CVE security advisories and vulnerability history for nexus repository manager by sonatype.
64
Total CVEs
Published
1
In CISA KEV
Exploited in the wild
5
Public exploits
PoC or exploit code
6.7
Avg CVSS
2017–2026
Last updated
Overview
sonatype nexus repository manager has 64 published CVE records since 2017, of which 1 are in CISA's Known Exploited Vulnerabilities catalog and 5 have a known public exploit. The average CVSS base score across scored CVEs is 6.7.
Severity and exploitation
How the CVSS severity of sonatype nexus repository manager's CVEs breaks down, plus how many are exploited in the wild or have public exploit code.
Critical5
High24
Medium35
Low0
In CISA’s Known Exploited Vulnerabilities catalog
1
One of sonatype nexus repository manager's CVEs is confirmed exploited in the wild.
Public exploits
5
5 of sonatype nexus repository manager's CVEs have a known public exploit available.
Affected versions and CVEs
Browse every sonatype nexus repository manager version named in a CVE, then pick one to see only the CVEs that affect it.
Version ranges
< 3.14.03 CVEs
< 3.25.13 CVEs
3.0.0 <= v < 3.94.03 CVEs
3.0.0 <= v < 3.95.03 CVEs
< 3.17.02 CVEs
3.0.0 <= v < 3.38.02 CVEs
3.0.0 <= v < 3.92.02 CVEs
3.0.0 <= v < 3.93.02 CVEs
3.0.0 <= v <= 3.35.02 CVEs
3.19.0 <= v < 3.95.02 CVEs
< 2.14.151 CVE
< 3.26.0
Common weakness types
The CWE weakness categories most often found in sonatype nexus repository manager CVEs. Follow any weakness for its full explanation.
Common questions about sonatype nexus repository manager vulnerabilities.
How many CVEs does sonatype nexus repository manager have?
sonatype nexus repository manager has 64 published CVE records since 2017.
How many sonatype nexus repository manager CVEs are in CISA KEV?
Yes — 1 of sonatype nexus repository manager's CVEs are listed in CISA's Known Exploited Vulnerabilities catalog, confirmed exploited in the wild and carrying a CISA remediation deadline.
Are there public exploits for sonatype nexus repository manager vulnerabilities?
Yes — 5 of sonatype nexus repository manager's CVEs have a known public exploit.
Which versions of sonatype nexus repository manager are affected?
80 distinct sonatype nexus repository manager versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version.
What are the most common weakness types in sonatype nexus repository manager CVEs?
sonatype nexus repository manager's CVEs most often map to these CWE weakness types: CWE-79 (Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')), CWE-863 (Incorrect Authorization), CWE-918 (Server-Side Request Forgery (SSRF)), CWE-22 (Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')).
How many critical sonatype nexus repository manager vulnerabilities are there?
sonatype nexus repository manager has 5 critical and 24 high-severity CVEs.
What is the average severity of sonatype nexus repository manager CVEs?
The average CVSS base score across sonatype nexus repository manager's scored CVEs is 6.7.
