Which versions of sonatype org.sonatype.nexus:nexus-repository are affected?

2 distinct sonatype org.sonatype.nexus:nexus-repository versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version.

What are the most common weakness types in sonatype org.sonatype.nexus:nexus-repository CVEs?

sonatype org.sonatype.nexus:nexus-repository's CVEs most often map to these CWE weakness types: CWE-74 (Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')).

What is the average severity of sonatype org.sonatype.nexus:nexus-repository CVEs?

The average CVSS base score across sonatype org.sonatype.nexus:nexus-repository's scored CVEs is 8.2.

sonatype org.sonatype.nexus:nexus-repository Vulnerabilities: CVEs, CISA KEV & Security Advisories

Name: sonatype org.sonatype.nexus:nexus-repository vulnerability dataset (CVEs)
Creator: RadicalNotion.AI
License: https://creativecommons.org/licenses/by-nc/4.0/

RadicalNotion.AI

sonatype org.sonatype.nexus:nexus-repository Vulnerabilities: CVEs, CISA KEV & Security Advisories

Overview

sonatype org.sonatype.nexus:nexus-repository has 1 published CVE records since 2021, of which 0 are in CISA's Known Exploited Vulnerabilities catalog and 0 have a known public exploit. The average CVSS base score across scored CVEs is 8.2.

Severity and exploitation

How the CVSS severity of sonatype org.sonatype.nexus:nexus-repository's CVEs breaks down, plus how many are exploited in the wild or have public exploit code.

Critical0

High1

Medium0

Low0

In CISA’s Known Exploited Vulnerabilities catalog

None of sonatype org.sonatype.nexus:nexus-repository's CVEs are currently listed in CISA's KEV catalog.

Public exploits

No sonatype org.sonatype.nexus:nexus-repository CVEs currently have a tracked public exploit.

Affected versions and CVEs

Browse every sonatype org.sonatype.nexus:nexus-repository version named in a CVE, then pick one to see only the CVEs that affect it.

Version ranges

3.0.0 <= v < 3.34.0-011 CVE

Fixed in

3.34.0-011 CVE

Find a version

1 CVE

Sort

HTTP header injection in Sonatype Nexus Repository
CVE-2021-40143
Patch
CWE-74
High · CVSS 8.2
EPSS 2.3% (83th pct)2021-09-07

Common weakness types

The CWE weakness categories most often found in sonatype org.sonatype.nexus:nexus-repository CVEs. Follow any weakness for its full explanation.

CWE-74Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')1 CVE

Other sonatype products

Browse vulnerabilities for other products by sonatype.

nexus repository manager64 CVEs nexus-public61 CVEs Nexus Repository 322 CVEs Nexus Repository17 CVEs nexus8 CVEs IQ Server1 CVEs nexus iq server1 CVEs Nexus Repository 2.x

Frequently asked questions

Common questions about sonatype org.sonatype.nexus:nexus-repository vulnerabilities.

How many CVEs does sonatype org.sonatype.nexus:nexus-repository have?: sonatype org.sonatype.nexus:nexus-repository has 1 published CVE records since 2021.
How many sonatype org.sonatype.nexus:nexus-repository CVEs are in CISA KEV?: None of sonatype org.sonatype.nexus:nexus-repository's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.
Are there public exploits for sonatype org.sonatype.nexus:nexus-repository vulnerabilities?: No sonatype org.sonatype.nexus:nexus-repository CVEs currently have a tracked public exploit in this dataset.
Which versions of sonatype org.sonatype.nexus:nexus-repository are affected?: 2 distinct sonatype org.sonatype.nexus:nexus-repository versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version.
What are the most common weakness types in sonatype org.sonatype.nexus:nexus-repository CVEs?: sonatype org.sonatype.nexus:nexus-repository's CVEs most often map to these CWE weakness types: CWE-74 (Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')).
What is the average severity of sonatype org.sonatype.nexus:nexus-repository CVEs?: The average CVSS base score across sonatype org.sonatype.nexus:nexus-repository's scored CVEs is 8.2.

References

Vulnerability data is sourced from the CVE Program; severity, KEV, and exploit signals are aggregated by RadicalNotion.AI.

Track sonatype org.sonatype.nexus:nexus-repository vulnerabilities

Get an alert for each new sonatype org.sonatype.nexus:nexus-repository CVE, with AI-written analysis and remediation steps.

Create an account See pricing