Brand
Sonatype: actively exploited vulnerabilities
2 vulnerabilities in Sonatype products (Nexus Repository) are in CISA’s catalog of exploited vulnerabilities. Last added: December 10, 2021.
-
0 vulnerabilities added in the last 12 months
-
2 exploited vulnerabilities in the catalog, in total
-
0 added in the last 30 days
By category
Add just one Sonatype category to your radar, or open its page.
- Development and CI/CD 2 vulnerabilities
A high count also reflects how widely a product is deployed and how much attackers care about it: it is not a security rating.
Affected products
- Nexus Repository2 vulnerabilities, Development and CI/CD
Name used by CISA: Sonatype. Product families: indicative classification by this site.
Patch first
In the order of the main list (Patch first): recent additions first, then the most severe. The number is the rank within this Sonatype list.
- Rank 1
Sonatype Nexus RepositoryCVE-2019-7238
Sonatype Nexus Repository Manager Incorrect Access Control Vulnerability
CVE from 2019, added in 2021
CVSS severity 9.8critical
Added Dec 10, 2021
- Rank 2
Sonatype Nexus RepositoryCVE-2020-10199
Sonatype Nexus Repository Remote Code Execution Vulnerability
CVSS severity 8.8high
Added Nov 3, 2021
Follow and verify
Indicative classification, based on the vendor and product names given by CISA. How products are classified.