Vulnerabilities
Vulnerable Software

Vulnerability Details CVE-2014-0792

Sonatype Nexus 1.x and 2.x before 2.7.1 allows remote attackers to create arbitrary objects and execute arbitrary code via unspecified vectors related to unmarshalling of unintended Object types.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.021
EPSS Ranking 83.3%
CVSS Severity
CVSS v2 Score 7.5
Products affected by CVE-2014-0792
  • Sonatype » Nexus » Version: 1.0
    cpe:2.3:a:sonatype:nexus:1.0
  • Sonatype » Nexus » Version: 2.0
    cpe:2.3:a:sonatype:nexus:2.0
  • Sonatype » Nexus » Version: 2.0.1
    cpe:2.3:a:sonatype:nexus:2.0.1
  • Sonatype » Nexus » Version: 2.0.2
    cpe:2.3:a:sonatype:nexus:2.0.2
  • Sonatype » Nexus » Version: 2.0.3
    cpe:2.3:a:sonatype:nexus:2.0.3
  • Sonatype » Nexus » Version: 2.0.4
    cpe:2.3:a:sonatype:nexus:2.0.4
  • Sonatype » Nexus » Version: 2.0.5
    cpe:2.3:a:sonatype:nexus:2.0.5
  • Sonatype » Nexus » Version: 2.0.6
    cpe:2.3:a:sonatype:nexus:2.0.6
  • Sonatype » Nexus » Version: 2.1
    cpe:2.3:a:sonatype:nexus:2.1
  • Sonatype » Nexus » Version: 2.1.1
    cpe:2.3:a:sonatype:nexus:2.1.1
  • Sonatype » Nexus » Version: 2.2
    cpe:2.3:a:sonatype:nexus:2.2
  • Sonatype » Nexus » Version: 2.3.1
    cpe:2.3:a:sonatype:nexus:2.3.1
  • Sonatype » Nexus » Version: 2.4.0
    cpe:2.3:a:sonatype:nexus:2.4.0
  • Sonatype » Nexus » Version: 2.5.0
    cpe:2.3:a:sonatype:nexus:2.5.0
  • Sonatype » Nexus » Version: 2.5.1
    cpe:2.3:a:sonatype:nexus:2.5.1
  • Sonatype » Nexus » Version: 2.6.0
    cpe:2.3:a:sonatype:nexus:2.6.0
  • Sonatype » Nexus » Version: 2.6.1
    cpe:2.3:a:sonatype:nexus:2.6.1
  • Sonatype » Nexus » Version: 2.6.2
    cpe:2.3:a:sonatype:nexus:2.6.2
  • Sonatype » Nexus » Version: 2.6.3
    cpe:2.3:a:sonatype:nexus:2.6.3
  • Sonatype » Nexus » Version: 2.6.4
    cpe:2.3:a:sonatype:nexus:2.6.4
  • Sonatype » Nexus » Version: 2.7.0
    cpe:2.3:a:sonatype:nexus:2.7.0


Contact Us

Shodan ® - All rights reserved