CVE-2020-10199 Scanner
Detects 'Remote Code Execution (RCE)' vulnerability in Sonatype Nexus Repository Manager 3 affects v. before 3.21.2.
Used 2.3k times · 3.4k assets checked · domain, ipv4, subdomain
🔴
CISA Known Exploited Vulnerability
This CVE is actively exploited in the wild. CISA mandates federal agencies to patch immediately.
CVE
CVE-2020-10199
8.8
CVSShigh
Exploitable remotely over the internet · low-privilege account sufficient.
Description
Sonatype Nexus Repository before 3.21.2 allows JavaEL Injection (issue 1 of 2).
Attack Vector
Network
Privileges Req.
Low
User Interaction
None
Updated Oct 23, 2026View on NVD →
S4E scanner
Monitor this CVE on your assets
S4E maps published CVEs to scanners and forecasts the next disclosure window for your stack.
Create a free account →