What’s Vulnerable › Products

Apache Software Foundation Apache Archiva vulnerabilities

20 known vulnerabilities, 1 confirmed exploited in the wild (CISA KEV), 0 published in the last 12 months.

Check whether your Apache Software Foundation Apache Archiva version is affected

Exploited Apache Software Foundation Apache Archiva vulnerabilities

• CVE-2013-2251 — Apache Struts Improper Input Validation Vulnerability

Latest Apache Software Foundation Apache Archiva vulnerabilities

• CVE-2024-27140 — Apache Archiva: reflected XSS (CVSS 5.4)
• CVE-2024-27139 — Apache Archiva: incorrect authentication potentially leading to account takeover (CVSS 7.5)
• CVE-2024-27138 — Apache Archiva: disabling user registration is not effective (CVSS 7.5)
• CVE-2023-28158 — Apache Archiva privilege escalation (CVSS 5.4)
• CVE-2022-40309 — Apache Archiva prior to 2.2.9 allows an authenticated user to delete arbitrary directories (CVSS 4.3)
• CVE-2022-40308 — Apache Archiva prior to 2.2.9 may allow the anonymous user to read arbitrary files (CVSS 7.5)
• CVE-2022-29405 — Apache Archiva Arbitrary user password reset vulnerability (CVSS 6.5)
• CVE-2020-9495 — (CVSS 5.3)
• CVE-2019-0214 — (CVSS 6.5)
• CVE-2019-0213 — (CVSS 6.5)
• CVE-2017-5657 — (CVSS 8.0)
• CVE-2016-5005 — (CVSS 4.8)
• CVE-2016-4469 — (CVSS 8.8)
• CVE-2013-2187 — (CVSS 4.3)
• CVE-2013-2251 — Apache Struts Improper Input Validation Vulnerability (CVSS 9.8) — exploited
• CVE-2011-1077 — (CVSS 4.3)
• CVE-2011-1026 — (CVSS 6.8)
• CVE-2011-0533 — (CVSS 4.3)
• CVE-2010-4408 — (CVSS 6.8)
• CVE-2010-3449 — (CVSS 6.8)