CVE-2019-7238

Sonatype Nexus Repository Manager before 3.15.0 has Incorrect Access Control.

CVSS v3.1 NVD

9.8 CRITICALCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

CVSS v2.0 NVD

7.5 HIGHAV:N/AC:L/Au:N/C:P/I:P/A:P

EPSS

76.63% chance of exploitation in the next 30 days, 100th percentile

CISA KEV

added 2021-12-10

Nuclei

critical

Published

2019-03-21

Updated

2025-10-21

Proof-of-concept exploits (7)

• DannyRavi/nmap-scripts2★ · 2025-04-20
• jas502n/CVE-2019-723885★ · 2019-08-19
• magicming200/CVE-2019-7238_Nexus_RCE_Tool24★ · 2020-01-15
• mpgn/CVE-2019-7238154★ · 2019-02-25
• smallpiggy/CVE-2019-72381★ · 2021-05-20
• verctor/nexus_rce_CVE-2019-723839★ · 2019-07-28
• zhangchi991022/Comprehensive-experiment-of-infomation-security7★ · 2021-01-21

Nuclei templates (1)

• projectdiscovery/nuclei-templates/blob/main/http/cves/2019/CVE-2019-7238.yaml

Vulhub environments (1)

• vulhub/vulhub/tree/master/nexus/CVE-2019-7238

Exploit collections (2)

• nexus-cve-2019-7238.ymlchaitin/xray
• CVE-2019-7238.yamlzan8in/afrog

Security advisories

• https://support.sonatype.com/hc/en-us/articles/360017310793-CVE-2019-7238-Nexus-Repositor…

References

• CVE Record
• NVD entry

Related

• CVE-2020-10199
• CVE-2020-10204
• CVE-2022-22965
• CVE-2011-3389
• CVE-2012-4929
• CVE-2014-0160