ZeusQA
Start free

Known exploited vulnerabilities

Sonatype vulnerabilities attackers have used

Every Sonatype vulnerability in CISA's Known Exploited Vulnerabilities catalog, newest first, with the federal due date and whether it fed ransomware campaigns.

The short answer

CISA lists 2 Sonatype vulnerabilities as exploited in the wild, 0 of them added in the last 12 months. The most recent is CVE-2019-7238, added Dec 10, 2021. Nexus Repository has the most entries (1).

In KEV, all time
2
Added, last 12 months
0
Used in ransomware
0
New CVEs this week
0

By product

Nexus Repository (1), Nexus Repository Manager (1).

Every Sonatype entry in CISA KEV

  1. CVE-2019-7238

    Added · due

    Sonatype Nexus Repository Manager Incorrect Access Control Vulnerability

    Sonatype Nexus Repository Manager before 3.15.0 has an incorrect access control vulnerability. Exploitation allows for remote code execution.

  2. CVE-2020-10199

    Added · due

    Sonatype Nexus Repository Remote Code Execution Vulnerability

    Sonatype Nexus Repository contains an unspecified vulnerability that allows for remote code execution.

Related

Know the day a CVE lands in your code

Connect a GitHub repository and ZeusQA checks its dependencies daily, briefs each advisory and opens the fix. Three test runs free, no card.

Start freeSee how a run works