Are there public exploits for sonatype org.sonatype.nexus:nexus-extdirect vulnerabilities?

Yes — 1 of sonatype org.sonatype.nexus:nexus-extdirect's CVEs have a known public exploit.

Which versions of sonatype org.sonatype.nexus:nexus-extdirect are affected?

2 distinct sonatype org.sonatype.nexus:nexus-extdirect versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version.

What are the most common weakness types in sonatype org.sonatype.nexus:nexus-extdirect CVEs?

sonatype org.sonatype.nexus:nexus-extdirect's CVEs most often map to these CWE weakness types: CWE-917 (Improper Neutralization of Special Elements used in an Expression Language Statement ('Expression Language Injection')).

What is the average severity of sonatype org.sonatype.nexus:nexus-extdirect CVEs?

The average CVSS base score across sonatype org.sonatype.nexus:nexus-extdirect's scored CVEs is 8.7.

sonatype org.sonatype.nexus:nexus-extdirect Vulnerabilities: CVEs, CISA KEV & Security Advisories

Name: sonatype org.sonatype.nexus:nexus-extdirect vulnerability dataset (CVEs)
Creator: RadicalNotion.AI
License: https://creativecommons.org/licenses/by-nc/4.0/

RadicalNotion.AI

sonatype org.sonatype.nexus:nexus-extdirect Vulnerabilities: CVEs, CISA KEV & Security Advisories

Overview

sonatype org.sonatype.nexus:nexus-extdirect has 1 published CVE records since 2020, of which 1 are in CISA's Known Exploited Vulnerabilities catalog and 1 have a known public exploit. The average CVSS base score across scored CVEs is 8.7.

Severity and exploitation

How the CVSS severity of sonatype org.sonatype.nexus:nexus-extdirect's CVEs breaks down, plus how many are exploited in the wild or have public exploit code.

Critical0

High1

Medium0

Low0

In CISA’s Known Exploited Vulnerabilities catalog

One of sonatype org.sonatype.nexus:nexus-extdirect's CVEs is confirmed exploited in the wild.

Public exploits

One of sonatype org.sonatype.nexus:nexus-extdirect's CVEs has a known public exploit available.

Affected versions and CVEs

Browse every sonatype org.sonatype.nexus:nexus-extdirect version named in a CVE, then pick one to see only the CVEs that affect it.

Version ranges

< 3.21.21 CVE

Fixed in

3.21.21 CVE

Find a version

1 CVE

Sort

Nexus Repository Manager 3 - Remote Code Execution
CVE-2020-10199
CISA KEV
Public exploit
Patch
CWE-917
Added to CISA KEV 2021-11-03
High · CVSS 8.7
EPSS 99.1% (100th pct)2020-04-01

Common weakness types

The CWE weakness categories most often found in sonatype org.sonatype.nexus:nexus-extdirect CVEs. Follow any weakness for its full explanation.

CWE-917Improper Neutralization of Special Elements used in an Expression Language Statement ('Expression Language Injection')1 CVE

Other sonatype products

Browse vulnerabilities for other products by sonatype.

nexus repository manager64 CVEs nexus-public61 CVEs Nexus Repository 322 CVEs Nexus Repository17 CVEs nexus8 CVEs IQ Server1 CVEs nexus iq server1 CVEs Nexus Repository 2.x

Frequently asked questions

Common questions about sonatype org.sonatype.nexus:nexus-extdirect vulnerabilities.

How many CVEs does sonatype org.sonatype.nexus:nexus-extdirect have?: sonatype org.sonatype.nexus:nexus-extdirect has 1 published CVE records since 2020.
How many sonatype org.sonatype.nexus:nexus-extdirect CVEs are in CISA KEV?: Yes — 1 of sonatype org.sonatype.nexus:nexus-extdirect's CVEs are listed in CISA's Known Exploited Vulnerabilities catalog, confirmed exploited in the wild and carrying a CISA remediation deadline.
Are there public exploits for sonatype org.sonatype.nexus:nexus-extdirect vulnerabilities?: Yes — 1 of sonatype org.sonatype.nexus:nexus-extdirect's CVEs have a known public exploit.
Which versions of sonatype org.sonatype.nexus:nexus-extdirect are affected?: 2 distinct sonatype org.sonatype.nexus:nexus-extdirect versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version.
What are the most common weakness types in sonatype org.sonatype.nexus:nexus-extdirect CVEs?: sonatype org.sonatype.nexus:nexus-extdirect's CVEs most often map to these CWE weakness types: CWE-917 (Improper Neutralization of Special Elements used in an Expression Language Statement ('Expression Language Injection')).
What is the average severity of sonatype org.sonatype.nexus:nexus-extdirect CVEs?: The average CVSS base score across sonatype org.sonatype.nexus:nexus-extdirect's scored CVEs is 8.7.

References

Vulnerability data is sourced from the CVE Program; severity, KEV, and exploit signals are aggregated by RadicalNotion.AI.

Track sonatype org.sonatype.nexus:nexus-extdirect vulnerabilities

Get an alert for each new sonatype org.sonatype.nexus:nexus-extdirect CVE, with AI-written analysis and remediation steps.

Create an account See pricing