Where
-Infinity
0

Sonatype Nexus Repository 3Nexus Repository - Arbitrary Class Instantiation via Unsafe Realm Configuration

Risk 57
Severity
7.2
First published (updated )

Sonatype Nexus Repository 3Nexus Repository 3 - JEXL Content Selector Sandbox Property-Read Bypass

Risk 26
Severity
5.3
First published (updated )

Sonatype Nexus Repository 3Nexus Repository 3 - Authorization Bypass in Repository Creation

Risk 40
Severity
8.2
First published (updated )

Sonatype Nexus Repository 3Nexus Repository 3 - Privilege Escalation

Risk 62
Severity
8.6
First published (updated )

Sonatype Nexus Repository 3Nexus Repository 3 - Unverified Onboarding State on change-admin-password Endpoint

Risk 36
Severity
6.9
First published (updated )
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Sonatype Nexus Repository 3Nexus Repository 3 - Improper Input Validation in Scheduled Task Configuration

Risk 34
Severity
5.3
First published (updated )

Sonatype Nexus Repository 3Nexus Repository 3 - Session Not Invalidated on User Account Deletion or Deactivation

Risk 79
Severity
8.7
First published (updated )

Sonatype Nexus Repository 3Nexus Repository 3 - Stored Cross-Site Scripting (XSS) via Blob Store Name

Risk 55
Severity
6.3
First published (updated )

Sonatype Nexus Repository 3Nexus Repository 3 - Wildcard Privilege Update Self-Escalation to Administrator

Risk 76
Severity
8.9
First published (updated )

Sonatype Nexus Repository 3Nexus Repository 3 - Server-Side Request Forgery via Email Configuration Verification

Risk 24
Severity
5.1
First published (updated )
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Sonatype Nexus Repository 3Nexus Repository 3 - HikariCP connectionInitSql Injection RCE via DataStore Configuration API

Risk 79
Severity
8.7
First published (updated )

Sonatype Nexus Repository 3Nexus Repository 3 - Server-Side Request Forgery (SSRF) via HTTP Redirect

Risk 33
Severity
4.9
First published (updated )

Sonatype Nexus Repository 3Nexus Repository 3 - Server-Side Request Forgery (SSRF) via Webhook: Global Capability

Risk 33
Severity
5.1
First published (updated )

Sonatype Nexus Repository 3Nexus Repository 3 - Authorization Bypass in Component Upload API

Risk 43
Severity
8.2
First published (updated )

Sonatype Nexus Repository 3Nexus Repository - SSRF in SSL Certificate Retrieval

Risk 26
Severity
5.3
First published (updated )
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Sonatype Nexus Repository 3Nexus Repository 3 - Remote Code Execution via License Deserialization

Risk 72
Severity
8.6
First published (updated )

Sonatype Nexus Repository 3Nexus Repository 3 - Server-Side Request Forgery in Proxy Repository Configuration

Risk 33
Severity
6.2
EPSS
0.05%
First published (updated )

Sonatype Nexus Repository 3Nexus Repository 3 - Cross-Site Scripting

Risk 26
Severity
5.1
EPSS
0.15%
First published (updated )

Sonatype Nexus Repository 3Nexus Repository 3 - Path Traversal

Risk 65
Severity
7.5
EPSS
93.98%
First published (updated )

Sonatype Nexus Repository Manager 3Sonatype Nexus Repository Manager 3 Pro up to and including 3.30.0 has Incorrect Access Control.

Risk 30
Severity
4.9
First published (updated )
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Sonatype Nexus Repository Manager 3Sonatype Nexus Repository Manager OSS/Pro version before 3.25.1 allows Remote Code Execution.

Risk 77
Severity
8.8
First published (updated )

Sonatype Nexus Repository Manager 3XSS

Risk 34
Severity
5.4
First published (updated )

Sonatype Nexus Repository Manager 3XSS

Risk 38
Severity
6.1
First published (updated )

Sonatype Nexus Repository Manager 3An issue was discovered in Sonatype Nexus Repository Manager in versions 3.21.1 and 3.22.0. It is po…

Risk 79
Severity
8.8
First published (updated )

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203