Brand
Sonatype: actively exploited vulnerabilities
2 vulnerabilities in Sonatype products (Nexus Repository) are in CISA’s catalog of exploited vulnerabilities. Last added: December 10, 2021.
-
0 vulnerabilities added in the last 12 months
-
2 exploited vulnerabilities in the catalog, in total
-
0 added in the last 30 days
By category
Add just one Sonatype category to your radar, or open its page.
- Development and CI/CD 2 vulnerabilities
A high count also reflects how widely a product is deployed and how much attackers care about it: it is not a security rating.
Affected products
- Nexus Repository 2 vulnerabilities · Development and CI/CD
Name used by CISA: Sonatype. Product families: indicative classification by this site.
Patch first
In the order of the main list (Patch first): recent additions first, then the most severe. The number is the rank within this Sonatype list.
Rank 1Sonatype Nexus Repository
CVE-2019-7238CVE from 2019, added in 2021
Sonatype Nexus Repository Manager Incorrect Access Control Vulnerability
Added more than a year ago: ranked by severity.
- Added
- Dec 10, 2021
- CISA deadline
- 182 days
- CVSS severity
- 9.8 (critical)
Rank 2Sonatype Nexus Repository
CVE-2020-10199Sonatype Nexus Repository Remote Code Execution Vulnerability
Added more than a year ago: ranked by severity.
- Added
- Nov 3, 2021
- CISA deadline
- 181 days
- CVSS severity
- 8.8 (high)
Follow and verify
Indicative classification, based on the vendor and product names given by CISA. How products are classified.