Vulnerability Details CVE-2019-14469
In Nexus Repository Manager before 3.18.0, users with elevated privileges can create stored XSS.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.003
EPSS Ranking 53.1%
CVSS Severity
CVSS v3 Score 5.4
CVSS v2 Score 3.5
References
Products affected by CVE-2019-14469
-
cpe:2.3:a:sonatype:nexus_repository_manager:3.14.0
-
cpe:2.3:a:sonatype:nexus_repository_manager:3.14.0-04
-
cpe:2.3:a:sonatype:nexus_repository_manager:3.15.0
-
cpe:2.3:a:sonatype:nexus_repository_manager:3.15.0-01
-
cpe:2.3:a:sonatype:nexus_repository_manager:3.15.1
-
cpe:2.3:a:sonatype:nexus_repository_manager:3.15.1-01
-
cpe:2.3:a:sonatype:nexus_repository_manager:3.15.2
-
cpe:2.3:a:sonatype:nexus_repository_manager:3.15.2-01
-
cpe:2.3:a:sonatype:nexus_repository_manager:3.16.0
-
cpe:2.3:a:sonatype:nexus_repository_manager:3.16.0-01
-
cpe:2.3:a:sonatype:nexus_repository_manager:3.16.1
-
cpe:2.3:a:sonatype:nexus_repository_manager:3.16.1-02
-
cpe:2.3:a:sonatype:nexus_repository_manager:3.16.2
-
cpe:2.3:a:sonatype:nexus_repository_manager:3.16.2-01
-
cpe:2.3:a:sonatype:nexus_repository_manager:3.17.0