Login Request a demo
AR
Product
Archiva
by Apache · last CVE Mar 1, 2024
On CISA KEVExploited in the wild
20
CVEs
1
On KEV
9.8
Max CVSS
0
New 30D
Vulnerabilities20In the news0Timeline
Severity mix
Critical 1High 5Medium 8Low 0
Severity
All severities20Critical1High5Medium8Low0
Exploitation
On CISA KEV1Exploited in the wild1
Watch

Add Archiva to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2022-29405
6.5
2%
May 25
In Apache Archiva, any registered user can reset password for any users
Affected: before 2.2.8
CVE-2019-0214
6.5
5%
Apr 30
In Apache Archiva 2.0.0 - 2.2.3, it is possible to write files to the archiva server at arbitrary locations by using the artifact upload mechanism
Affected: 1.2 through 1.3.9; 2.0.0 through 2.2.3
CVE-2019-0213
6.5
5%
Apr 30
In Apache Archiva before 2.2.4, it may be possible to store malicious XSS code into central configuration entries, i.e
Affected: before 2.2.4
CVE-2024-27140
5.4
1%
Mar 1
** UNSUPPORTED WHEN ASSIGNED ** Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Apache Archiva
Affected: 2.0.0 and later
CVE-2023-28158
5.4
1%
Mar 29
Privilege escalation via stored XSS using the file upload service to upload malicious content
Affected: 2.0 before 2.2.10
CVE-2020-9495
5.3
8%
Jun 19
Apache Archiva login service before 2.2.5 is vulnerable to LDAP injection
Affected: before 2.2.5
CVE-2016-5005
4.8
5%
Jul 28
Cross-site scripting (XSS) vulnerability in Apache Archiva 1.3.9 and earlier allows remote authenticated administrators to inject arbitrary web script or HTML via the…
Affected: through 1.3.9
CVE-2022-40309
4.3
1%
Nov 15
Users with write permissions to a repository can delete arbitrary directories
Affected: before 2.2.9
Showing 8