Vulnerabilities (CVE)

Filtered by vendor Sonatype Subscribe
Total 43 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2014-9389 1 Sonatype 1 Nexus 2015-01-06 7.5 HIGH N/A
Directory traversal vulnerability in Sonatype Nexus OSS and Pro before 2.11.1-01 allows remote attackers to read or write to arbitrary files via unspecified vectors.
CVE-2014-2034 1 Sonatype 1 Nexus 2014-04-01 7.5 HIGH N/A
Unspecified vulnerability in Sonatype Nexus OSS and Pro 2.4.0 through 2.7.1 allows attackers to create arbitrary user accounts via unknown vectors related to "an unauthenticated execution path."
CVE-2014-0792 1 Sonatype 1 Nexus 2014-01-21 7.5 HIGH N/A
Sonatype Nexus 1.x and 2.x before 2.7.1 allows remote attackers to create arbitrary objects and execute arbitrary code via unspecified vectors related to unmarshalling of unintended Object types.