Sonatype Nexus
8 CVEs affecting Sonatype Nexus. Latest disclosed: 2020-08-25. Critical: 0, High: 3.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2020-11444 | High | 8.8 | 2020-04-02 | Sonatype Nexus Repository Manager 3.x up to and including 3.21.2 has Incorrect Access Control. |
CVE-2020-10199 | High | 8.8 | 2020-04-01 | Sonatype Nexus Repository before 3.21.2 allows JavaEL Injection (issue 1 of 2). |
CVE-2020-10204 | High | 7.2 | 2020-04-01 | Sonatype Nexus Repository before 3.21.2 allows Remote Code Execution. |
CVE-2020-24622 | Medium | 4.9 | 2020-08-25 | In Sonatype Nexus Repository 3.26.1, an S3 secret key can be exposed by an admin user. |
CVE-2020-10203 | Medium | 4.8 | 2020-04-01 | Sonatype Nexus Repository before 3.21.2 allows XSS. |
CVE-2014-9389 | | 2015-01-05 | Directory traversal vulnerability in Sonatype Nexus OSS and Pro before 2.11.1-01 allows remote attackers to read or write to arbitrary files via unspecified ve… | |
CVE-2014-2034 | | 2014-04-01 | Unspecified vulnerability in Sonatype Nexus OSS and Pro 2.4.0 through 2.7.1 allows attackers to create arbitrary user accounts via unknown vectors related to "… | |
CVE-2014-0792 | | 2014-01-17 | Sonatype Nexus 1.x and 2.x before 2.7.1 allows remote attackers to create arbitrary objects and execute arbitrary code via unspecified vectors related to unmar… |