← All advisories

Medium severity5.4NVD Advisory· Published Aug 22, 2019· Updated Jun 17, 2026

CVE-2019-14469

CVE-2019-14469

Description

In Nexus Repository Manager before 3.18.0, users with elevated privileges can create stored XSS.

Affected products

3

Sonatype/Nexus Repository Manager OSS/Pro2 versions
cpe:2.3:a:sonatype:nexus_repository_manager:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:sonatype:nexus_repository_manager:*:*:*:*:*:*:*:*range: >=3.14.0,<=3.17.0
- (no CPE)range: <3.18.0
Nexus/Nexus Repository Managerdescription

Patches

Vulnerability mechanics

References

1

support.sonatype.com/hc/en-us/articles/360033999733-CVE-2019-14469-Nexus-Repository-Manager-3-Cross-Site-Scripting-XSS-2019-07-26nvdVendor Advisory

News mentions

0

No linked articles in our index yet.