Read the docs

SonarSource

Records12All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical1CVSS 9.0–10.0
CVSS high5CVSS 7.0–8.9

Exploited now

SonarSource records in CISA KEV

No SonarSource vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Sonarqube 6 records MEDIUM Jenkins Plugin 1 record LOW Sonarqube Docker Image 1 record MEDIUM Sonarqube Scanner 1 record LOW

Records

6 records in Sonarqube · all components

TI-2024-32164 CVE-2024-47911 · GHSA-86v7-vj99-fqvm

In SonarSource SonarQube 10.4 through 10.5 before 10.6, a vulnerability was discovered in…

Priority LOW 34

In SonarSource SonarQube 10.4 through 10.5 before 10.6, a vulnerability was discovered in the authorizations/group-memberships API endpoint that allows SonarQube users with the administrator role to inject blind SQL comm…

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.00451 Published 2024-10-04 No fix listed CWE-89
TI-2024-25703 CVE-2024-38460 · GHSA-hw2c-8xgw-mf57

In SonarQube before 10.4 and 9.9.4 LTA, encrypted values generated using the Settings…

Priority LOW 29

In SonarQube before 10.4 and 9.9.4 LTA, encrypted values generated using the Settings Encryption feature are potentially exposed in cleartext as part of the URL parameters in the logs (such as SonarQube Access Logs, Prox…

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00331 Published 2024-06-16 Fixed in 9.9.4 CWE-532
Open these records in search →