CVE security advisories and vulnerability history for Nexus Repository 2.x by sonatype.
Last updated
sonatype Nexus Repository 2.x has 1 published CVE records since 2025, of which 0 are in CISA's Known Exploited Vulnerabilities catalog and 0 have a known public exploit. The average CVSS base score across scored CVEs is 8.7.
How the CVSS severity of sonatype Nexus Repository 2.x's CVEs breaks down, plus how many are exploited in the wild or have public exploit code.
In CISA’s Known Exploited Vulnerabilities catalog
0
None of sonatype Nexus Repository 2.x's CVEs are currently listed in CISA's KEV catalog.
Public exploits
0
No sonatype Nexus Repository 2.x CVEs currently have a tracked public exploit.
Browse every sonatype Nexus Repository 2.x version named in a CVE, then pick one to see only the CVEs that affect it.
No specific affected versions are recorded for sonatype Nexus Repository 2.x; the CVEs below apply to the product without a version pin.
1 CVE
The CWE weakness categories most often found in sonatype Nexus Repository 2.x CVEs. Follow any weakness for its full explanation.
Browse vulnerabilities for other products by sonatype.
Common questions about sonatype Nexus Repository 2.x vulnerabilities.
Vulnerability data is sourced from the CVE Program; severity, KEV, and exploit signals are aggregated by RadicalNotion.AI.
Get an alert for each new sonatype Nexus Repository 2.x CVE, with AI-written analysis and remediation steps.