Sonarqube

Records1All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high1CVSS 7.0–8.9

Exploited now

Sonarqube records in CISA KEV

No Sonarqube vulnerabilities are listed in CISA KEV.

Records

1 record

TI-2020-19155 CVE-2020-37020 · GHSA-xfp6-9wpp-48px

SonarQube 8.3.1 - Unquoted Service Path

HIGH 72

SonarQube 8.3.1 contains an unquoted service path vulnerability that allows local attackers to gain SYSTEM privileges by exploiting the service executable path.

CVSS 4.0HIGH 8.5 Local Low privileges No interaction EPSS 0.00141 Published 2026-01-29 No fix listed CWE-428

Open these records in search →

Critical	0
High	1
Medium	0
Low	0
No CVSS	0