CVE Intelligence

Sonarqube vulnerabilities

🔔 Create alert RSS

Published CVEs affecting Sonarqube products: 1 record(s), with severity, exploitation and fixes.

SonarQube 1

Exploited only (KEV) →

CVE-2020-37020 High · 7.8 CWE-428 Jan 29, 2026
SonarQube 8.3.1 - Unquoted Service Path
SonarQube 8.3.1 contains an unquoted service path vulnerability that allows local attackers to gain SYSTEM privileges by exploiting the service executable path. Attackers can replace the wrapper.exe in the service path with a malicious executable to execute code with highest system privileges during service restart.