Apache Continuum vulnerabilities

2 CVEs affecting Apache Continuum, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2016-15057, published 2026-01-26.

More from Apache.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2011-0533, published 2011-02-17. Medium severity, CVSS 4.3. EPSS: 4.2% chance of exploitation in the next 30 days. Cross-site scripting (XSS) vulnerability in Apache Continuum 1.1 through 1.2.3.1, 1.3.6, and 1.4.0 Beta; and Archiva 1.3.0 through 1.3.3 and 1.0 through 1.22 allows remote attackers to inject…
• CVE-2016-15057, published 2026-01-26. Critical severity, CVSS 9.9. EPSS: 4.1% chance of exploitation in the next 30 days. ** UNSUPPORTED WHEN ASSIGNED ** Improper Neutralization of Special Elements used in a Command ('Command Injection') vulnerability in Apache Continuum. This issue affects Apache Continuum: all…