sonarsource Sonarqube Vulnerabilities

Sonarsource Sonarqube vulnerabilities.

JSON RSS CSV 🔔 Create Alert Trigger

10 October 2025

User Field Exposure Vulnerability in SonarQube by SonarSource
CVE-2025-62292
SonarsourceSonarqube4.3MEDIUM

26 September 2025

Command Injection Vulnerability in SonarQube Server and Cloud by SonarSource
CVE-2025-59844
SonarsourceSonarqube-scan-action7.7HIGH

2 September 2025

Command Injection Vulnerability in SonarQube Server and Cloud by SonarSource
CVE-2025-58178
SonarsourceSonarqube-scan-action7.8HIGH

16 December 2020

Root User Access Vulnerability in SonarQube Docker Images by SonarSource
CVE-2020-35193
SonarsourceSonarqube Docker Image9.8CRITICAL

2 November 2020

Authentication Bypass in SonarQube by SonarScanner
CVE-2020-28002
SonarsourceSonarqube5.3MEDIUM

28 October 2020

Cleartext Credential Exposure in SonarQube by SonarSource
CVE-2020-27986
SonarsourceSonarqubeEPSS 91%7.5HIGH

14 October 2019

Cross-Site Scripting Vulnerability in SonarQube by SonarSource
CVE-2019-17579
SonarsourceSonarqube6.1MEDIUM

9 January 2019

Insufficiently Protected Credentials in Jenkins SonarQube Scanner Plugin
CVE-2018-1000425
SonarsourceSonarqube Scanner7.8HIGH

14 December 2018

Information Disclosure in SonarQube Before Version 7.4 by SonarSource
CVE-2018-19413
SonarsourceSonarqube4.3MEDIUM