sonatype
Security Risk Profile
Security Risk Score
Comprehensive risk assessment based on 188 vulnerabilities, EPSS scores, exploitation status, and remediation availability.
📅 Data spans from January 17, 2014 to present
Threat Assessment
Severity Distribution
Exploit Likelihood
Age Distribution
Common Weaknesses (CWE)
Most Affected Products
Recent Vulnerabilities
See more →Nexus Repository - Arbitrary Class Instantiation via Unsafe Realm Configuration
Nexus Repository 3 - JEXL Content Selector Sandbox Property-Read Bypass
Nexus Repository 3 - Authorization Bypass in Repository Creation
Nexus Repository 3 - Privilege Escalation
Nexus Repository 3 - Unverified Onboarding State on change-admin-password Endpoint
Nexus Repository 3 - Improper Input Validation in Scheduled Task Configuration
Nexus Repository 3 - Session Not Invalidated on User Account Deletion or Deactivation
Nexus Repository 3 - Stored Cross-Site Scripting (XSS) via Blob Store Name
Nexus Repository 3 - Wildcard Privilege Update Self-Escalation to Administrator
Nexus Repository 3 - Server-Side Request Forgery via Email Configuration Verification
Monitor sonatype in Real-Time
Get instant alerts when new vulnerabilities are discovered. Stay ahead of security threats with SecAlerts.