Sonatype Vulnerabilities and Affected Products
Vulnerabilities associated with IQ Server.
Products
Clear product- Nexus Repository18 vulnerabilities
- Nexus Repository 313 vulnerabilities
- Nexus Repository Manager4 vulnerabilities
- IQ Server1 vulnerability
- nexus_repository_manager1 vulnerability
- org.sonatype.nexus.common.components:nexus-security1 vulnerability
- org.sonatype.nexus:nexus-security1 vulnerability
- org.sonatype.security:security-system1 vulnerability
| Vulnerability | Title and context | CVSS | EPSS | PoCs | Signals | STIX action |
|---|---|---|---|---|---|---|
CVE-2024-1142MEDIUM | Sonatype IQ Server - Path TraversalPath Traversal in Sonatype IQ Server from version 143 allows remote authenticated attackers to overwrite or delete files via a specially crafted request. Version 171 fixes this issue. CWE-22Mar 6, 2024 | CVSS5.4v3.1 | EPSS0.714% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |