Skip to content
OpenAdvisories

Vendor

Sonatype

49 known vulnerabilities.

Products

Nexus Repository 3 29 Nexus Repository 16 Nexus Repository Manager 3 IQ Server 1 org.sonatype.security:security-system 1 org.sonatype.nexus:nexus-security 1 org.sonatype.nexus.common.components:nexus-security 1
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 5.1
    CVE-2024-5083 Public exploit

    Nexus Repository 2 - Stored XSS

    A stored Cross-site Scripting vulnerability has been discovered in Sonatype Nexus Repository 2 This issue affects Nexus Repository 2 OSS/Pro versions up to and including 2.15.1.

    Sonatype Nexus Repository
  • Medium 5.9
    CVE-2024-5764 Public exploit

    Nexus Repository 3 - Static hard-coded encryption passphrase used by default

    Use of Hard-coded Credentials vulnerability in Sonatype Nexus Repository has been discovered in the code responsible for encrypting any secrets stored in the Nexus Repository configuration database (SMTP or HTTP proxy credentials, user tokens, tokens, among o…

    Sonatype Nexus Repository