CVE security advisories and vulnerability history for nexus-public by sonatype.
Last updated
sonatype nexus-public has 27 published CVE records since 2017, of which 1 are in CISA's Known Exploited Vulnerabilities catalog and 1 have a known public exploit. The average CVSS base score across scored CVEs is 7.6.
This page aggregates every publicly disclosed vulnerability (CVE) affecting sonatype nexus-public, with a severity breakdown, the affected and patched versions, the most common weakness types, and the full CVE list.
How the CVSS severity of sonatype nexus-public's CVEs breaks down, plus how many are exploited in the wild or have public exploit code.
25 additional CVEs have no CVSS severity score.
In CISA’s Known Exploited Vulnerabilities catalog
1
One of sonatype nexus-public's CVEs is confirmed exploited in the wild.
Public exploits
1
One of sonatype nexus-public's CVEs has a known public exploit available.
Browse every sonatype nexus-public version named in a CVE, then pick one to see only the CVEs that affect it.
27 CVEs
Added to CISA KEV 2021-12-10
The CWE weakness categories most often found in sonatype nexus-public CVEs. Follow any weakness for its full explanation.
How many sonatype nexus-public CVEs were published each year.
Browse vulnerabilities for other products by sonatype.
Common questions about sonatype nexus-public vulnerabilities.
sonatype nexus-public has 27 published CVE records since 2017.
Yes — 1 of sonatype nexus-public's CVEs are listed in CISA's Known Exploited Vulnerabilities catalog, confirmed exploited in the wild and carrying a CISA remediation deadline.
Yes — 1 of sonatype nexus-public's CVEs have a known public exploit.
110 distinct sonatype nexus-public versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version.
sonatype nexus-public's CVEs most often map to these CWE weakness types: CWE-77 (Improper Neutralization of Special Elements used in a Command ('Command Injection')), CWE-78 (Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')), CWE-798 (Use of Hard-coded Credentials).
sonatype nexus-public has 1 critical and 0 high-severity CVEs.
The average CVSS base score across sonatype nexus-public's scored CVEs is 7.6.
Vulnerability data is sourced from the CVE Program; severity, KEV, and exploit signals are aggregated by RadicalNotion.AI.
Monitor new sonatype nexus-public vulnerabilities as they are disclosed, with AI-written analysis and remediation guidance.
