerability in Apache Archiva 1.2 through 1.2.2 and 1.3 before 1.3.8 allows remote attackers to inject arbitrary web script or HTML via unspecified parameters, related to the home page. Published: 2014-04-22T14:00:00.000Z Updated: 2024-08-06T15:27:41.000Z Open on db.gcve.eu Reference links http://www.securityfocus.com/bid/66991 http://archiva.apache.org/security.html http://www.securityfocus.com/archive/1/531884/100/0/threaded http://www.securitytracker.com/id/1030130	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2011-1077`	vulnerable	2026-06-08 04:57:55.030575	Details available Multiple cross-site scripting (XSS) vulnerabilities in Apache Archiva 1.0 through 1.2.2, and 1.3.x before 1.3.5, allow remote attackers to inject arbitrary web script or HTML via unspecified vectors. Published: 2011-06-02T20:00:00.000Z Updated: 2024-08-06T22:14:27.721Z Open on db.gcve.eu Reference links http://www.securityfocus.com/archive/1/518167/100/0/threaded http://secunia.com/advisories/44693 https://exchange.xforce.ibmcloud.com/vulnerabilities/67672 http://archives.neohapsis.com/archives/fulldisclosure/2011-05/0531.html http://archiva.apache.org/security.html	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2011-1026`	vulnerable	2026-06-08 04:56:40.937529	Details available Multiple cross-site request forgery (CSRF) vulnerabilities in Apache Archiva 1.0 through 1.2.2, and 1.3.x before 1.3.5, allow remote attackers to hijack the authentication of administrators. Published: 2011-06-02T20:00:00.000Z Updated: 2024-08-06T22:14:27.176Z Open on db.gcve.eu Reference links http://securityreason.com/securityalert/8266 http://www.securityfocus.com/archive/1/518168/100/0/threaded http://secunia.com/advisories/44693 https://exchange.xforce.ibmcloud.com/vulnerabilities/67671 http://www.securityfocus.com/bid/48015	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2011-0533`	vulnerable	2026-06-08 04:56:37.721957	Details available Cross-site scripting (XSS) vulnerability in Apache Continuum 1.1 through 1.2.3.1, 1.3.6, and 1.4.0 Beta; and Archiva 1.3.0 through 1.3.3 and 1.0 through 1.22 allows remote attackers to inject arbitrary web script or HTML via a crafted parameter, related to the autoIncludeParameters setting for the extremecomponents table. Published: 2011-02-17T17:00:00.000Z Updated: 2024-08-06T21:58:25.087Z Open on db.gcve.eu Reference links http://osvdb.org/70925 http://svn.apache.org/viewvc?view=revision&revision=1066056 http://www.securityfocus.com/bid/46311 http://secunia.com/advisories/43261 http://jira.codehaus.org/browse/CONTINUUM-2604	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.