sonatype Summary

Latest vulnerabilities published by sonatype

JSON RSS CSV 🔔 Create Alert Trigger

11 May 2026

Cross-Site Scripting Vulnerability in Sonatype Nexus Repository
CVE-2026-7308
SonatypeNexus Repository5.1MEDIUM
Server-Side Connection Vulnerability in Sonatype Nexus Repository Manager
CVE-2026-3048
SonatypeNexus Repository5.1MEDIUM

15 April 2026

Hard-coded Credentials Vulnerability in Sonatype Nexus Repository Manager
CVE-2026-5189
SonatypeNexus Repository9.2CRITICAL

8 April 2026

Task Management Vulnerability in Sonatype Nexus Repository
CVE-2026-3199
SonatypeNexus Repository9.4CRITICAL
Reflected Cross-Site Scripting Vulnerability in Sonatype Nexus Repository
CVE-2026-3438
SonatypeNexus Repository5.1MEDIUM

14 January 2026

4 December 2025

Stored Cross-Site Scripting Vulnerability in Sonatype Nexus Repository
CVE-2025-13488
SonatypeNexus Repository5.1MEDIUM

8 October 2025

Server-Side Request Forgery in Sonatype Nexus Repository
CVE-2025-9868
SonatypeNexus Repository8.7HIGH

14 November 2024

23 October 2024

Hard-coded Credentials Vulnerability in Sonatype Nexus Repository
CVE-2024-5764
SonatypeNexus👾🟡6.5MEDIUM

16 May 2024

Unauthenticated Path Traversal Vulnerability in Sonatype Nexus Repository
CVE-2024-4956
SonatypeNexus Repository🥇📈👾🟡EPSS 94%📰7.5HIGH

21 March 2024

IQ Server vulnerable to Path Traversal attack
CVE-2024-1142
SonatypeIq Server5.4MEDIUM

3 October 2022

Weak Password Encryption in Sonatype Nexus Repository Manager LDAP Integration
CVE-2017-17717
SonatypeNexus Repository Manager9.8CRITICAL

30 March 2022

Server-Side Request Forgery Vulnerability in Sonatype Nexus Repository Manager
CVE-2022-27907
SonatypeNexus Repository Manager4.3MEDIUM

17 March 2022

HTML Injection Vulnerability in Sonatype Nexus Repository Manager
CVE-2021-43961
SonatypeNexus Repository Manager4.3MEDIUM

4 November 2021

Server Side Request Forgery in Sonatype Nexus Repository Manager 3.x
CVE-2021-43293
SonatypeNexus Repository Manager4.3MEDIUM

2 November 2021

Access Control Issue in Sonatype Nexus Repository Manager
CVE-2021-42568
SonatypeNexus Repository Manager4.3MEDIUM

7 September 2021

HTTP Header Injection Vulnerability in Sonatype Nexus Repository
CVE-2021-40143
SonatypeNexus Repository Manag...8.2HIGH

10 August 2021

Multiple Cross-Site Scripting Vulnerabilities in Sonatype Nexus Repository Manager
CVE-2021-37152
SonatypeNexus Repository Manager👾🟡5.4MEDIUM

18 June 2021

Arbitrary File Exposure Vulnerability in Sonatype Nexus Repository Manager
CVE-2021-34553
SonatypeNexus Repository Manager4.3MEDIUM

28 April 2021

Cross-Site Scripting Vulnerability in Nexus Repository Manager by Sonatype
CVE-2021-29159
SonatypeNexus Repository Manager6.1MEDIUM

27 April 2021

Directory Traversal Vulnerability in Sonatype Nexus Repository Manager
CVE-2021-30635
SonatypeNexus Repository Manager5.3MEDIUM

23 April 2021

Incorrect Access Control in Sonatype Nexus Repository Manager
CVE-2021-29158
SonatypeNexus Repository Manag...4.9MEDIUM