Skip to content
Security
فارسی
Sign in / Register
Vulnerabilities
Products
Plugins
All products
org.apache.archiva:archiva
Maven
· Package
11 reports
Vulnerability alerts
Follow
Package, identifier or title
Search
Severity
All
Critical
High
Medium
Low
Unknown
Fix status
All
Fix reported
No fix reported
Sort by
Recently updated
Highest severity
Report
Product
Ecosystem
Severity
Fix status
Last updated
Apache Archiva Incorrect Authorization vulnerability
CVE-2024-27139 · GHSA-H595-VWHC-3XWX
org.apache.archiva:archiva
Maven
High
No fix reported
2026-03-26
Apache Archiva Incorrect Authorization vulnerability
CVE-2024-27138 · GHSA-RV4H-M4WC-V99W
org.apache.archiva:archiva
Maven
High
No fix reported
2026-03-26
Apache Continuum and Archiva vulnerable to Cross-site Scripting
CVE-2011-0533 · GHSA-7382-FV7P-V9V3
org.apache.archiva:archiva
org.apache.continuum:continuum
Maven
Medium
Fix reported
2025-04-12
Apache Archiva does not require entry of the administrator's password at the time of modifying a user account
CVE-2010-4408 · GHSA-5P54-JJ38-3HXJ
org.apache.archiva:archiva
Maven
Medium
Fix reported
2025-04-12
Apache Archiva vulnerable to privilege escalation via stored cross-site scripting (XSS)
CVE-2023-28158 · GHSA-QF34-F43R-GV9P
org.apache.archiva:archiva
Maven
Medium
Fix reported
2023-11-08
Missing Authorization in Apache Archiva
CVE-2022-29405 · GHSA-5HQC-X78W-3CMW
org.apache.archiva:archiva
Maven
Medium
Fix reported
2023-11-08
Injection in Apache Archiva
CVE-2020-9495 · GHSA-V83P-XWM9-V4G8
org.apache.archiva:archiva
Maven
Medium
Fix reported
2023-11-08
Cross-site scripting in Apache Archiva
CVE-2019-0213 · GHSA-CQCF-4G4H-RGHF
org.apache.archiva:archiva
Maven
Medium
Fix reported
2023-11-08
Improper Input Validation in Apache Archiva
CVE-2019-0214 · GHSA-JXGM-9F58-W4XP
org.apache.archiva:archiva
Maven
Medium
Fix reported
2023-11-08
Apache Archiva vulnerable to Cross Site Request Forgery
CVE-2017-5657 · GHSA-HF4P-MHC8-X2GP
org.apache.archiva:archiva
Maven
High
Fix reported
2023-11-08
Apache Archiva vulnerable to Cross-site Scripting
CVE-2016-5005 · GHSA-8JFM-RGMG-3WQ2
org.apache.archiva:archiva
Maven
Medium
Fix reported
2023-11-08