Skip to contentSonatype Nexus Repository Manager vulnerabilities
- sonatype nexus repository 3, nexus repository manager +1 moreNexus Repository 3 - Group Repository Member Authorization BypassCVE-2026-1133685.3 Medium
- sonatype nexus repository 3, nexus repository manager +1 moreNexus Repository 3 - Disabled or Locked Single Sign-On Users Can Sign In AgainCVE-2026-1133739.1 Critical
- sonatype nexus repository 3, nexus repository manager +1 moreNexus Repository 3 - Denial of Service via Unbounded Maven POM Metadata FieldsCVE-2026-771215.3 Medium
- sonatype nexus repository 3, nexus repository manager +1 moreNexus Repository 3 - Incorrect Authorization on Blobstore Group EndpointsCVE-2026-771257.1 High
- sonatype nexus repository 3, nexus repository manager +1 moreNexus Repository 3 - Script Execution Disable Setting Not EnforcedCVE-2026-771247.5 High
- sonatype nexus repository 3, nexus repository manager +1 moreNexus Repository 3 - Webhook Secret Disclosure via Capability Read APICVE-2026-771236.0 Medium
- sonatype nexus repository 3, nexus repository manager +1 moreNexus Repository 3 - Incorrect Authorization Allows Disclosure of Member Repository Metadata via Group Repository PermissionsCVE-2026-771225.3 Medium
- sonatype nexus repository 3, nexus repository manager +1 moreNexus Repository 3 - JEXL Content Selector Sandbox Property-Read BypassCVE-2026-175955.3 Medium
- sonatype nexus repository 3, nexus repository manager +1 moreNexus Repository 3 - Authorization Bypass in Repository CreationCVE-2026-175948.2 High
- sonatype nexus repository, nexus repository manager +1 moreNexus Repository - Arbitrary Class Instantiation via Unsafe Realm ConfigurationCVE-2026-175937.2 High
- sonatype nexus repository 3, nexus repository manager +1 moreNexus Repository 3 - Privilege EscalationCVE-2026-146448.6 High
- sonatype nexus repository 3, nexus repository manager +1 moreNexus Repository 3 - Wildcard Privilege Update Self-Escalation to AdministratorCVE-2026-176018.9 High
- sonatype nexus repository 3, nexus repository manager +1 moreNexus Repository 3 - Session Not Invalidated on User Account Deletion or DeactivationCVE-2026-176008.7 High
- sonatype nexus repository 3, nexus repository manager +1 moreNexus Repository 3 - Unverified Onboarding State on change-admin-password EndpointCVE-2026-175996.9 Medium
- sonatype nexus repository 3, nexus repository manager +1 moreNexus Repository 3 - Improper Input Validation in Scheduled Task ConfigurationCVE-2026-175985.3 Medium
- sonatype nexus repository 3, nexus repository manager +1 moreNexus Repository 3 - Stored Cross-Site Scripting (XSS) via Blob Store NameCVE-2026-175966.3 Medium
- sonatype nexus repository 3, nexus repository manager +1 moreNexus Repository 3 - HikariCP connectionInitSql Injection RCE via DataStore Configuration APICVE-2026-176038.7 High
- sonatype nexus repository 3, nexus repository manager +1 moreNexus Repository 3 - Server-Side Request Forgery via Email Configuration VerificationCVE-2026-175975.1 Medium
- sonatype nexus repository 3, nexus repository manager +1 moreNexus Repository 3 - Server-Side Request Forgery (SSRF) via HTTP RedirectCVE-2026-146464.9 Medium
- sonatype nexus repository 3, nexus repository manager +1 moreNexus Repository 3 - Server-Side Request Forgery (SSRF) via Webhook: Global CapabilityCVE-2026-146455.1 Medium
- sonatype nexus repository 3, nexus repository manager +1 moreNexus Repository 3 - Authorization Bypass in Component Upload APICVE-2026-145048.2 High
- sonatype nexus repository, nexus repository manager +1 moreNexus Repository - SSRF in SSL Certificate RetrievalCVE-2026-74945.3 Medium
- sonatype nexus repository managerNexus Repository Manager - Insufficient Entropy in Format-Specific API Key GenerationCVE-2026-114038.7 High
- sonatype nexus repository managerNexus Repository Manager - Incorrect Authorization allows credential disclosure via proxy repository configurationCVE-2026-107415.9 Medium
- sonatype nexus repository, nexus repository manager +1 moreNexus Repository 3 - Remote Code Execution via License DeserializationCVE-2026-107488.6 High
- sonatype nexus repository managerNexus Repository Manager - Improper Restriction of Excessive Authentication AttemptsCVE-2026-33298.7 High
- sonatype nexus repository, nexus repository manager +1 moreNexus Repository 3 - Stored Cross-Site Scripting (XSS) via HTML Browse PageCVE-2026-73085.1 Medium
- sonatype nexus repository, nexus repository manager +1 moreNexus Repository 3 - Improper LDAP Referral HandlingCVE-2026-30485.1 Medium
- sonatype nexus repository, nexus repository manager +1 moreNexus Repository 3 - Hardcoded Credential in Internal Database ComponentCVE-2026-51899.2 Critical
- sonatype nexus repository, nexus repository manager +1 moreNexus Repository 3 - Authenticated Remote Code Execution via Task Property InjectionCVE-2026-31999.4 Critical
- sonatype nexus repository, nexus repository manager +1 moreNexus Repository 3 - Reflected Cross-Site Scripting (XSS) in ?describe PagesCVE-2026-34385.1 Medium
- sonatype nexus repository, nexus repository manager +1 moreNexus Repository 3 - Static hard-coded encryption passphrase used by defaultCVE-2024-5764Public exploit5.9 Medium
- sonatype nexus repository managerSonatype Nexus Repository Manager 3.x before 3.38.0 allows SSRF.CVE-2022-279074.3 Medium
- sonatype nexus repository managerSonatype Nexus Repository Manager 3.36.0 allows HTML Injection.CVE-2021-439614.3 Medium
- sonatype nexus repository managerSonatype Nexus Repository Manager 3.x before 3.36.0 allows a remote authenticated attacker to...CVE-2021-432934.3 Medium
- sonatype nexus repository managerSonatype Nexus Repository Manager 3.x through 3.35.0 allows attackers to access the SSL...CVE-2021-425684.3 Medium
- sonatype nexus repository managerHTTP header injection in Sonatype Nexus RepositoryCVE-2021-40143Fix available8.2 High
- sonatype nexus repository managerMultiple XSS issues exist in Sonatype Nexus Repository Manager 3 before 3.33.0. An authenticated...CVE-2021-37152Public exploitEPSS 24.4%5.4 Medium
- sonatype nexus repository managerSonatype Nexus Repository Manager 3.x before 3.31.0 allows a remote authenticated attacker to get...CVE-2021-345534.3 Medium
- sonatype nexus repository managerA cross-site scripting (XSS) vulnerability has been discovered in Nexus Repository Manager 3.x...CVE-2021-291596.1 Medium
- sonatype nexus repository managerSonatype Nexus Repository Manager 3.x before 3.30.1 allows a remote attacker to get a list of...CVE-2021-306355.3 Medium
- sonatype nexus repository managerSonatype Nexus Repository Manager 3 Pro up to and including 3.30.0 has Incorrect Access Control.CVE-2021-291584.9 Medium
- sonatype nexus repository managerSonatype Nexus Repository Manager 3.x before 3.29.0 allows a user with admin privileges to...CVE-2020-294366.5 Medium
- sonatype nexus repository managerA Directory Traversal issue was discovered in Sonatype Nexus Repository Manager 2.x before 2.14...CVE-2020-150128.6 High
- sonatype nexus repository managerSonatype Nexus Repository Manager OSS/Pro before 3.26.0 has Incorrect Access Control.CVE-2020-158687.5 High
- sonatype nexus repository managerSonatype Nexus Repository Manager OSS/Pro version before 3.25.1 allows Remote Code Execution.CVE-2020-158718.8 High
- sonatype nexus repository managerSonatype Nexus Repository Manager OSS/Pro versions before 3.25.1 allow XSS (issue 1 of 2).CVE-2020-158695.4 Medium
- sonatype nexus repository managerSonatype Nexus Repository Manager OSS/Pro versions before 3.25.1 allow XSS (Issue 2 of 2).CVE-2020-158706.1 Medium
- sonatype nexus repository managerAn issue was discovered in Sonatype Nexus Repository Manager 2.x before 2.14.17 and 3.x before 3...CVE-2020-114154.9 Medium
- sonatype nexus repository managerAn issue was discovered in Sonatype Nexus Repository Manager in versions 3.21.1 and 3.22.0. It is...CVE-2020-117538.8 High
- Show olderLoading…