sonarsource Summary

Latest vulnerabilities published by sonarsource

JSON RSS CSV 🔔 Create Alert Trigger

26 September 2025

Command Injection Vulnerability in SonarQube Server and Cloud by SonarSource
CVE-2025-59844
SonarsourceSonarqube-scan-action7.7HIGH

2 September 2025

Command Injection Vulnerability in SonarQube Server and Cloud by SonarSource
CVE-2025-58178
SonarsourceSonarqube-scan-action7.8HIGH

4 October 2024

SonarQube Configuration Exfiltration Vulnerability
CVE-2024-47910
SonarSource
Blind SQL Injection Vulnerability in SonarQube 10.4-10.5 Before 10.6
CVE-2024-47911
SonarSource

16 December 2020

Root User Access Vulnerability in SonarQube Docker Images by SonarSource
CVE-2020-35193
SonarsourceSonarqube Docker Image9.8CRITICAL

2 November 2020

Authentication Bypass in SonarQube by SonarScanner
CVE-2020-28002
SonarsourceSonarqube5.3MEDIUM

28 October 2020

Cleartext Credential Exposure in SonarQube by SonarSource
CVE-2020-27986
SonarsourceSonarqubeEPSS 91%7.5HIGH

14 October 2019

Cross-Site Scripting Vulnerability in SonarQube by SonarSource
CVE-2019-17579
SonarsourceSonarqube6.1MEDIUM

9 January 2019

Insufficiently Protected Credentials in Jenkins SonarQube Scanner Plugin
CVE-2018-1000425
SonarsourceSonarqube Scanner7.8HIGH

14 December 2018

Information Disclosure in SonarQube Before Version 7.4 by SonarSource
CVE-2018-19413
SonarsourceSonarqube4.3MEDIUM

13 December 2013

Sensitive Information Exposure in Jenkins Plugin for SonarQube
CVE-2013-5676
SonarsourceJenkins Plugin