How many CVEs does Apache Software Foundation archiva have?

Apache Software Foundation archiva has 20 published CVE records since 2010.

How many Apache Software Foundation archiva CVEs are in CISA KEV?

Yes — 1 of Apache Software Foundation archiva's CVEs are listed in CISA's Known Exploited Vulnerabilities catalog, confirmed exploited in the wild and carrying a CISA remediation deadline.

Are there public exploits for Apache Software Foundation archiva vulnerabilities?

Yes — 7 of Apache Software Foundation archiva's CVEs have a known public exploit.

Which versions of Apache Software Foundation archiva are affected?

55 distinct Apache Software Foundation archiva versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version.

What are the most common weakness types in Apache Software Foundation archiva CVEs?

Apache Software Foundation archiva's CVEs most often map to these CWE weakness types: CWE-79 (Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')), CWE-863 (Incorrect Authorization), CWE-74 (Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')).

How many critical Apache Software Foundation archiva vulnerabilities are there?

Apache Software Foundation archiva has 1 critical and 5 high-severity CVEs.

What is the average severity of Apache Software Foundation archiva CVEs?

The average CVSS base score across Apache Software Foundation archiva's scored CVEs is 6.5.

Apache Software Foundation archiva Vulnerabilities: CVEs, CISA KEV & Security Advisories

Affected versions and CVEs

Browse every Apache Software Foundation archiva version named in a CVE, then pick one to see only the CVEs that affect it.

Specific versions

archiva-2.1.06 CVEs
archiva-2.1.16 CVEs
archiva-2.2.06 CVEs
archiva-2.2.16 CVEs
archiva-2.2.25 CVEs
archiva-2.2.35 CVEs
archiva-2.2.44 CVEs
archiva-2.2.53 CVEs
archiva-2.2.63 CVEs
archiva-2.2.73 CVEs
archiva-1.3.82 CVEs
archiva-1.3.92 CVEs
archiva-2.2.82 CVEs

Version ranges

1.2 <= v <= 1.27 CVEs
1.2.2 <= v <= 1.2.27 CVEs
1.2.1 <= v <= 1.2.16 CVEs
1.3 <= v <= 1.36 CVEs
1.3.1 <= v <= 1.3.16 CVEs
1.0 <= v <= 1.05 CVEs
1.0.1 <= v <= 1.0.15 CVEs
1.0.2 <= v <= 1.0.25 CVEs
1.0.3 <= v <= 1.0.35 CVEs
1.1 <= v <= 1.15 CVEs
1.1.1 <= v <= 1.1.15 CVEs
1.1.2 <= v <= 1.1.25 CVEs
1.1.3 <= v <= 1.1.35 CVEs

Fixed in

2.2.92 CVEs
f8e7fc29cff887f0ac58128e95b0fba5edc0035d2 CVEs
1.3.81 CVE
2.2.101 CVE
2.2.41 CVE
2.2.51 CVE
2.2.81 CVE
20e8cb3089fcc6fcfcc5d2dc82ea52786069bb671 CVE
4a4521e749a56adec068a4308a3f10336fc4319f1 CVE
6dfcd45e2d33ebc1f5cdb61595c4c5978cf014e01 CVE
9edb2486783c655d3d44d0bc8aa0463c43f967821 CVE

Find a version

20 CVEs

Sort

High vulnerability · 2024-03-01
CVE-2024-27138CWE-863
High · CVSS 8.7
EPSS 1.2% (65th pct)2024-03-01
High vulnerability · 2024-03-01
CVE-2024-27139CWE-863
High · CVSS 8.7
EPSS 1.3% (68th pct)2024-03-01
Apache Archiva: reflected XSS
CVE-2024-27140CWE-79
Medium · CVSS 5.4
EPSS 1.3% (68th pct)2024-03-01
Medium vulnerability · 2023-03-29
CVE-2023-28158
Patch
CWE-79
Medium · CVSS 6.5
EPSS 1.2% (64th pct)2023-03-29
Medium vulnerability · 2022-11-15
CVE-2022-40309
Patch
Medium · CVSS 4.3
EPSS 1.4% (69th pct)2022-11-15
High vulnerability · 2022-11-15
CVE-2022-40308
Patch
High · CVSS 7.5
EPSS 1.2% (65th pct)2022-11-15
Medium vulnerability · 2022-05-25
CVE-2022-29405
Patch
Medium · CVSS 6.5
EPSS 1.6% (74th pct)2022-05-25
Medium vulnerability · 2020-06-19
CVE-2020-9495
Public exploit
Patch
Medium · CVSS 5.3
EPSS 8.0% (94th pct)2020-06-19
Medium vulnerability · 2019-04-30
CVE-2019-0214
Public exploit
Patch
Medium · CVSS 6.5
EPSS 4.9% (91th pct)2019-04-30
Medium vulnerability · 2019-04-30
CVE-2019-0213
Public exploit
Patch
Medium · CVSS 6.5
EPSS 4.9% (91th pct)2019-04-30
High vulnerability · 2017-05-22
CVE-2017-5657
Patch
High · CVSS 8.0
EPSS 0.9% (55th pct)2017-05-22
Medium vulnerability · 2016-07-28
CVE-2016-5005
Public exploit
Patch
Medium · CVSS 4.8
EPSS 4.8% (91th pct)2016-07-28
High vulnerability · 2016-07-28
CVE-2016-4469
Public exploit
High · CVSS 8.8
EPSS 7.9% (94th pct)2016-07-28
Medium vulnerability · 2014-04-22
CVE-2013-2187
Medium · CVSS 4.3
EPSS 5.5% (92th pct)2014-04-22
Critical vulnerability · 2013-07-18
CVE-2013-2251
CISA KEV
Public exploit
Patch
CWE-74
Added to CISA KEV 2022-03-25
Critical · CVSS 9.3
EPSS 100.0% (100th pct)2013-07-18
Medium vulnerability · 2011-06-02
CVE-2011-1077
Medium · CVSS 4.3
EPSS 6.9% (93th pct)2011-06-02
Medium vulnerability · 2011-06-02
CVE-2011-1026
Medium · CVSS 6.8
EPSS 2.1% (80th pct)2011-06-02
Medium vulnerability · 2011-02-17
CVE-2011-0533
Patch
Medium · CVSS 4.3
EPSS 4.2% (90th pct)2011-02-17
Medium vulnerability · 2010-12-06
CVE-2010-4408
Patch
Medium · CVSS 6.9
EPSS 2.0% (79th pct)2010-12-06
Medium vulnerability · 2010-12-06
CVE-2010-3449
Public exploit
Medium · CVSS 6.8
EPSS 4.8% (91th pct)2010-12-06

Apache Software Foundation archiva Vulnerabilities

Overview

Severity and exploitation

Affected versions and CVEs

Specific versions

Version ranges

Fixed in

Common weakness types

Disclosure activity by year

Other Apache Software Foundation products

Frequently asked questions

References

Track Apache Software Foundation archiva vulnerabilities