CVE-2018-16621

High

Sonatype Nexus Repository Manager before 3.14 allows Java Expression Language Injection.

mitre·CWE-917·Published 2018-11-15

CVSS

7.2

EPSS

0.02

KEV

Exploits

cve.orgen

88 chars

Sonatype Nexus Repository Manager before 3.14 allows Java Expression Language Injection.

NVDen

88 chars

Sonatype Nexus Repository Manager before 3.14 allows Java Expression Language Injection.

NVDes

121 chars

Sonatype Nexus Repository Manager en versiones anteriores a la 3.14 permite la inyección de lenguaje de expresiones Java.

Version	Type	Source	Base	Exp	Impact	Vector
2.0	Primary	NVD	6.5	8.0	6.4	AV:N/AC:L/Au:S/C:P/I:P/A:P
3.1	Primary	NVD	7.2	1.2	5.9	CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H