netVigilance Vulnerability intelligence since 2004

Sonatype

2 Sonatype vulnerabilities with confirmed exploitation in the wild, as published by CISA; 2 past the federal remediation deadline. This is a static slice of the catalog — open the full catalog for search and filters.

Known exploited vulnerabilities for Sonatype
Vulnerability Status
overdue 1553d2022-06-10 CVE-2019-7238 Sonatype / Nexus Repository Manager Sonatype Nexus Repository Manager Incorrect Access Control Vulnerability 2021-12-10 9.8 past due
overdue 1591d2022-05-03 CVE-2020-10199 Sonatype / Nexus Repository Sonatype Nexus Repository Remote Code Execution Vulnerability 2021-11-03 8.8 past due