Skip to content
OpenAdvisories

Package · Maven

org.apache.continuum:continuum

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Feed

  • Critical 9.9
    CVE-2016-15057 Public exploit

    Apache Continuum: Command injection leading to RCE

    ** UNSUPPORTED WHEN ASSIGNED ** Improper Neutralization of Special Elements used in a Command ('Command Injection') vulnerability in Apache Continuum. This issue affects Apache Continuum: all versions. Attackers with access to the installations REST API can u…

    Apache Software Foundation Apache Continuum org.apache.continuum:continuum Maven
  • Medium —
    CVE-2011-0533

    Apache Continuum and Archiva vulnerable to Cross-site Scripting

    Cross-site scripting (XSS) vulnerability in Apache Continuum 1.1 through 1.2.3.1, 1.3.6, and 1.4.0 Beta; and Archiva 1.3.0 through 1.3.3 and 1.0 through 1.22 allows remote attackers to inject arbitrary web script or HTML via a crafted parameter, related to th…

    org.apache.archiva:archiva org.apache.continuum:continuum Maven