nexus_repository_manager vulnerabilities
CVEs whose affected-version data names the nexus_repository_manager package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.
33 CVEsRSS
CVE-2020-15870Medium· 6.1Sonatype Nexus Repository Manager OSS/Pro versions before 3.25.1 allow XSS (Issue 2 of 2).
Sonatype Nexus Repository Manager OSS/Pro versions before 3.25.1 allow XSS (Issue 2 of 2).
▾ Sunlitsonatype · nexus_repository_managerEPSS 0.68%via NVD
CVE-2020-15869Medium· 5.4Sonatype Nexus Repository Manager OSS/Pro versions before 3.25.1 allow XSS (issue 1 of 2).
Sonatype Nexus Repository Manager OSS/Pro versions before 3.25.1 allow XSS (issue 1 of 2).
▾ Sunlitsonatype · nexus_repository_managerEPSS 0.68%via NVD
CVE-2020-11753High· 8.8An issue was discovered in Sonatype Nexus Repository Manager in versions 3.21.1 and 3.22.0
An issue was discovered in Sonatype Nexus Repository Manager in versions 3.21.1 and 3.22.0. It is possible for a user with appropriate privileges to create, modify, and execute scripting tasks without use of the UI or API. NOTE: in 3.22.…
▾ Twilightsonatype · nexus_repository_managerEPSS 1.7%via NVD