org.apache.continuum vulnerabilities

Products

• org.apache.continuum/continuum 2

Latest org.apache.continuum CVEs

Newest publication first

1. CVE-2016-15057 Apache Continuum vulnerable to Command Injection through Installations REST API

   Published 2026-01-26

   Critical·CVSS 9.9 EPSS 3.9% Framework module

   UNSUPPORTED WHEN ASSIGNED Improper Neutralization of Special Elements used in a Command ('Command Injection') vulnerability in Apache Continuum. This issue affects Apache Continuum: all versions. Attackers with access to the Installations REST API can use this to invoke arbitrary...

2. CVE-2011-0533 Apache Continuum and Archiva vulnerable to Cross-site Scripting

   Published 2011-02-17

   Medium·CVSS 4.3

   Cross-site scripting (XSS) vulnerability in Apache Continuum 1.1 through 1.2.3.1, 1.3.6, and 1.4.0 Beta; and Archiva 1.3.0 through 1.3.3 and 1.0 through 1.22 allows remote attackers to inject arbitrary web script or HTML via a crafted parameter, related to the autoIncludeParamete...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.