Login Request a demo
AR
Product
Archiva
by Apache · last CVE Mar 1, 2024
On CISA KEVExploited in the wild
20
CVEs
1
On KEV
9.8
Max CVSS
0
New 30D
Vulnerabilities20In the news0Timeline
Severity mix
Critical 1High 5Medium 8Low 0
Severity
All severities20Critical1High5Medium8Low0
Exploitation
On CISA KEV1Exploited in the wild1
Watch

Add Archiva to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2016-4469
8.8
8%
Jul 28
Multiple cross-site request forgery (CSRF) vulnerabilities in Apache Archiva 1.3.9 and earlier allow remote attackers to hijack the authentication of administrators for requests…
Affected: through 1.3.9
CVE-2017-5657
8.0
1%
May 22
Several REST service endpoints of Apache Archiva are not protected against Cross Site Request Forgery (CSRF) attacks
Affected: through 2.2.1
CVE-2024-27139
7.5
1%
Mar 1
** UNSUPPORTED WHEN ASSIGNED ** Incorrect Authorization vulnerability in Apache Archiva: a vulnerability in Apache Archiva allows an unauthenticated attacker to modify account…
Affected: 2.0.0 and later
CVE-2024-27138
7.5
1%
Mar 1
** UNSUPPORTED WHEN ASSIGNED ** Incorrect Authorization vulnerability in Apache Archiva
Affected: 2.0.0 and later
CVE-2022-40308
7.5
1%
Nov 15
If anonymous read enabled, it's possible to read the database file directly without logging in
Affected: before 2.2.9
Showing 5