Lucene search
Veracode Vulnerability DatabaseVERACODE:13513HistoryMar 25, 2019 - 8:40 a.m.
Remote Code Execution (RCE)
2019-03-2508:40:41
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
5
0.032 Low
EPSS
Percentile
91.2%
Sonatype Nexus is vulnerable to remote code execution. A lack of validation allows attackers to execute arbitrary code through the creation and deserialization of arbitrary object types.
| CPE | Name | Operator | Version |
|---|---|---|---|
| nexus-core | le | 2.7.0-06 |
References
www.sonatype.org/advisories/archive/2014-01-13-Nexus
sonatype.zendesk.com/entries/37551958-Configuring-Xstream-Whitelist
support.sonatype.com/entries/37828023-Nexus-Security-Vulnerability
support.sonatype.com/hc/en-us/articles/213464858-Configuring-XStream-Whitelist
support.sonatype.com/hc/en-us/articles/213465938-CVE-2014-0792-Nexus-Security-Advisory-xstream
Related
prion
prion
Code injection
2014-01-17 20:55:00
cve
cve
CVE-2014-0792
2014-01-17 20:55:04
ubuntucve
ubuntucve
CVE-2014-0792
2014-01-17 00:00:00
cvelist
cvelist
CVE-2014-0792
2014-01-17 16:00:00
nvd
nvd
CVE-2014-0792
2014-01-17 20:55:04