Apache Archiva vulnerabilities

• apache archiva Apache Archiva: disabling user registration is not effective CVE-2024-27138 7.5 HighMarch 1, 2024
• apache archiva Apache Archiva: incorrect authentication potentially leading to account takeover CVE-2024-27139 7.5 HighMarch 1, 2024
• apache archiva Apache Archiva: reflected XSS CVE-2024-27140 5.4 MediumMarch 1, 2024
• apache archiva Apache Archiva privilege escalation CVE-2023-28158 Fix available 6.5 MediumMarch 29, 2023
• apache archiva Apache Archiva prior to 2.2.9 allows an authenticated user to delete arbitrary directories CVE-2022-40309 Fix available 4.3 MediumNovember 15, 2022
• apache archiva Apache Archiva prior to 2.2.9 may allow the anonymous user to read arbitrary files CVE-2022-40308 Fix available 7.5 HighNovember 15, 2022
• apache archiva Apache Archiva Arbitrary user password reset vulnerability CVE-2022-29405 Fix available 6.5 MediumMay 25, 2022
• apache archiva Injection in Apache Archiva CVE-2020-9495 Public exploitFix available 5.3 MediumJune 19, 2020
• apache archiva Improper Input Validation in Apache Archiva CVE-2019-0214 Fix available 6.5 MediumApril 30, 2019
• apache archiva Cross-site scripting in Apache Archiva CVE-2019-0213 Fix available 6.5 MediumApril 30, 2019
• apache archiva Apache Archiva vulnerable to Cross Site Request Forgery CVE-2017-5657 Fix available 8.0 HighMay 22, 2017
• apache archiva Apache Archiva vulnerable to Cross-site Scripting CVE-2016-5005 Fix available 4.8 MediumJuly 28, 2016
• apache archiva Multiple cross-site request forgery (CSRF) vulnerabilities in Apache Archiva 1.3.9 and earlier... CVE-2016-4469 Public exploit 8.8 HighJuly 28, 2016
• apache archiva Cross-site scripting (XSS) vulnerability in Apache Archiva 1.2 through 1.2.2 and 1.3 before 1.3.8... CVE-2013-2187 4.3 MediumApril 22, 2014
• apache struts, archiva, fujitsu interstage business process manager analytics +1 more +3 more Code injection in Apache Struts CVE-2013-2251 In KEVPublic exploitFix available EPSS 100.0% 9.8 CriticalJuly 18, 2013
• apache archiva Multiple cross-site scripting (XSS) vulnerabilities in Apache Archiva 1.0 through 1.2.2, and 1.3... CVE-2011-1077 4.3 MediumJune 2, 2011
• apache archiva Multiple cross-site request forgery (CSRF) vulnerabilities in Apache Archiva 1.0 through 1.2.2,... CVE-2011-1026 6.8 MediumJune 2, 2011
• apache archiva, continuum +1 more Apache Continuum and Archiva vulnerable to Cross-site Scripting CVE-2011-0533 Fix available 4.3 MediumFebruary 17, 2011
• apache archiva Apache Archiva does not require entry of the administrator's password at the time of modifying a user account CVE-2010-4408 Fix available 6.8 MediumDecember 6, 2010
• apache archiva, jesse mcconnell redback +1 more Cross-site request forgery (CSRF) vulnerability in Redback before 1.2.4, as used in Apache... CVE-2010-3449 Public exploit 6.8 MediumDecember 6, 2010