CVE-2019-7238

sonatype nexus repository manager

Published 21 Mar 2019 · updated 17 Jun 2026 · Analyzed

9.8 Critical · CVSS 3.1, NVD

Exploited in the wild

CISA added this to its Known Exploited Vulnerabilities catalog on 10 Dec 2021, with a remediation deadline of 10 Jun 2022 for US federal agencies.

Required action: Apply updates per vendor instructions.

Description

Sonatype Nexus Repository Manager before 3.15.0 has Incorrect Access Control.

References