NE
Product
Nexus
On CISA KEVExploited in the wild
8
CVEs
1
On KEV
8.8
Max CVSS
0
New 30D
Severity mix
Critical 0High 3Medium 2Low 0
Watch
Add Nexus to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2020-10199 In wildKEV | 8.8 | Apr 1 | Sonatype Nexus Repository Remote Code Execution Vulnerability Affected: before 3.21.2 |
| CVE-2020-11444 | 8.8 | Apr 2 | Sonatype Nexus Repository Manager 3.x up to and including 3.21.2 has Incorrect Access Control Affected: 3.0.0 through 3.21.2 |
| CVE-2020-10204 | 7.2 | Apr 1 | Sonatype Nexus Repository before 3.21.2 allows Remote Code Execution Affected: before 3.21.2 |
| CVE-2020-24622 | 4.9 | Aug 25 | In Sonatype Nexus Repository 3.26.1, an S3 secret key can be exposed by an admin user Affected: 3.0.0 before 3.27.0 |
| CVE-2020-10203 | 4.8 | Apr 1 | Sonatype Nexus Repository before 3.21.2 allows XSS Affected: before 3.21.2 |
| CVE-2014-9389 | – | Jan 5 | Directory traversal vulnerability in Sonatype Nexus OSS and Pro before 2.11.1-01 allows remote attackers to read or write to arbitrary files via unspecified vectors Affected: through 2.11.0; through 2.11.0 |
| CVE-2014-2034 | – | Apr 1 | Unspecified vulnerability in Sonatype Nexus OSS and Pro 2.4.0 through 2.7.1 allows attackers to create arbitrary user accounts via unknown vectors related to "an unauthenticated… Affected: 2.4.0; 2.4.0; 2.5.0; 2.5.0; 2.6.0; 2.6.0; +13 more |
| CVE-2014-0792 | – | Jan 17 | Sonatype Nexus 1.x and 2.x before 2.7.1 allows remote attackers to create arbitrary objects and execute arbitrary code via unspecified vectors related to unmarshalling of… Affected: 1.0; 2.0; 2.0.1; 2.0.2; 2.0.3; 2.0.4; +19 more |
Showing 8