[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fttTRmN-iEvp28z87nWOjyPNusXhtkQVQNgFZ5ww_0EU":3,"g5a-family:apache\u002Farchiva":231,"g5a-ex:apache\u002Farchiva@*":232},{"success":4,"data":5},true,{"product":6,"versions":101,"topVulnerabilitiesByEpss":141,"kevVulnerabilities":203,"seoMetadata":209,"meta":228},{"vendorName":7,"productName":8,"versionCount":9,"totalCves":10,"kevCount":11,"lastCveUpdate":12,"versions":13,"description":100},"apache","archiva",39,20,1,"2024-03-01",[14,18,21,23,25,27,29,31,33,35,37,40,43,45,48,50,52,55,57,60,62,64,66,68,70,72,74,76,78,80,82,84,86,88,90,92,94,96,98],{"version":15,"cve_count":16,"kev_count":16,"has_kev":17},"0.9",0,false,{"version":19,"cve_count":20,"kev_count":16,"has_kev":17},"1.0",5,{"version":22,"cve_count":20,"kev_count":16,"has_kev":17},"1.0.1",{"version":24,"cve_count":20,"kev_count":16,"has_kev":17},"1.0.2",{"version":26,"cve_count":20,"kev_count":16,"has_kev":17},"1.0.3",{"version":28,"cve_count":20,"kev_count":16,"has_kev":17},"1.1",{"version":30,"cve_count":20,"kev_count":16,"has_kev":17},"1.1.1",{"version":32,"cve_count":20,"kev_count":16,"has_kev":17},"1.1.2",{"version":34,"cve_count":20,"kev_count":16,"has_kev":17},"1.1.3",{"version":36,"cve_count":20,"kev_count":16,"has_kev":17},"1.1.4",{"version":38,"cve_count":39,"kev_count":11,"has_kev":4},"1.2",7,{"version":41,"cve_count":42,"kev_count":16,"has_kev":17},"1.2.1",6,{"version":44,"cve_count":39,"kev_count":11,"has_kev":4},"1.2.2",{"version":46,"cve_count":47,"kev_count":16,"has_kev":17},"1.2-m1",2,{"version":49,"cve_count":42,"kev_count":16,"has_kev":17},"1.3",{"version":51,"cve_count":42,"kev_count":16,"has_kev":17},"1.3.1",{"version":53,"cve_count":54,"kev_count":16,"has_kev":17},"1.3.2",4,{"version":56,"cve_count":54,"kev_count":16,"has_kev":17},"1.3.3",{"version":58,"cve_count":59,"kev_count":16,"has_kev":17},"1.3.4",3,{"version":61,"cve_count":11,"kev_count":16,"has_kev":17},"1.3.5",{"version":63,"cve_count":11,"kev_count":16,"has_kev":17},"1.3.6",{"version":65,"cve_count":16,"kev_count":16,"has_kev":17},"1.3.8",{"version":67,"cve_count":16,"kev_count":16,"has_kev":17},"1.3.9",{"version":69,"cve_count":16,"kev_count":16,"has_kev":17},"1.4",{"version":71,"cve_count":16,"kev_count":16,"has_kev":17},"2.0.0",{"version":73,"cve_count":16,"kev_count":16,"has_kev":17},"2.0.1",{"version":75,"cve_count":16,"kev_count":16,"has_kev":17},"2.1.0",{"version":77,"cve_count":16,"kev_count":16,"has_kev":17},"2.1.1",{"version":79,"cve_count":16,"kev_count":16,"has_kev":17},"2.2.0",{"version":81,"cve_count":16,"kev_count":16,"has_kev":17},"2.2.1",{"version":83,"cve_count":16,"kev_count":16,"has_kev":17},"2.2.2",{"version":85,"cve_count":16,"kev_count":16,"has_kev":17},"2.2.3",{"version":87,"cve_count":16,"kev_count":16,"has_kev":17},"2.2.4",{"version":89,"cve_count":16,"kev_count":16,"has_kev":17},"2.2.5",{"version":91,"cve_count":16,"kev_count":16,"has_kev":17},"2.2.6",{"version":93,"cve_count":16,"kev_count":16,"has_kev":17},"2.2.7",{"version":95,"cve_count":16,"kev_count":16,"has_kev":17},"2.2.8",{"version":97,"cve_count":16,"kev_count":16,"has_kev":17},"2.2.9",{"version":99,"cve_count":16,"kev_count":16,"has_kev":17},"3.1.3","Archiva by Apache is a technology product with 39 tracked versions and 20 known security vulnerabilities including 1 CISA Known Exploited Vulnerability. Get comprehensive security analysis, vulnerability tracking, and threat intelligence for this product.",[102,103,104,105,106,107,108,109,110,111,112,113,114,115,116,117,118,119,120,121,122,123,124,125,126,127,128,129,130,131,132,133,134,135,136,137,138,139,140],{"version":15,"cve_count":16,"kev_count":16,"has_kev":17},{"version":19,"cve_count":20,"kev_count":16,"has_kev":17},{"version":22,"cve_count":20,"kev_count":16,"has_kev":17},{"version":24,"cve_count":20,"kev_count":16,"has_kev":17},{"version":26,"cve_count":20,"kev_count":16,"has_kev":17},{"version":28,"cve_count":20,"kev_count":16,"has_kev":17},{"version":30,"cve_count":20,"kev_count":16,"has_kev":17},{"version":32,"cve_count":20,"kev_count":16,"has_kev":17},{"version":34,"cve_count":20,"kev_count":16,"has_kev":17},{"version":36,"cve_count":20,"kev_count":16,"has_kev":17},{"version":38,"cve_count":39,"kev_count":11,"has_kev":4},{"version":41,"cve_count":42,"kev_count":16,"has_kev":17},{"version":44,"cve_count":39,"kev_count":11,"has_kev":4},{"version":46,"cve_count":47,"kev_count":16,"has_kev":17},{"version":49,"cve_count":42,"kev_count":16,"has_kev":17},{"version":51,"cve_count":42,"kev_count":16,"has_kev":17},{"version":53,"cve_count":54,"kev_count":16,"has_kev":17},{"version":56,"cve_count":54,"kev_count":16,"has_kev":17},{"version":58,"cve_count":59,"kev_count":16,"has_kev":17},{"version":61,"cve_count":11,"kev_count":16,"has_kev":17},{"version":63,"cve_count":11,"kev_count":16,"has_kev":17},{"version":65,"cve_count":16,"kev_count":16,"has_kev":17},{"version":67,"cve_count":16,"kev_count":16,"has_kev":17},{"version":69,"cve_count":16,"kev_count":16,"has_kev":17},{"version":71,"cve_count":16,"kev_count":16,"has_kev":17},{"version":73,"cve_count":16,"kev_count":16,"has_kev":17},{"version":75,"cve_count":16,"kev_count":16,"has_kev":17},{"version":77,"cve_count":16,"kev_count":16,"has_kev":17},{"version":79,"cve_count":16,"kev_count":16,"has_kev":17},{"version":81,"cve_count":16,"kev_count":16,"has_kev":17},{"version":83,"cve_count":16,"kev_count":16,"has_kev":17},{"version":85,"cve_count":16,"kev_count":16,"has_kev":17},{"version":87,"cve_count":16,"kev_count":16,"has_kev":17},{"version":89,"cve_count":16,"kev_count":16,"has_kev":17},{"version":91,"cve_count":16,"kev_count":16,"has_kev":17},{"version":93,"cve_count":16,"kev_count":16,"has_kev":17},{"version":95,"cve_count":16,"kev_count":16,"has_kev":17},{"version":97,"cve_count":16,"kev_count":16,"has_kev":17},{"version":99,"cve_count":16,"kev_count":16,"has_kev":17},[142,150,157,165,172,177,183,187,193,198],{"cveId":143,"description":144,"publishedDate":145,"cvssScore":146,"cvssVersion":147,"severity":148,"isKev":4,"epssScore":149},"CVE-2013-2251","Apache Struts 2.0.0 through 2.3.15 allows remote attackers to execute arbitrary OGNL expressions via a parameter with a crafted (1) action:, (2) redirect:, or (3) redirectAction: prefix.","2013-07-20",9.8,"v3.1","Critical",0.99998,{"cveId":151,"description":152,"publishedDate":153,"cvssScore":154,"cvssVersion":147,"severity":155,"isKev":17,"epssScore":156},"CVE-2020-9495","Apache Archiva login service before 2.2.5 is vulnerable to LDAP injection. A attacker is able to retrieve user attribute data from the connected LDAP server by providing special values to the login form. With certain characters it is possible to modify the LDAP filter used to query the LDAP users. By measuring the response time for the login request, arbitrary attribute data can be retrieved from LDAP user objects.","2020-06-19",5.3,"Medium",0.08004,{"cveId":158,"description":159,"publishedDate":160,"cvssScore":161,"cvssVersion":162,"severity":163,"isKev":17,"epssScore":164},"CVE-2016-4469","Multiple cross-site request forgery (CSRF) vulnerabilities in Apache Archiva 1.3.9 and earlier allow remote attackers to hijack the authentication of administrators for requests that (1) add new repository proxy connectors via the token parameter to admin\u002FaddProxyConnector_commit.action, (2) new repositories via the token parameter to admin\u002FaddRepository_commit.action, (3) edit existing repositories via the token parameter to admin\u002FeditRepository_commit.action, (4) add legacy artifact paths via the token parameter to admin\u002FaddLegacyArtifactPath_commit.action, (5) change the organizational appearance via the token parameter to admin\u002FsaveAppearance.action, or (6) upload new artifacts via the token parameter to upload_submit.action.","2016-07-28",8.8,"v3.0","High",0.07863,{"cveId":166,"description":167,"publishedDate":168,"cvssScore":169,"cvssVersion":170,"severity":155,"isKev":17,"epssScore":171},"CVE-2011-1077","Multiple cross-site scripting (XSS) vulnerabilities in Apache Archiva 1.0 through 1.2.2, and 1.3.x before 1.3.5, allow remote attackers to inject arbitrary web script or HTML via unspecified vectors.","2011-06-02",4.3,"v2",0.06949,{"cveId":173,"description":174,"publishedDate":175,"cvssScore":169,"cvssVersion":170,"severity":155,"isKev":17,"epssScore":176},"CVE-2013-2187","Cross-site scripting (XSS) vulnerability in Apache Archiva 1.2 through 1.2.2 and 1.3 before 1.3.8 allows remote attackers to inject arbitrary web script or HTML via unspecified parameters, related to the home page.","2014-04-22",0.05484,{"cveId":178,"description":179,"publishedDate":180,"cvssScore":181,"cvssVersion":162,"severity":155,"isKev":17,"epssScore":182},"CVE-2019-0213","In Apache Archiva before 2.2.4, it may be possible to store malicious XSS code into central configuration entries, i.e. the logo URL. The vulnerability is considered as minor risk, as only users with admin role can change the configuration, or the communication between the browser and the Archiva server must be compromised.","2019-04-30",6.5,0.04933,{"cveId":184,"description":185,"publishedDate":180,"cvssScore":181,"cvssVersion":162,"severity":155,"isKev":17,"epssScore":186},"CVE-2019-0214","In Apache Archiva 2.0.0 - 2.2.3, it is possible to write files to the archiva server at arbitrary locations by using the artifact upload mechanism. Existing files can be overwritten, if the archiva run user has appropriate permission on the filesystem for the target file.",0.04872,{"cveId":188,"description":189,"publishedDate":190,"cvssScore":191,"cvssVersion":170,"severity":155,"isKev":17,"epssScore":192},"CVE-2010-3449","Cross-site request forgery (CSRF) vulnerability in Redback before 1.2.4, as used in Apache Archiva 1.0 through 1.0.3, 1.1 through 1.1.4, 1.2 through 1.2.2, and 1.3 through 1.3.1; and Apache Continuum 1.3.6, 1.4.0, and 1.1 through 1.2.3.1; allows remote attackers to hijack the authentication of administrators for requests that modify credentials.","2010-12-06",6.8,0.04837,{"cveId":194,"description":195,"publishedDate":160,"cvssScore":196,"cvssVersion":162,"severity":155,"isKev":17,"epssScore":197},"CVE-2016-5005","Cross-site scripting (XSS) vulnerability in Apache Archiva 1.3.9 and earlier allows remote authenticated administrators to inject arbitrary web script or HTML via the connector.sourceRepoId parameter to admin\u002FaddProxyConnector_commit.action.",4.8,0.04797,{"cveId":199,"description":200,"publishedDate":201,"cvssScore":169,"cvssVersion":170,"severity":155,"isKev":17,"epssScore":202},"CVE-2011-0533","Cross-site scripting (XSS) vulnerability in Apache Continuum 1.1 through 1.2.3.1, 1.3.6, and 1.4.0 Beta; and Archiva 1.3.0 through 1.3.3 and 1.0 through 1.22 allows remote attackers to inject arbitrary web script or HTML via a crafted parameter, related to the autoIncludeParameters setting for the extremecomponents table.","2011-02-17",0.04198,[204],{"cveId":143,"description":144,"publishedDate":145,"cvssScore":146,"severity":148,"isKev":4,"epssScore":149,"cisaVulnName":205,"cisaDateAdded":206,"cisaShortDescription":207,"cisaRequiredAction":208},"Apache Struts Improper Input Validation Vulnerability","2022-03-25","Apache Struts allows remote attackers to execute arbitrary Object-Graph Navigation Language (OGNL) expressions.","Apply updates per vendor instructions.",{"title":210,"metaDescription":211,"keywords":212,"structuredData":213},"Archiva by Apache - Security Vulnerabilities & Analysis | EdgeProtect","Comprehensive security analysis for Archiva by Apache covering 39 versions with 20 tracked vulnerabilities including 1 critical and 0 high-severity issues and 1 CISA KEV vulnerability. Real-time threat intelligence, CVE tracking, and security recommendations.","Archiva vulnerabilities, Archiva security, Archiva CVE, Apache Archiva, Archiva threat intelligence, Apache security, product security analysis, cybersecurity threats, vulnerability management, CVE tracking, Archiva KEV, Archiva exploited vulnerabilities",{"@context":214,"@type":215,"name":216,"description":211,"url":217,"manufacturer":218,"applicationCategory":222,"softwareVersion":223,"mainEntity":224},"https:\u002F\u002Fschema.org","SoftwareApplication","Archiva","https:\u002F\u002Fedgeprotect.io\u002Fvulnerabilities\u002Ftechnologies\u002Fvendors\u002Fapache\u002Farchiva",{"@type":219,"name":220,"url":221},"Organization","Apache","https:\u002F\u002Fedgeprotect.io\u002Fvendors\u002Fapache","Security Software","39 versions tracked",{"@type":225,"name":226,"description":227,"vulnerabilityCount":10,"dateModified":12},"SecurityVulnerability","Archiva Security Vulnerabilities","Security vulnerabilities affecting Archiva by Apache",{"totalVersions":9,"totalVulnerabilities":10,"kevVulnerabilities":11,"lastUpdated":12,"generatedAt":229,"apiVersion":230},"2026-10-28T14:37:28.907Z","3.0",[],{"rows":233,"total":11,"capped":17,"failed":16},[234],{"cveId":143,"name":205,"severity":148,"cvss":146,"added":206,"epss":149,"published":235,"ranges":236,"checked":4,"hits":238,"covers":17},"2013-07-20T03:37:30.737",[38,44,237],"1.3 to before 1.3.8",[]]