CISA Known Exploited Vulnerabilities Directory

Explore every threat in the CISA Known Exploited Vulnerabilities (KEV) catalog, enhanced with plain-English executive analysis, AWS relevance, and technical remediation guidance.

Showing 1–2 of 2 records

CVE Vendor Product Added Due Status
CVE-2019-7238 — Sonatype Nexus Repository Manager Incorrect Access Control Vulnerability
Sonatype Nexus Repository Manager before 3.15.0 has an incorrect access control vulnerability. Exploitation allows for remote code execution.
Sonatype Nexus Repository Manager Dec 10, 2021 Jun 10, 2022
CVE-2020-10199 — Sonatype Nexus Repository Remote Code Execution Vulnerability
Sonatype Nexus Repository contains an unspecified vulnerability that allows for remote code execution.
Sonatype Nexus Repository Nov 3, 2021 May 3, 2022