9 CVEs matched to Sonar by name in NVD, none on CISA's Known Exploited list.
Back to the Sonar profile · Alternatives to Sonar · CVE RSS feed
Likely-exploited estimates here rest on a median of 2 EPSS observations per CVE — too little history to read as a trend yet. It deepens daily as scores are collected.
The Jenkins Plugin for SonarQube 3.7 and earlier allows remote authenticated users to obtain sensitive information (cleartext passwords) by reading the value in…
In SonarQube 8.4.2.36762, an external attacker can achieve authentication bypass through SonarScanner. With an empty value for the -D sonar.login option, anonym…
Jenkins Sonar Gerrit Plugin stores credentials unencrypted in job config.xml files on the Jenkins master where they can be viewed by users with Extended Read pe…
This affects all versions of package sonar-wrapper. The injection point is located in lib/sonarRunner.js.
Jenkins Sonar Quality Gates Plugin 1.3.1 and earlier transmits configured credentials in plain text as part of its global Jenkins configuration form, potentiall…
| Year | Critical | High | Medium | Low | Unscored | Total |
|---|---|---|---|---|---|---|
| 2024 | 0 | 0 | 1 | 0 | 0 | 1 |
| 2023 | 0 | 0 | 1 | 0 | 0 | 1 |
| 2022 | 1 | 0 | 1 | 0 | 0 | 2 |
| 2020 | 0 | 0 | 2 | 0 | 0 | 2 |
| 2019 | 0 | 0 | 2 | 0 | 0 | 2 |
| 2013 | 0 | 0 | 1 | 0 | 0 | 1 |
EPSS is FIRST's estimate of the chance a CVE is exploited in the next 30 days. It measures likelihood, not impact.
| CVE | EPSS | Percentile |
|---|---|---|
| CVE-2013-5676 | 5.0% | 92% |
| CVE-2020-28443 | 1.3% | 71% |
| CVE-2020-28002 | 1.1% | 64% |
| CVE-2019-10467 | 0.9% | 58% |
| CVE-2020-2150 | 0.6% | 48% |
| CVE-2022-46688 | 0.5% | 38% |
| CVE-2019-12752 | 0.4% | 34% |
| CVE-2024-47161 | 0.3% | 22% |
| CVE-2023-24442 | 0.2% | 13% |
In JetBrains TeamCity before 2024.07.3 password could be exposed via Sonar runner REST API
Jenkins GitHub Pull Request Coverage Status Plugin 2.2.0 and earlier stores the GitHub Personal Access Token, Sonar access token and Sonar password unencrypted in its global configuration file on the …
A cross-site request forgery (CSRF) vulnerability in Jenkins Sonar Gerrit Plugin 377.v8f3808963dc5 and earlier allows attackers to have Jenkins connect to Gerrit servers (previously configured by Jenk…
This affects all versions of package sonar-wrapper. The injection point is located in lib/sonarRunner.js.
In SonarQube 8.4.2.36762, an external attacker can achieve authentication bypass through SonarScanner. With an empty value for the -D sonar.login option, anonymous authentication is forced. This allow…
Jenkins Sonar Quality Gates Plugin 1.3.1 and earlier transmits configured credentials in plain text as part of its global Jenkins configuration form, potentially resulting in their exposure.
The Symantec SONAR component, prior to 12.0.2, may be susceptible to a tamper protection bypass vulnerability which could potentially allow an attacker to circumvent the existing tamper protection in …
Jenkins Sonar Gerrit Plugin stores credentials unencrypted in job config.xml files on the Jenkins master where they can be viewed by users with Extended Read permission, or access to the master file s…
The Jenkins Plugin for SonarQube 3.7 and earlier allows remote authenticated users to obtain sensitive information (cleartext passwords) by reading the value in the sonar.sonarPassword parameter from …