Skip to content

Product

org.apache.continuum/continuum vulnerabilities

2 published CVES affecting org.apache.continuum/continuum, from public sources (CVE.org, NVD, CISA KEV, FIRST EPSS, OSV).

Total
2
Critical
1
High
0
Medium
1
Low
0
Unscored
0
CISA KEV
0

Latest org.apache.continuum/continuum CVEs

Newest publication first

  1. CVE-2016-15057 Apache Continuum: Command injection leading to RCE

    Published
    CriticalCVSS 9.9 EPSS 3.9% Framework module

    ** UNSUPPORTED WHEN ASSIGNED ** Improper Neutralization of Special Elements used in a Command ('Command Injection') vulnerability in Apache Continuum. This issue affects Apache Continuum: all versions. Attackers with access to the installations REST API can use this to invoke arb...

  2. CVE-2011-0533 Apache Continuum and Archiva vulnerable to Cross-site Scripting

    Published
    MediumCVSS 4.3

    Cross-site scripting (XSS) vulnerability in Apache Continuum 1.1 through 1.2.3.1, 1.3.6, and 1.4.0 Beta; and Archiva 1.3.0 through 1.3.3 and 1.0 through 1.22 allows remote attackers to inject arbitrary web script or HTML via a crafted parameter, related to the autoIncludeParamete...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.