{"id":"CVE-2019-7238","aliases":[],"url":"https://o3.security/vulnerability/CVE-2019-7238","summary":null,"details":"Sonatype Nexus Repository Manager before 3.15.0 has Incorrect Access Control.","published":"2019-03-21T17:29:01.180Z","modified":"2026-07-08T16:08:27.669466Z","cvss":{"score":9.8,"severity":"CRITICAL","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"},"epss":{"score":0.77146,"percentile":0.9952,"asOf":"2026-09-08"},"cisaKev":null,"exploitsKnown":12,"affectedPackages":[],"fix":null,"references":[{"type":"WEB","url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2019-7238"},{"type":"ADVISORY","url":"https://support.sonatype.com/hc/en-us/articles/360017310793-CVE-2019-7238-Nexus-Repository-Manager-3-Missing-Access-Controls-and-Remote-Code-Execution-February-5th-2019"}],"provenance":{"sources":["OSV.dev","FIRST.org (EPSS)"],"lastVerified":"2026-07-08T16:08:27.669466Z"}}