CVE-2019-15588CWE-77

CVE-2019-15588: vulnerability in Nexus Repository Manager

Published · Updated

Follow this CVE+ Monitor Nexus Repository Manager

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

3Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackepss 5.6%
There is an OS Command Injection in Nexus Repository Manager <= 2.14.14 (bypass CVE-2019-5475) that could allow an attacker a Remote Code Execution (RCE). All instances using CommandLineExecutor.java with user-supplied data is vulnerable, such as the Yum Configuration Capability.
Affected products
n/a · Nexus Repository Manager