CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2011-1026

Multiple cross-site request forgery (CSRF) vulnerabilities in Apache Archiva 1.0 through 1.2.2, and 1.3.x before 1.3.5, allow remote attackers to hijack the authentication of administrators.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.007

EPSS Ranking 70.9%

CVSS Severity

CVSS v2 Score 6.8

References

Products affected by CVE-2011-1026

Apache » Archiva » Version: 1.0

cpe:2.3:a:apache:archiva:1.0
Apache » Archiva » Version: 1.0.1

cpe:2.3:a:apache:archiva:1.0.1
Apache » Archiva » Version: 1.0.2

cpe:2.3:a:apache:archiva:1.0.2
Apache » Archiva » Version: 1.0.3

cpe:2.3:a:apache:archiva:1.0.3
Apache » Archiva » Version: 1.1

cpe:2.3:a:apache:archiva:1.1
Apache » Archiva » Version: 1.1.1

cpe:2.3:a:apache:archiva:1.1.1
Apache » Archiva » Version: 1.1.2

cpe:2.3:a:apache:archiva:1.1.2
Apache » Archiva » Version: 1.1.3

cpe:2.3:a:apache:archiva:1.1.3
Apache » Archiva » Version: 1.1.4

cpe:2.3:a:apache:archiva:1.1.4
Apache » Archiva » Version: 1.2

cpe:2.3:a:apache:archiva:1.2
Apache » Archiva » Version: 1.2-m1

cpe:2.3:a:apache:archiva:1.2-m1
Apache » Archiva » Version: 1.2.1

cpe:2.3:a:apache:archiva:1.2.1
Apache » Archiva » Version: 1.2.2

cpe:2.3:a:apache:archiva:1.2.2
Apache » Archiva » Version: 1.3

cpe:2.3:a:apache:archiva:1.3
Apache » Archiva » Version: 1.3.1

cpe:2.3:a:apache:archiva:1.3.1
Apache » Archiva » Version: 1.3.2

cpe:2.3:a:apache:archiva:1.3.2
Apache » Archiva » Version: 1.3.3

cpe:2.3:a:apache:archiva:1.3.3
Apache » Archiva » Version: 1.3.4

cpe:2.3:a:apache:archiva:1.3.4

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2011-1026

Products

Pricing

Contact Us