Home / CVEs
Exploited vulnerabilities (CISA KEV)
CVEs with exploitation confirmed by CISA (Known Exploited Vulnerabilities), with required actions and deadlines.
CVE-2020-10199
High · 8.8
KEV Urgent · 76 Public exploit CWE-917 Apr 1, 2020
Sonatype Nexus Repository Remote Code Execution Vulnerability
Sonatype Nexus Repository before 3.21.2 allows JavaEL Injection (issue 1 of 2).
CVE-2019-7238
Critical · 9.8
KEV Urgent · 73 Public exploit Mar 21, 2019
Sonatype Nexus Repository Manager Incorrect Access Control Vulnerability
Sonatype Nexus Repository Manager before 3.15.0 has Incorrect Access Control.