How many sonatype Nexus Repository CVEs are in CISA KEV?

Yes — 1 of sonatype Nexus Repository's CVEs are listed in CISA's Known Exploited Vulnerabilities catalog, confirmed exploited in the wild and carrying a CISA remediation deadline.

Which versions of sonatype Nexus Repository are affected?

19 distinct sonatype Nexus Repository versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version.

What are the most common weakness types in sonatype Nexus Repository CVEs?

sonatype Nexus Repository's CVEs most often map to these CWE weakness types: CWE-79 (Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')), CWE-918 (Server-Side Request Forgery (SSRF)), CWE-798 (Use of Hard-coded Credentials), CWE-502 (Deserialization of Untrusted Data).

How many critical sonatype Nexus Repository vulnerabilities are there?

sonatype Nexus Repository has 2 critical and 6 high-severity CVEs.

What is the average severity of sonatype Nexus Repository CVEs?

The average CVSS base score across sonatype Nexus Repository's scored CVEs is 6.7.

sonatype Nexus Repository Vulnerabilities: CVEs, CISA KEV & Security Advisories

Name: sonatype Nexus Repository vulnerability dataset (CVEs)
Creator: RadicalNotion.AI
License: https://creativecommons.org/licenses/by-nc/4.0/

RadicalNotion.AI

sonatype Nexus Repository Vulnerabilities: CVEs, CISA KEV & Security Advisories

Overview

sonatype Nexus Repository has 17 published CVE records since 2020, of which 1 are in CISA's Known Exploited Vulnerabilities catalog and 2 have a known public exploit. The average CVSS base score across scored CVEs is 6.7.

Severity and exploitation

How the CVSS severity of sonatype Nexus Repository's CVEs breaks down, plus how many are exploited in the wild or have public exploit code.

Critical2

High6

Medium9

Low0

In CISA’s Known Exploited Vulnerabilities catalog

One of sonatype Nexus Repository's CVEs is confirmed exploited in the wild.

Public exploits

2 of sonatype Nexus Repository's CVEs have a known public exploit available.

Affected versions and CVEs

Browse every sonatype Nexus Repository version named in a CVE, then pick one to see only the CVEs that affect it.

Version ranges

2.0.0 <= v <= 2.15.12 CVEs
3.0.0 <= v < 3.92.02 CVEs
>= 3.0.01 CVE
2.0.0 <= v <= 2.15.21 CVE
2.8.0 <= v < 3.95.01 CVE
3.0.0 <= v < 3.71.01 CVE
3.0.0 <= v < 3.91.01 CVE
3.0.0 <= v < 3.94.01 CVE
3.0.0 <= v <= 3.68.01 CVE
3.0.0 <= v <= 3.72.01 CVE
3.22.1 <= v < 3.91.01 CVE

Common weakness types

The CWE weakness categories most often found in sonatype Nexus Repository CVEs. Follow any weakness for its full explanation.

Disclosure activity by year

How many sonatype Nexus Repository CVEs were published each year.

2020

2024

2025

2026

Other sonatype products

Browse vulnerabilities for other products by sonatype.

nexus repository manager64 CVEs nexus-public61 CVEs Nexus Repository 322 CVEs nexus8 CVEs IQ Server1 CVEs nexus iq server1 CVEs Nexus Repository 2.x1 CVEs Nexus Repository Manager 3

Frequently asked questions

Common questions about sonatype Nexus Repository vulnerabilities.

How many CVEs does sonatype Nexus Repository have?: sonatype Nexus Repository has 17 published CVE records since 2020.
How many sonatype Nexus Repository CVEs are in CISA KEV?: Yes — 1 of sonatype Nexus Repository's CVEs are listed in CISA's Known Exploited Vulnerabilities catalog, confirmed exploited in the wild and carrying a CISA remediation deadline.
Are there public exploits for sonatype Nexus Repository vulnerabilities?: Yes — 2 of sonatype Nexus Repository's CVEs have a known public exploit.
Which versions of sonatype Nexus Repository are affected?: 19 distinct sonatype Nexus Repository versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version.
What are the most common weakness types in sonatype Nexus Repository CVEs?: sonatype Nexus Repository's CVEs most often map to these CWE weakness types: CWE-79 (Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')), CWE-918 (Server-Side Request Forgery (SSRF)), CWE-798 (Use of Hard-coded Credentials), CWE-502 (Deserialization of Untrusted Data).
How many critical sonatype Nexus Repository vulnerabilities are there?: sonatype Nexus Repository has 2 critical and 6 high-severity CVEs.
What is the average severity of sonatype Nexus Repository CVEs?: The average CVSS base score across sonatype Nexus Repository's scored CVEs is 6.7.

References

Vulnerability data is sourced from the CVE Program; severity, KEV, and exploit signals are aggregated by RadicalNotion.AI.

Track sonatype Nexus Repository vulnerabilities

Get an alert for each new sonatype Nexus Repository CVE, with AI-written analysis and remediation steps.

Create an account See pricing

sonatype Nexus Repository Vulnerabilities