Login Request a demo
SO
Vendor
Sonatype
4 products with CVEs on record
82
CVEs
3
On KEV
4
New 30D
Products
NR
Nexus Repository Manager
Sonatype
9.8
72 CVEs1 on KEV4 new
NE
Nexus
Sonatype
8.8
8 CVEs1 on KEV0 new
NR
Nexus Repository
Sonatype
8.8
1 CVEs1 on KEV0 new
NI
Nexus IQ Server
Sonatype
7.2
1 CVEs0 on KEV0 new
Recent CVEs
CVEProductCVSSEPSSPublishedSummary
CVE-2026-97712
NR
Nexus Repository 3
Sonatype
8.7
0%
Oct 15Nexus Repository 3 - Privilege Escalation via Role Management
CVE-2026-97667
NR
Nexus Repository 3
Sonatype
5.1
0%
Oct 15Nexus Repository 3 - Stored Cross-Site Scripting in Browse UI
CVE-2026-97666
NR
Nexus Repository 3
Sonatype
6.9
1%
Oct 15Nexus Repository 3 - Unsafe Reflection in ExtDirect Repository Endpoint
CVE-2026-97665
NR
Nexus Repository 3
Sonatype
7.1
0%
Oct 15Nexus Repository 3 - Missing Authorization on NuGet Symbol Package Upload
CVE-2026-77121
NR
Nexus Repository 3
Sonatype
6.5
0%
Sep 2Nexus Repository 3 - Denial of Service via Unbounded Maven POM Metadata Fields
CVE-2026-77122
NR
Nexus Repository 3
Sonatype
4.3
0%
Sep 2Nexus Repository 3 - Incorrect Authorization Allows Disclosure of Member Repository Metadata via Group Repository Permissions
CVE-2026-77123
NR
Nexus Repository 3
Sonatype
6.5
0%
Sep 2Nexus Repository 3 - Webhook Secret Disclosure via Capability Read API
CVE-2026-77124
NR
Nexus Repository 3
Sonatype
7.2
1%
Sep 2Nexus Repository 3 - Script Execution Disable Setting Not Enforced
CVE-2026-77125
NR
Nexus Repository 3
Sonatype
7.1
0%
Sep 2Nexus Repository 3 - Incorrect Authorization on Blobstore Group Endpoints
CVE-2026-14644
NR
Nexus Repository 3
Sonatype
7.2
1%
Aug 7Nexus Repository 3 - Privilege Escalation
CVE-2026-17593
NR
Nexus Repository
Sonatype
7.2
1%
Aug 7Nexus Repository - Arbitrary Class Instantiation via Unsafe Realm Configuration
CVE-2026-17594
NR
Nexus Repository 3
Sonatype
4.9
1%
Aug 7Nexus Repository 3 - Authorization Bypass in Repository Creation
CVE-2026-17595
NR
Nexus Repository 3
Sonatype
2.7
0%
Aug 7Nexus Repository 3 - JEXL Content Selector Sandbox Property-Read Bypass
CVE-2026-17596
NR
Nexus Repository 3
Sonatype
6.1
0%
Aug 7Nexus Repository 3 - Stored Cross-Site Scripting (XSS) via Blob Store Name
CVE-2026-17598
NR
Nexus Repository 3
Sonatype
4.9
0%
Aug 7Nexus Repository 3 - Improper Input Validation in Scheduled Task Configuration
CVE-2026-17599
NR
Nexus Repository 3
Sonatype
7.2
0%
Aug 7Nexus Repository 3 - Unverified Onboarding State on change-admin-password Endpoint
CVE-2026-17600
NR
Nexus Repository 3
Sonatype
8.8
0%
Aug 7Nexus Repository 3 - Session Not Invalidated on User Account Deletion or Deactivation
CVE-2026-17601
NR
Nexus Repository 3
Sonatype
7.2
1%
Aug 7Nexus Repository 3 - Wildcard Privilege Update Self-Escalation to Administrator
CVE-2026-17603
NR
Nexus Repository 3
Sonatype
8.8
1%
Aug 7Nexus Repository 3 - HikariCP connectionInitSql Injection RCE via DataStore Configuration API
CVE-2026-17597
NR
Nexus Repository 3
Sonatype
2.7
0%
Aug 7Nexus Repository 3 - Server-Side Request Forgery via Email Configuration Verification
CVE-2026-14646
NR
Nexus Repository 3
Sonatype
7.7
0%
Jul 14Nexus Repository 3 - Server-Side Request Forgery (SSRF) via HTTP Redirect
CVE-2026-14645
NR
Nexus Repository 3
Sonatype
5.5
0%
Jul 14Nexus Repository 3 - Server-Side Request Forgery (SSRF) via Webhook: Global Capability
CVE-2026-14504
NR
Nexus Repository 3
Sonatype
6.5
0%
Jul 14Nexus Repository 3 - Authorization Bypass in Component Upload API
CVE-2026-7494
NR
Nexus Repository
Sonatype
5.0
0%
Jul 14Nexus Repository - SSRF in SSL Certificate Retrieval
CVE-2026-11403
NR
Nexus Repository Manager
Sonatype
7.5
1%
Jul 14Nexus Repository Manager - Insufficient Entropy in Format-Specific API Key Generation
CVE-2026-10741
NR
Nexus Repository Manager
Sonatype
4.9
0%
Jun 17Nexus Repository Manager - Incorrect Authorization allows credential disclosure via proxy repository configuration
CVE-2026-10748
NR
Nexus Repository
Sonatype
7.2
0%
Jun 16Nexus Repository 3 - Remote Code Execution via License Deserialization
CVE-2026-3329
NR
Nexus Repository Manager
Sonatype
7.5
0%
Jun 11Nexus Repository Manager - Improper Restriction of Excessive Authentication Attempts
CVE-2026-7308
NR
Nexus Repository
Sonatype
5.4
0%
May 11Nexus Repository 3 - Stored Cross-Site Scripting (XSS) via HTML Browse Page
CVE-2026-3048
NR
Nexus Repository
Sonatype
3.8
0%
May 11Nexus Repository 3 - Improper LDAP Referral Handling
CVE-2026-5189
NR
Nexus Repository
Sonatype
9.8
1%
Apr 15Nexus Repository 3 - Hardcoded Credential in Internal Database Component
CVE-2026-3199
NR
Nexus Repository
Sonatype
8.8
1%
Apr 8Nexus Repository 3 - Authenticated Remote Code Execution via Task Property Injection
CVE-2026-3438
NR
Nexus Repository
Sonatype
6.1
0%
Apr 8Nexus Repository 3 - Reflected Cross-Site Scripting (XSS) in ?describe Pages
CVE-2026-0600
NR
Nexus Repository
Sonatype
6.2
0%
Jan 14Nexus Repository 3 - Server-Side Request Forgery in Proxy Repository Configuration
CVE-2026-0601
NR
Nexus Repository
Sonatype
5.1
0%
Jan 14Nexus Repository 3 - Cross-Site Scripting
CVE-2025-13488
NR
Nexus Repository
Sonatype
5.1
0%
Dec 4Nexus Repository 3 - Stored Cross-Site Scripting (XSS)
CVE-2025-9868
NR
Nexus Repository
Sonatype
8.7
0%
Oct 8Nexus Repository 2 - SSRF Vulnerability in Remote Browser Plugin
CVE-2024-5764
NR
Nexus Repository Manager
Sonatype
6.5
0%
Oct 23Use of Hard-coded Credentials vulnerability in Sonatype Nexus Repository has been discovered in the code responsible for encrypting any secrets stored in the Nexus Repository…
CVE-2022-27907
NR
Nexus Repository Manager
Sonatype
4.3
1%
Mar 30Sonatype Nexus Repository Manager 3.x before 3.38.0 allows SSRF
CVE-2021-43961
NR
Nexus Repository Manager
Sonatype
4.3
1%
Mar 17Sonatype Nexus Repository Manager 3.36.0 allows HTML Injection
CVE-2021-43293
NR
Nexus Repository Manager
Sonatype
4.3
1%
Nov 4Sonatype Nexus Repository Manager 3.x before 3.36.0 allows a remote authenticated attacker to potentially perform network enumeration via Server Side Request Forgery (SSRF)
CVE-2021-42568
NR
Nexus Repository Manager
Sonatype
4.3
0%
Nov 2Sonatype Nexus Repository Manager 3.x through 3.35.0 allows attackers to access the SSL Certificates Loading function via a low-privileged account
CVE-2021-40143
NR
Nexus Repository Manager
Sonatype
8.2
2%
Sep 7Sonatype Nexus Repository 3.x through 3.33.1-01 is vulnerable to an HTTP header injection
CVE-2021-37152
NR
Nexus Repository Manager
Sonatype
5.4
24%
Aug 10Multiple XSS issues exist in Sonatype Nexus Repository Manager 3 before 3.33.0
CVE-2021-34553
NR
Nexus Repository Manager
Sonatype
4.3
4%
Jun 18Sonatype Nexus Repository Manager 3.x before 3.31.0 allows a remote authenticated attacker to get a list of blob files and read the content of a blob file (via a GET request)…
CVE-2021-29159
NR
Nexus Repository Manager
Sonatype
6.1
1%
Apr 28A cross-site scripting (XSS) vulnerability has been discovered in Nexus Repository Manager 3.x before 3.30.1
CVE-2021-30635
NR
Nexus Repository Manager
Sonatype
5.3
2%
Apr 27Sonatype Nexus Repository Manager 3.x before 3.30.1 allows a remote attacker to get a list of files and directories that exist in a UI-related folder via directory traversal (no…
CVE-2021-29158
NR
Nexus Repository Manager
Sonatype
4.9
1%
Apr 23Sonatype Nexus Repository Manager 3 Pro up to and including 3.30.0 has Incorrect Access Control
CVE-2020-29436
NR
Nexus Repository Manager
Sonatype
6.5
2%
Dec 17Sonatype Nexus Repository Manager 3.x before 3.29.0 allows a user with admin privileges to configure the system to gain access to content outside of NXRM via an XXE vulnerability
CVE-2020-15012
NR
Nexus Repository Manager
Sonatype
8.6
3%
Oct 12A Directory Traversal issue was discovered in Sonatype Nexus Repository Manager 2.x before 2.14.19
CVE-2020-24622
NE
Nexus
Sonatype
4.9
1%
Aug 25In Sonatype Nexus Repository 3.26.1, an S3 secret key can be exposed by an admin user
CVE-2020-15868
NR
Nexus Repository Manager
Sonatype
7.5
1%
Aug 12Sonatype Nexus Repository Manager OSS/Pro before 3.26.0 has Incorrect Access Control
CVE-2020-15871
NR
Nexus Repository Manager
Sonatype
8.8
2%
Jul 31Sonatype Nexus Repository Manager OSS/Pro version before 3.25.1 allows Remote Code Execution
CVE-2020-15870
NR
Nexus Repository Manager
Sonatype
6.1
1%
Jul 31Sonatype Nexus Repository Manager OSS/Pro versions before 3.25.1 allow XSS (Issue 2 of 2)
CVE-2020-15869
NR
Nexus Repository Manager
Sonatype
5.4
1%
Jul 31Sonatype Nexus Repository Manager OSS/Pro versions before 3.25.1 allow XSS (issue 1 of 2)
CVE-2020-11415
NR
Nexus Repository Manager
Sonatype
4.9
1%
Apr 27An issue was discovered in Sonatype Nexus Repository Manager 2.x before 2.14.17 and 3.x before 3.22.1
CVE-2020-11753
NR
Nexus Repository Manager
Sonatype
8.8
2%
Apr 20An issue was discovered in Sonatype Nexus Repository Manager in versions 3.21.1 and 3.22.0
CVE-2020-11444
NE
Nexus
Sonatype
8.8
9%
Apr 2Sonatype Nexus Repository Manager 3.x up to and including 3.21.2 has Incorrect Access Control
CVE-2020-10204
NE
Nexus
Sonatype
7.2
38%
Apr 1Sonatype Nexus Repository before 3.21.2 allows Remote Code Execution
CVE-2020-10203
NE
Nexus
Sonatype
4.8
1%
Apr 1Sonatype Nexus Repository before 3.21.2 allows XSS