Sonatype Nexus Repository Manager 3 — known CVE vulnerabilities

Every CVE whose affected-product data names Sonatype Nexus Repository Manager 3, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (6)

• CVE-2020-11753 — CVSS 8.8 (high): An issue was discovered in Sonatype Nexus Repository Manager in versions 3.21.1 and 3.22.0. It is possible for a user with appropriate…
• CVE-2020-15871 — CVSS 8.8 (high): Sonatype Nexus Repository Manager OSS/Pro version before 3.25.1 allows Remote Code Execution.
• CVE-2021-40143 — CVSS 8.2 (high): Sonatype Nexus Repository 3.x through 3.33.1-01 is vulnerable to an HTTP header injection. By sending a crafted HTTP request, a remote…
• CVE-2020-15870 — CVSS 6.1 (medium): Sonatype Nexus Repository Manager OSS/Pro versions before 3.25.1 allow XSS (Issue 2 of 2).
• CVE-2020-15869 — CVSS 5.4 (medium): Sonatype Nexus Repository Manager OSS/Pro versions before 3.25.1 allow XSS (issue 1 of 2).
• CVE-2021-29158 — CVSS 4.9 (medium): Sonatype Nexus Repository Manager 3 Pro up to and including 3.30.0 has Incorrect Access Control.