Vendor

    Sonatype

    84 known vulnerabilities in products by Sonatype, 2 of them actively exploited (CISA KEV).

    Key figures

    84

    Vulnerabilities

    2

    Actively exploited (KEV)

    0

    Used by ransomware

    6

    Critical

    Vulnerabilities

    Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.

    Vulnerabilities in Sonatype
    CriticalCVE-2019-7238

    Sonatype Nexus Repository Manager Incorrect Access Control Vulnerability

    In CISA KEV

    		9.8
    CriticalCVE-2020-10199

    Sonatype Nexus Repository Remote Code Execution Vulnerability

    In CISA KEV

    		8.8
    HighCVE-2019-5475

    Nexus Repository Manager: OS Command Injection

    		8.8
    HighCVE-2024-4956

    Nexus Repository 3 - Path Traversal

    		7.5
    HighCVE-2020-11444

    Sonatype Nexus Repository: Improper Access Control

    		8.8
    HighCVE-2020-10204

    Sonatype Nexus Repository: Remote Code Execution

    		7.2
    HighCVE-2019-15588

    Nexus Repository Manager: Command Injection

    		7.2
    HighCVE-2018-16621

    Sonatype Nexus Repository 3: security vulnerability

    		7.2
    HighCVE-2024-5082

    Nexus Repository 2 - Remote Code Execution

    		—
    MediumCVE-2021-37152

    Sonatype Nexus Repository 3: Cross-Site Scripting (XSS)

    		5.4
    HighCVE-2020-15012

    Sonatype Nexus Repository 3: Path Traversal

    		8.6
    HighCVE-2019-16530

    Sonatype Nexus Repository 3: Remote Code Execution

    		7.2
    HighCVE-2020-15871

    Sonatype Nexus Repository 3: Remote Code Execution

    		8.8
    HighCVE-2021-40143

    Sonatype Nexus Repository 3: security vulnerability

    		8.2
    HighCVE-2026-17594

    Nexus Repository 3 - Authorization Bypass in Repository Creation

    		4.9
    HighCVE-2026-17603

    Nexus Repository 3 - HikariCP connectionInitSql Injection RCE via DataStore Configuration API

    		8.8
    CriticalCVE-2019-9629

    Sonatype Nexus Repository 3: security vulnerability

    		9.8
    HighCVE-2020-11753

    Sonatype Nexus Repository 3: security vulnerability

    		8.8
    HighCVE-2019-15893

    Sonatype Nexus Repository 3: Remote Code Execution

    		7.2
    MediumCVE-2021-34553

    Sonatype Nexus Repository 3: security vulnerability

    		4.3
    HighCVE-2026-77124

    Nexus Repository 3 - Script Execution Disable Setting Not Enforced

    		7.2
    HighCVE-2026-14644

    Nexus Repository 3 - Privilege Escalation

    		7.2
    MediumCVE-2026-97666

    Nexus Repository 3 - Unsafe Reflection in ExtDirect Repository Endpoint

    		—
    HighCVE-2026-17593

    Nexus Repository - Arbitrary Class Instantiation via Unsafe Realm Configuration

    		7.2
    HighCVE-2026-17601

    Nexus Repository 3 - Wildcard Privilege Update Self-Escalation to Administrator

    		7.2

    All vulnerabilities in search

    Products

    Products by Sonatype
    Sonatype Nexus Repository 3911
    Nexus Repository 3220
    Nexus Repository160
    Sonatype Nexus Repository81