Skip to main content

Security updates: eMudhra certificate incident and PHP2Shell: Sonatype is aware of the eMudhra certificate incident and the PHP2Shell vulnerabilities. We are updating our products to address the eMudhra issue and have confirmed that Sonatype products are not impacted by PHP2Shell. Read Sonatype's assessment and guidance

Lifecycle Vulnerability Lookup returns an error 404 Not Found for certain CVEs whereas others return the expected details

Updated

Problem:

When trying to use the Vulnerability Lookup option in Lifecycle  to lookup a CVE, some will return 'Vulnerability CVE-XXXX-XXXXX Not Found', whilst others will return the expected details about the security vulnerability.

Versions affected:

Nexus IQ Versions up to and including Nexus IQ 192

Sample list of affected CVEs:

CVE-2020-16165

CVE-2022-27360

CVE-2023-47174

CVE-2022-4963

CVE-2025-3957

CVE-2016-4437

Reason for this behavior:

The security vulnerabilities listed are "Public Research" which are not supported on IQ Server versions older than 193.

How to resolve:

Upgrade to IQ Server 193 or later

 

 

 

 

 

 

Related articles