Product by Sonatype

    Sonatype Nexus Repository

    8 known vulnerabilities in Sonatype Nexus Repository (Sonatype), 1 of them actively exploited (CISA KEV).

    Key figures

    8

    Vulnerabilities

    1

    Actively exploited (KEV)

    0

    Used by ransomware

    1

    Critical

    Vulnerabilities

    Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.

    Vulnerabilities in Sonatype Nexus Repository (Sonatype)
    CriticalCVE-2020-10199

    Sonatype Nexus Repository Remote Code Execution Vulnerability

    In CISA KEV

    		8.8
    HighCVE-2020-11444

    Sonatype Nexus Repository: Improper Access Control

    		8.8
    HighCVE-2020-10204

    Sonatype Nexus Repository: Remote Code Execution

    		7.2
    Not ratedCVE-2014-0792

    Sonatype Nexus Repository: Code Execution

    		—
    MediumCVE-2020-24622

    Sonatype Nexus Repository: security vulnerability

    		4.9
    MediumCVE-2020-10203

    Sonatype Nexus Repository: Cross-Site Scripting (XSS)

    		4.8
    Not ratedCVE-2014-2034

    Sonatype Nexus Repository: security vulnerability

    		—
    Not ratedCVE-2014-9389

    Sonatype Nexus Repository: Path Traversal

    		—

    All products by Sonatype