CVE-2026-17603 | | | 2026-08-07 | Nexus Repository 3 did not sufficiently restrict which HikariCP connection-pool properties could be set through the DataStore configuration API. A user holding… |
CVE-2026-17601 | | | 2026-08-07 | A user holding a permission to update privilege definitions could modify a wildcard privilege already assigned to their own role to grant broader permissions t… |
CVE-2026-17600 | | | 2026-08-07 | Sonatype Nexus Repository 3 did not immediately terminate a user's active login session or revoke their cached permissions when that user's account was deleted… |
CVE-2026-17599 | | | 2026-08-07 | Nexus Repository 3 contained an endpoint used to change the administrator account password during initial onboarding. This endpoint did not verify that onboard… |
CVE-2026-17598 | | | 2026-08-07 | Sonatype Nexus Repository 3 did not properly filter internal configuration keys from user-supplied task properties when creating or updating a scheduled task t… |
CVE-2026-17597 | | | 2026-08-07 | Nexus Repository 3 contains a Server-Side Request Forgery (SSRF) vulnerability in the email configuration verification feature. A user holding the nexus:settin… |
CVE-2026-17596 | | | 2026-08-07 | Nexus Repository 3 was found to be vulnerable to stored cross-site scripting (XSS). A user with the nexus:blobstores:create or nexus:blobstores:update permissi… |
CVE-2026-17595 | | | 2026-08-07 | Nexus Repository 3 did not fully sandbox JEXL expressions used in Content Selectors. An account holding the nexus:selectors:create permission could construct a… |
CVE-2026-17594 | | | 2026-08-07 | Nexus Repository 3 CE/Pro versions 3.0.0 through 3.94.x contain an incorrect authorization vulnerability (CWE-863) in the repository-creation user interface. A… |
CVE-2026-17593 | | | 2026-08-07 | An account holding the nexus:settings:update permission in Nexus Repository 3 (or the equivalent nexus:settings permission in the legacy Nexus Repository 2) co… |
CVE-2026-14644 | | | 2026-08-07 | Nexus Repository 3 contained a privilege escalation vulnerability in the REST privileges API. An authenticated user with permission to manage privileges could… |
CVE-2026-14646 | | | 2026-07-14 | Nexus Repository 3 did not apply its existing Server-Side Request Forgery (SSRF) protections to HTTP redirect targets returned by proxy repository upstream ser… |
CVE-2026-14645 | | | 2026-07-14 | Nexus Repository 3 does not validate the destination of the "Webhook: Global" capability's configured URL before making an outbound HTTP request, allowing a us… |
CVE-2026-7494 | | | 2026-07-14 | Nexus Repository 3 is vulnerable to Server-Side Request Forgery (SSRF) via the SSL Certificate Retrieval endpoint. A user holding the nexus:ssl-truststore:read… |
CVE-2026-14504 | | | 2026-07-14 | An authorization bypass in Nexus Repository 3's component upload API allowed a user with only read/browse privileges on a Swift, Terraform, or Conda hosted rep… |
CVE-2026-11403 | | | 2026-07-14 | A vulnerability in Sonatype Nexus Repository Manager's format-specific API key generation may allow a remote attacker to gain unauthorized access to repository… |
CVE-2026-10741 | Medium | 4.9 | 2026-06-17 | Sonatype Nexus Repository Manager before 3.93.0 contains an authorization vulnerability in the proxy repository configuration that allows a delegated repositor… |
CVE-2026-10748 | | | 2026-06-16 | An authenticated user with the nx-licensing-create privilege can upload a specially crafted license file to execute arbitrary operating system commands as the… |
CVE-2026-3329 | High | 7.5 | 2026-06-11 | A remote unauthenticated attacker may be able to conduct credential-guessing attacks against user accounts in Sonatype Nexus Repository via authentication endp… |
CVE-2026-7308 | | | 2026-05-11 | An authenticated user with upload permission to a hosted repository can store content that causes arbitrary JavaScript to execute in the browser of any user wh… |
CVE-2026-3048 | | | 2026-05-11 | An authenticated administrator who configures or tests LDAP connectivity in Sonatype Nexus Repository Manager versions 3.0.0 through 3.91.1 may be able to init… |
CVE-2026-5189 | | | 2026-04-15 | CWE-798: Use of Hard-coded Credentials in Sonatype Nexus Repository Manager versions 3.0.0 through 3.70.5 allows an unauthenticated attacker with network acces… |
CVE-2026-3438 | | | 2026-04-08 | A reflected cross-site scripting vulnerability exists in Sonatype Nexus Repository versions 3.0.0 through 3.90.2 that allows unauthenticated remote attackers t… |
CVE-2026-3199 | | | 2026-04-08 | A vulnerability in the task management component of Sonatype Nexus Repository versions 3.22.1 through 3.90.2 allows an authenticated attacker with task creatio… |
CVE-2026-0600 | | | 2026-01-14 | Server-Side Request Forgery (SSRF) vulnerability in Sonatype Nexus Repository 3 versions 3.0.0 and later allows authenticated administrators to configure proxy… |
CVE-2026-0601 | | | 2026-01-14 | A reflected cross-site scripting vulnerability exists in Nexus Repository 3 that allows unauthenticated attackers to execute arbitrary JavaScript in a victim's… |
CVE-2025-13488 | | | 2025-12-04 | Due to a regression introduced in version 3.83.0, a security header is no longer applied to certain user-uploaded content served from repositories. This may al… |
CVE-2025-9868 | | | 2025-10-08 | Server-Side Request Forgery (SSRF) in the Remote Browser Plugin in Sonatype Nexus Repository 2.x up to and including 2.15.2 allows unauthenticated remote attac… |
CVE-2024-5082 | | | 2024-11-14 | A Remote Code Execution vulnerability has been discovered in Sonatype Nexus Repository 2.
This issue affects Nexus Repository 2 OSS/Pro versions up to and in… |
CVE-2024-5083 | | | 2024-11-14 | A stored Cross-site Scripting vulnerability has been discovered in Sonatype Nexus Repository 2
This issue affects Nexus Repository 2 OSS/Pro versions up to an… |
CVE-2024-5764 | Medium | 6.5 | 2024-10-23 | Use of Hard-coded Credentials vulnerability in Sonatype Nexus Repository has been discovered in the code responsible for encrypting any secrets stored in the N… |
CVE-2024-4956 | High | 7.5 | 2024-05-16 | Path Traversal in Sonatype Nexus Repository 3 allows an unauthenticated attacker to read system files. Fixed in version 3.68.1. |
CVE-2024-1142 | Medium | 5.4 | 2024-03-21 | Path Traversal in Sonatype IQ Server from version 143 allows remote authenticated attackers to overwrite or delete files via a specially crafted request. Versi… |
CVE-2022-27907 | Medium | 4.3 | 2022-03-30 | Sonatype Nexus Repository Manager 3.x before 3.38.0 allows SSRF. |
CVE-2021-43961 | Medium | 4.3 | 2022-03-17 | Sonatype Nexus Repository Manager 3.36.0 allows HTML Injection. |
CVE-2021-43293 | Medium | 4.3 | 2021-11-04 | Sonatype Nexus Repository Manager 3.x before 3.36.0 allows a remote authenticated attacker to potentially perform network enumeration via Server Side Request F… |
CVE-2021-42568 | Medium | 4.3 | 2021-11-02 | Sonatype Nexus Repository Manager 3.x through 3.35.0 allows attackers to access the SSL Certificates Loading function via a low-privileged account. |
CVE-2021-40143 | High | 8.2 | 2021-09-07 | Sonatype Nexus Repository 3.x through 3.33.1-01 is vulnerable to an HTTP header injection. By sending a crafted HTTP request, a remote attacker may disclose se… |
CVE-2021-37152 | Medium | 5.4 | 2021-08-10 | Multiple XSS issues exist in Sonatype Nexus Repository Manager 3 before 3.33.0. An authenticated attacker with the ability to add HTML files to a repository co… |
CVE-2021-34553 | Medium | 4.3 | 2021-06-18 | Sonatype Nexus Repository Manager 3.x before 3.31.0 allows a remote authenticated attacker to get a list of blob files and read the content of a blob file (via… |
CVE-2021-29159 | Medium | 6.1 | 2021-04-28 | A cross-site scripting (XSS) vulnerability has been discovered in Nexus Repository Manager 3.x before 3.30.1. An attacker with a local account can create entit… |
CVE-2021-30635 | Medium | 5.3 | 2021-04-27 | Sonatype Nexus Repository Manager 3.x before 3.30.1 allows a remote attacker to get a list of files and directories that exist in a UI-related folder via direc… |
CVE-2021-29158 | Medium | 4.9 | 2021-04-23 | Sonatype Nexus Repository Manager 3 Pro up to and including 3.30.0 has Incorrect Access Control. |
CVE-2020-29436 | Medium | 6.5 | 2020-12-17 | Sonatype Nexus Repository Manager 3.x before 3.29.0 allows a user with admin privileges to configure the system to gain access to content outside of NXRM via a… |
CVE-2020-15012 | High | 8.6 | 2020-10-12 | A Directory Traversal issue was discovered in Sonatype Nexus Repository Manager 2.x before 2.14.19. A user that requests a crafted path can traverse up the fil… |
CVE-2020-24622 | Medium | 4.9 | 2020-08-25 | In Sonatype Nexus Repository 3.26.1, an S3 secret key can be exposed by an admin user. |
CVE-2020-15868 | High | 7.5 | 2020-08-12 | Sonatype Nexus Repository Manager OSS/Pro before 3.26.0 has Incorrect Access Control. |
CVE-2020-15871 | High | 8.8 | 2020-07-31 | Sonatype Nexus Repository Manager OSS/Pro version before 3.25.1 allows Remote Code Execution. |
CVE-2020-15870 | Medium | 6.1 | 2020-07-31 | Sonatype Nexus Repository Manager OSS/Pro versions before 3.25.1 allow XSS (Issue 2 of 2). |
CVE-2020-15869 | Medium | 5.4 | 2020-07-31 | Sonatype Nexus Repository Manager OSS/Pro versions before 3.25.1 allow XSS (issue 1 of 2). |
CVE-2020-11415 | Medium | 4.9 | 2020-04-27 | An issue was discovered in Sonatype Nexus Repository Manager 2.x before 2.14.17 and 3.x before 3.22.1. Admin users can retrieve the LDAP server system username… |
CVE-2020-11753 | High | 8.8 | 2020-04-20 | An issue was discovered in Sonatype Nexus Repository Manager in versions 3.21.1 and 3.22.0. It is possible for a user with appropriate privileges to create, mo… |
CVE-2020-11444 | High | 8.8 | 2020-04-02 | Sonatype Nexus Repository Manager 3.x up to and including 3.21.2 has Incorrect Access Control. |
CVE-2020-10204 | High | 7.2 | 2020-04-01 | Sonatype Nexus Repository before 3.21.2 allows Remote Code Execution. |
CVE-2020-10203 | Medium | 4.8 | 2020-04-01 | Sonatype Nexus Repository before 3.21.2 allows XSS. |
CVE-2020-10199 | High | 8.8 | 2020-04-01 | Sonatype Nexus Repository before 3.21.2 allows JavaEL Injection (issue 1 of 2). |
CVE-2019-15588 | High | 7.2 | 2019-11-01 | There is an OS Command Injection in Nexus Repository Manager <= 2.14.14 (bypass CVE-2019-5475) that could allow an attacker a Remote Code Execution (RCE). All… |
CVE-2019-16530 | High | 7.2 | 2019-10-21 | Sonatype Nexus Repository Manager 2.x before 2.14.15 and 3.x before 3.19, and IQ Server before 72, has remote code execution. |
CVE-2019-15893 | High | 7.2 | 2019-10-16 | Sonatype Nexus Repository Manager 2.x before 2.14.15 allows Remote Code Execution. |
CVE-2019-5475 | High | 8.8 | 2019-09-03 | The Nexus Yum Repository Plugin in v2 is vulnerable to Remote Code Execution when instances using CommandLineExecutor.java are supplied vulnerable data, such a… |
CVE-2019-14469 | Medium | 5.4 | 2019-08-22 | In Nexus Repository Manager before 3.18.0, users with elevated privileges can create stored XSS. |
CVE-2019-9630 | High | 7.5 | 2019-07-08 | Sonatype Nexus Repository Manager before 3.17.0 has a weak default of giving any unauthenticated user read permissions on the repository files and images. |
CVE-2019-9629 | Critical | 9.8 | 2019-07-08 | Sonatype Nexus Repository Manager before 3.17.0 establishes a default administrator user with weak defaults (fixed credentials). |
CVE-2019-11629 | Medium | 6.1 | 2019-05-07 | Sonatype Nexus Repository Manager 2.x before 2.14.13 allows XSS. |
CVE-2019-7238 | Critical | 9.8 | 2019-03-21 | Sonatype Nexus Repository Manager before 3.15.0 has Incorrect Access Control. |
CVE-2018-16621 | High | 7.2 | 2018-11-15 | Sonatype Nexus Repository Manager before 3.14 allows Java Expression Language Injection. |
CVE-2018-16620 | High | 7.5 | 2018-11-15 | Sonatype Nexus Repository Manager before 3.14 has Incorrect Access Control. |
CVE-2018-16619 | Medium | 6.1 | 2018-11-15 | Sonatype Nexus Repository Manager before 3.14 allows XSS. |
CVE-2018-12100 | Medium | 4.8 | 2018-06-11 | Sonatype Nexus Repository Manager versions 3.x before 3.12.0 has XSS in multiple areas in the Administration UI. |
CVE-2018-5307 | Medium | 6.1 | 2018-02-09 | Multiple cross-site scripting (XSS) vulnerabilities in Sonatype Nexus Repository Manager (aka NXRM) 2.x before 2.14.6 allow remote attackers to inject arbitrar… |
CVE-2018-5306 | Medium | 6.1 | 2018-02-09 | Multiple cross-site scripting (XSS) vulnerabilities in Sonatype Nexus Repository Manager (aka NXRM) 3.x before 3.8 allow remote attackers to inject arbitrary w… |
CVE-2017-17717 | Critical | 9.8 | 2017-12-17 | Sonatype Nexus Repository Manager through 2.14.5 has weak password encryption with a hardcoded CMMDwoV value in the LDAP integration feature. |
CVE-2014-9389 | | | 2015-01-05 | Directory traversal vulnerability in Sonatype Nexus OSS and Pro before 2.11.1-01 allows remote attackers to read or write to arbitrary files via unspecified ve… |
CVE-2014-2034 | | | 2014-04-01 | Unspecified vulnerability in Sonatype Nexus OSS and Pro 2.4.0 through 2.7.1 allows attackers to create arbitrary user accounts via unknown vectors related to "… |
CVE-2014-0792 | | | 2014-01-17 | Sonatype Nexus 1.x and 2.x before 2.7.1 allows remote attackers to create arbitrary objects and execute arbitrary code via unspecified vectors related to unmar… |