VULNERABILITY INTELLIGENCE

CVE-2014-0792

CVSS score7.5 HIGH
EPSS probability3.05%
CISA KEVNot currently listed
Published2014-01-17
Last modified2026-06-17
CVSS vectorAV:N/AC:L/Au:N/C:P/I:P/A:P

Description

Sonatype Nexus 1.x and 2.x before 2.7.1 allows remote attackers to create arbitrary objects and execute arbitrary code via unspecified vectors related to unmarshalling of unintended Object types.

Weakness classification

  • CWE-94: Improper Control of Generation of Code ('Code Injection')

Primary references