sonatype
Security Risk Profile
Security Risk Score
Comprehensive risk assessment based on 195 vulnerabilities, EPSS scores, exploitation status, and remediation availability.
📅 Data spans from January 17, 2014 to present
Threat Assessment
Severity Distribution
Exploit Likelihood
Age Distribution
Common Weaknesses (CWE)
Most Affected Products
Recent Vulnerabilities
See more →Nexus Repository 3 - Denial of Service via Unbounded Maven POM Metadata Fields
Nexus Repository 3 - Webhook Secret Disclosure via Capability Read API
Nexus Repository 3 - Incorrect Authorization Allows Disclosure of Member Repository Metadata via Group Repository Permissions
Nexus Repository 3 - Incorrect Authorization on Blobstore Group Endpoints
Nexus Repository 3 - Script Execution Disable Setting Not Enforced
Nexus Repository - Arbitrary Class Instantiation via Unsafe Realm Configuration
Nexus Repository 3 - JEXL Content Selector Sandbox Property-Read Bypass
Nexus Repository 3 - Authorization Bypass in Repository Creation
Nexus Repository 3 - Privilege Escalation
Monitor sonatype in Real-Time
Get instant alerts when new vulnerabilities are discovered. Stay ahead of security threats with SecAlerts.