SonarSource SonarQube
productRUA product tracked in the threat graph; the vulnerabilities below are known to affect it.
0
KEV-listed
by severity
1critical6high3medium0low
updated 2026-10-27
01
vulnerabilities (12)
Related CVEs.
| ID | severity | exploitable |
|---|---|---|
| CVE-2022-45047US | critical9.8 | Exploit |
| CVE-2022-40152US | high7.5 | — |
| CVE-2021-37137US | high7.5 | — |
| CVE-2020-28491US | high7.5 | — |
| CVE-2021-43797US | medium6.5 | — |
| CVE-2022-24823US | medium5.5 | — |
| CVE-2023-33264US | medium4.3 | — |
| CVE-2023-33265US | high8.8OT elevated | — |
| CVE-2024-47910US | — | — |
| CVE-2024-47911US | high7.2 | — |
| CVE-2022-45868US | high7.8OT elevated | — |
| CVE-2025-62292US | — | — |
02
weaknesses (8)
The flaw types (CWEs) most of these CVEs share.
- CWE-200Exposure of Sensitive Information to an Unauthorized Actor2 CVEs
- CWE-121Stack-based Buffer Overflow1 CVEs
- CWE-150Improper Neutralization of Escape, Meta, or Control Sequences1 CVEs
- CWE-284Improper Access Control1 CVEs
- CWE-312Cleartext Storage of Sensitive Information1 CVEs
- CWE-378Creation of Temporary File With Insecure Permissions1 CVEs
- CWE-379Creation of Temporary File in Directory with Insecure Permissions1 CVEs
- CWE-400Uncontrolled Resource Consumption1 CVEs
03
sources (3)
Which sources assert this record, and when.
- RUBDU (FSTEC Data Security Threats Database)9 CVEs
- DECERT-Bund (BSI CSAF)3 CVEs
- EUEU Vulnerability Database (ENISA)1 CVEs
scry
Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.
Free scan