https://www.cloudrepo.io/vulnerabilities/nexus Up to 50 of the newest CVEs on record for Sonatype Nexus Repository 3.x (OSS, Community and Pro), from NVD and Sonatype's advisories, as the CloudRepo vulnerability lookup lists them. Each item gives the severity, the versions the record says are affected and a link to our page for the lowest of them. An item's date is the day NVD published the CVE, not the day we added it. Dataset pulled 2026-10-23. en-us https://www.cloudrepo.io/vulnerabilities/nexus/3-0-0 cloudrepo.io/vulnerabilities/nexus#CVE-2026-97712 Thu, 15 Oct 2026 00:00:00 GMT Sonatype Nexus Repository 3 allows a user that holds the role create or role update permission to grant roles and privileges that the account does not hold. Severity: High (CVSS 4.0 8.7, rated by Sonatype (CNA)). Affected versions: NVD has published no version configuration for this record (NVD status: Awaiting Analysis). Sonatype: All Sonatype Nexus Repository 3 CE/Pro versions from 3.0.0 up to and including 3.96.4. The lowest version we list that this affects is 3.0.0. Published by NVD on October 15, 2026. https://www.cloudrepo.io/vulnerabilities/nexus/3-28-0 cloudrepo.io/vulnerabilities/nexus#CVE-2026-97667 Thu, 15 Oct 2026 00:00:00 GMT Sonatype Nexus Repository 3 allows a user account that holds the edit permission on a hosted R repository to store script content in the metadata of an uploaded R package. Severity: Medium (CVSS 4.0 5.1, rated by Sonatype (CNA)). Affected versions: NVD has published no version configuration for this record (NVD status: Awaiting Analysis). Sonatype: All Sonatype Nexus Repository 3 CE/Pro versions from 3.28.0 up to, but not including, 3.97.0. The lowest version we list that this affects is 3.28.0. Published by NVD on October 15, 2026. https://www.cloudrepo.io/vulnerabilities/nexus/3-0-0 cloudrepo.io/vulnerabilities/nexus#CVE-2026-97666 Thu, 15 Oct 2026 00:00:00 GMT Sonatype Nexus Repository 3 allows an unauthenticated remote attacker to supply attacker-controlled input to a Java class loading call through an ExtDirect endpoint. Severity: Medium (CVSS 4.0 6.9, rated by Sonatype (CNA)). Affected versions: NVD has published no version configuration for this record (NVD status: Awaiting Analysis). Sonatype: All previous Sonatype Nexus Repository 3 CE/Pro versions up to and including 3.96.x. The lowest version we list that this affects is 3.0.0. Published by NVD on October 15, 2026. https://www.cloudrepo.io/vulnerabilities/nexus/3-95-0 cloudrepo.io/vulnerabilities/nexus#CVE-2026-97665 Thu, 15 Oct 2026 00:00:00 GMT A missing authorization check in Nexus Repository 3's NuGet Components API upload path allows an account holding only repository read and browse privileges to upload and persist NuGet symbol packages (.snupkg) to a hosted repository, bypassing the write-permission check enforced for ordinary package uploads. Severity: High (CVSS 4.0 7.1, rated by Sonatype (CNA)). Affected versions: NVD has published no version configuration for this record (NVD status: Awaiting Analysis). Sonatype: Nexus Repository 3 CE/Pro versions 3.95.0 through 3.96.x. The lowest version we list that this affects is 3.95.0. Published by NVD on October 15, 2026. https://www.cloudrepo.io/vulnerabilities/nexus/3-19-0 cloudrepo.io/vulnerabilities/nexus#CVE-2026-77125 Wed, 02 Sep 2026 00:00:00 GMT A vulnerability was identified in Sonatype Nexus Repository 3 in which two blobstore group management REST API endpoints did not correctly enforce the intended authorization check. Severity: High (CVSS 3.1 7.1, rated by NVD). Affected versions: NVD configuration (NVD status: Analyzed): from 3.19.0 (including), before 3.96.0. Sonatype: All Sonatype Nexus Repository 3 CE/Pro versions from 3.19.0 up to and including 3.95.x. The lowest version we list that this affects is 3.19.0. Published by NVD on September 2, 2026. https://www.cloudrepo.io/vulnerabilities/nexus/3-21-2 cloudrepo.io/vulnerabilities/nexus#CVE-2026-77124 Wed, 02 Sep 2026 00:00:00 GMT In affected versions of Nexus Repository 3, the script execution endpoint (POST /service/rest/v1/script/{name}/run) did not verify whether script execution had been administratively disabled. Severity: High (CVSS 3.1 7.2, rated by NVD). Affected versions: NVD configuration (NVD status: Analyzed): from 3.21.2 (including), before 3.96.0. Sonatype: All previous Sonatype Nexus Repository 3 CE/Pro versions from 3.21.2 up to and including 3.95.x. The lowest version we list that this affects is 3.21.2. Published by NVD on September 2, 2026. https://www.cloudrepo.io/vulnerabilities/nexus/3-2-0 cloudrepo.io/vulnerabilities/nexus#CVE-2026-77123 Wed, 02 Sep 2026 00:00:00 GMT Nexus Repository 3 contains a sensitive information disclosure vulnerability in the capability read API. Severity: Medium (CVSS 3.1 6.5, rated by NVD). Affected versions: NVD configuration (NVD status: Analyzed): from 3.2.0 (including), before 3.96.0. Sonatype: All Sonatype Nexus Repository 3 CE/Pro versions from 3.2.0 up to and including 3.95.x. The lowest version we list that this affects is 3.2.0. Published by NVD on September 2, 2026. https://www.cloudrepo.io/vulnerabilities/nexus/3-38-0 cloudrepo.io/vulnerabilities/nexus#CVE-2026-77122 Wed, 02 Sep 2026 00:00:00 GMT An authorization flaw in the REST API repository details endpoint (GET /service/rest/v1/repositories/{repositoryName}) in Sonatype Nexus Repository 3 allowed an account holding read or browse permission on a group repository to retrieve metadata for member repositories on which it held no direct permission, by… Severity: Medium (CVSS 3.1 4.3, rated by NVD). Affected versions: NVD configuration (NVD status: Analyzed): from 3.38.0 (including), before 3.96.0. Sonatype: All Sonatype Nexus Repository 3 CE/Pro versions from 3.38.0 up to (but not including) 3.96.0. The lowest version we list that this affects is 3.38.0. Published by NVD on September 2, 2026. https://www.cloudrepo.io/vulnerabilities/nexus/3-26-0 cloudrepo.io/vulnerabilities/nexus#CVE-2026-77121 Wed, 02 Sep 2026 00:00:00 GMT A user account with permission to deploy artifacts to a hosted Maven repository could upload a POM file containing an oversized metadata field. Severity: Medium (CVSS 3.1 6.5, rated by NVD). Affected versions: NVD configuration (NVD status: Analyzed): from 3.26.0 (including), before 3.95.0. Sonatype: Nexus Repository 3 CE/Pro versions 3.26 through 3.94.x. The lowest version we list that this affects is 3.26.0. Published by NVD on September 2, 2026. https://www.cloudrepo.io/vulnerabilities/nexus/3-20-0 cloudrepo.io/vulnerabilities/nexus#CVE-2026-17603 Fri, 07 Aug 2026 00:00:00 GMT Nexus Repository 3 did not sufficiently restrict which HikariCP connection-pool properties could be set through the DataStore configuration API. Severity: High (CVSS 3.1 8.8, rated by NVD). Affected versions: NVD configuration (NVD status: Analyzed): from 3.20.0 (including), before 3.95.0. Sonatype: All Nexus Repository 3 CE/Pro versions from 3.20.0 up to and including 3.94.x. The lowest version we list that this affects is 3.20.0. Published by NVD on August 7, 2026. https://www.cloudrepo.io/vulnerabilities/nexus/3-19-0 cloudrepo.io/vulnerabilities/nexus#CVE-2026-17601 Fri, 07 Aug 2026 00:00:00 GMT A user holding a permission to update privilege definitions could modify a wildcard privilege already assigned to their own role to grant broader permissions than they were authorized to hold, including full administrative access, without any additional authorization check or role reassignment. Severity: High (CVSS 3.1 7.2, rated by NVD). Affected versions: NVD configuration (NVD status: Analyzed): from 3.19.0 (including), before 3.95.0. Sonatype: All Sonatype Nexus Repository 3 CE/Pro versions from 3.19.0 through 3.94.x. The lowest version we list that this affects is 3.19.0. Published by NVD on August 7, 2026. https://www.cloudrepo.io/vulnerabilities/nexus/3-0-0 cloudrepo.io/vulnerabilities/nexus#CVE-2026-17600 Fri, 07 Aug 2026 00:00:00 GMT Sonatype Nexus Repository 3 did not immediately terminate a user's active login session or revoke their cached permissions when that user's account was deleted, deactivated, or had its password changed. Severity: High (CVSS 3.1 8.8, rated by NVD). Affected versions: NVD configuration (NVD status: Analyzed): from 3.0.0 (including), before 3.95.0. Sonatype: All Sonatype Nexus Repository CE/Pro versions prior to 3.95.0. The lowest version we list that this affects is 3.0.0. Published by NVD on August 7, 2026. https://www.cloudrepo.io/vulnerabilities/nexus/3-17-0 cloudrepo.io/vulnerabilities/nexus#CVE-2026-17599 Fri, 07 Aug 2026 00:00:00 GMT Nexus Repository 3 contained an endpoint used to change the administrator account password during initial onboarding. Severity: High (CVSS 3.1 7.2, rated by NVD). Affected versions: NVD configuration (NVD status: Analyzed): from 3.17.0 (including), before 3.95.0. Sonatype: All previous Nexus Repository 3 CE/Pro versions from 3.17.0 up to and including 3.94.x. The lowest version we list that this affects is 3.17.0. Published by NVD on August 7, 2026. https://www.cloudrepo.io/vulnerabilities/nexus/3-91-0 cloudrepo.io/vulnerabilities/nexus#CVE-2026-17598 Fri, 07 Aug 2026 00:00:00 GMT Sonatype Nexus Repository 3 did not properly filter internal configuration keys from user-supplied task properties when creating or updating a scheduled task through the administrative UI. Severity: Medium (CVSS 3.1 4.9, rated by NVD). Affected versions: NVD configuration (NVD status: Analyzed): from 3.91.0 (including), before 3.95.0. Sonatype: Sonatype Nexus Repository 3 CE/Pro versions 3.91.0 through 3.94.x. The lowest version we list that this affects is 3.91.0. Published by NVD on August 7, 2026. https://www.cloudrepo.io/vulnerabilities/nexus/3-0-0 cloudrepo.io/vulnerabilities/nexus#CVE-2026-17597 Fri, 07 Aug 2026 00:00:00 GMT Nexus Repository 3 contains a Server-Side Request Forgery (SSRF) vulnerability in the email configuration verification feature. Severity: Low (CVSS 3.1 2.7, rated by NVD). Affected versions: NVD configuration (NVD status: Analyzed): from 3.0.0 (including), before 3.95.0. Sonatype: All previous Sonatype Nexus Repository 3 CE/Pro versions up to and including 3.94.x. The lowest version we list that this affects is 3.0.0. Published by NVD on August 7, 2026. https://www.cloudrepo.io/vulnerabilities/nexus/3-16-0 cloudrepo.io/vulnerabilities/nexus#CVE-2026-17596 Fri, 07 Aug 2026 00:00:00 GMT Nexus Repository 3 was found to be vulnerable to stored cross-site scripting (XSS). Severity: Medium (CVSS 3.1 6.1, rated by NVD). Affected versions: NVD configuration (NVD status: Analyzed): from 3.16.0 (including), before 3.95.0. Sonatype: Sonatype Nexus Repository 3 CE/Pro versions 3.16.0 through 3.94.x. The lowest version we list that this affects is 3.16.0. Published by NVD on August 7, 2026. https://www.cloudrepo.io/vulnerabilities/nexus/3-15-0 cloudrepo.io/vulnerabilities/nexus#CVE-2026-17595 Fri, 07 Aug 2026 00:00:00 GMT Nexus Repository 3 did not fully sandbox JEXL expressions used in Content Selectors. Severity: Low (CVSS 3.1 2.7, rated by NVD). Affected versions: NVD configuration (NVD status: Analyzed): from 3.15.0 (including), before 3.95.0. Sonatype: All previous Sonatype Nexus Repository 3 CE/Pro versions from 3.15.0 up to and including 3.94.x. The lowest version we list that this affects is 3.15.0. Published by NVD on August 7, 2026. https://www.cloudrepo.io/vulnerabilities/nexus/3-0-0 cloudrepo.io/vulnerabilities/nexus#CVE-2026-17594 Fri, 07 Aug 2026 00:00:00 GMT Nexus Repository 3 CE/Pro versions 3.0.0 through 3.94.x contain an incorrect authorization vulnerability (CWE-863) in the repository-creation user interface. Severity: Medium (CVSS 3.1 4.9, rated by NVD). Affected versions: NVD configuration (NVD status: Analyzed): from 3.0.0 (including), before 3.95.0. Sonatype: All previous Sonatype Nexus Repository 3 CE/Pro versions 3.0.0 through 3.94.x. The lowest version we list that this affects is 3.0.0. Published by NVD on August 7, 2026. https://www.cloudrepo.io/vulnerabilities/nexus/3-0-0 cloudrepo.io/vulnerabilities/nexus#CVE-2026-17593 Fri, 07 Aug 2026 00:00:00 GMT An account holding the nexus:settings:update permission in Nexus Repository 3 (or the equivalent nexus:settings permission in the legacy Nexus Repository 2) could submit arbitrary values as realm identifiers through an internal configuration API that did not validate them against the set of registered realms. Severity: High (CVSS 3.1 7.2, rated by NVD). Affected versions: NVD configuration (NVD status: Analyzed): from 2.8.0 (including), before 3.95.0. Sonatype: All previous Sonatype Nexus Repository CE/Pro versions from 2.8.0 up to and including 3.94.x. The lowest version we list that this affects is 3.0.0. Published by NVD on August 7, 2026. https://www.cloudrepo.io/vulnerabilities/nexus/3-19-0 cloudrepo.io/vulnerabilities/nexus#CVE-2026-14644 Fri, 07 Aug 2026 00:00:00 GMT Nexus Repository 3 contained a privilege escalation vulnerability in the REST privileges API. Severity: High (CVSS 3.1 7.2, rated by NVD). Affected versions: NVD configuration (NVD status: Analyzed): from 3.19.0 (including), before 3.95.0. Sonatype: All previous Sonatype Nexus Repository 3 CE/Pro versions 3.19.0 through 3.94.x. The lowest version we list that this affects is 3.19.0. Published by NVD on August 7, 2026. https://www.cloudrepo.io/vulnerabilities/nexus/3-0-0 cloudrepo.io/vulnerabilities/nexus#CVE-2026-14646 Tue, 14 Jul 2026 00:00:00 GMT Nexus Repository 3 did not apply its existing Server-Side Request Forgery (SSRF) protections to HTTP redirect targets returned by proxy repository upstream servers. Severity: High (CVSS 3.1 7.7, rated by NVD). Affected versions: NVD configuration (NVD status: Analyzed): from 3.0.0 (including), before 3.94.0. Sonatype: All Sonatype Nexus Repository 3 CE/Pro versions from 3.0.0 up to and including 3.93.x. The lowest version we list that this affects is 3.0.0. Published by NVD on July 14, 2026. https://www.cloudrepo.io/vulnerabilities/nexus/3-0-0 cloudrepo.io/vulnerabilities/nexus#CVE-2026-14645 Tue, 14 Jul 2026 00:00:00 GMT Nexus Repository 3 does not validate the destination of the "Webhook: Global" capability's configured URL before making an outbound HTTP request, allowing a user holding the Capability Administration permission to cause the server to send requests to internal network locations (Server-Side Request Forgery). Severity: Medium (CVSS 3.1 5.5, rated by NVD). Affected versions: NVD configuration (NVD status: Analyzed): from 3.0.0 (including), before 3.94.0. Sonatype: All previous Sonatype Nexus Repository 3 CE/Pro versions up to and including 3.93.x. The lowest version we list that this affects is 3.0.0. Published by NVD on July 14, 2026. https://www.cloudrepo.io/vulnerabilities/nexus/3-88-0 cloudrepo.io/vulnerabilities/nexus#CVE-2026-14504 Tue, 14 Jul 2026 00:00:00 GMT An authorization bypass in Nexus Repository 3's component upload API allowed a user with only read/browse privileges on a Swift, Terraform, or Conda hosted repository to upload arbitrary artifacts, bypassing the intended write-permission check. Severity: Medium (CVSS 3.1 6.5, rated by NVD). Affected versions: NVD configuration (NVD status: Analyzed): from 3.88.0 (including), before 3.94.0. Sonatype: All previous Sonatype Nexus Repository 3 CE/Pro versions with Terraform hosted repositories (3.88.0+), Swift hosted repositories (3.89.0+), or Conda hosted repositories (3.91.0+), up to and including 3.93.x. The lowest version we list that this affects is 3.88.0. Published by NVD on July 14, 2026. https://www.cloudrepo.io/vulnerabilities/nexus/3-0-0 cloudrepo.io/vulnerabilities/nexus#CVE-2026-11403 Tue, 14 Jul 2026 00:00:00 GMT A vulnerability in Sonatype Nexus Repository Manager's format-specific API key generation may allow a remote attacker to gain unauthorized access to repository operations as a targeted user. Severity: High (CVSS 3.1 7.5, rated by NVD). Affected versions: NVD configuration (NVD status: Analyzed): from 3.0.0 (including), before 3.93.0. Sonatype: All Sonatype Nexus Repository 3.x CE/Pro versions before 3.93.0. The lowest version we list that this affects is 3.0.0. Published by NVD on July 14, 2026. https://www.cloudrepo.io/vulnerabilities/nexus/3-0-0 cloudrepo.io/vulnerabilities/nexus#CVE-2026-7494 Tue, 14 Jul 2026 00:00:00 GMT Nexus Repository 3 is vulnerable to Server-Side Request Forgery (SSRF) via the SSL Certificate Retrieval endpoint. Severity: Medium (CVSS 3.1 5.0, rated by NVD). Affected versions: NVD configuration (NVD status: Analyzed): from 3.0.0 (including), before 3.94.0. Sonatype: Sonatype Nexus Repository 3 CE/Pro versions 3.0.0 up to and including 3.93.x. The lowest version we list that this affects is 3.0.0. Published by NVD on July 14, 2026. https://www.cloudrepo.io/vulnerabilities/nexus/3-1-0 cloudrepo.io/vulnerabilities/nexus#CVE-2026-10741 Wed, 17 Jun 2026 00:00:00 GMT Sonatype Nexus Repository Manager before 3.93.0 contains an authorization vulnerability in the proxy repository configuration that allows a delegated repository administrator to disclose stored upstream proxy credentials. Severity: Medium (CVSS 3.1 4.9, rated by NVD). Affected versions: NVD configuration (NVD status: Analyzed): from 3.1.0 (including), before 3.93.0. Sonatype: All Sonatype Nexus Repository 3.x versions from 3.1.0 through 3.92.x. The lowest version we list that this affects is 3.1.0. Published by NVD on June 17, 2026. https://www.cloudrepo.io/vulnerabilities/nexus/3-0-0 cloudrepo.io/vulnerabilities/nexus#CVE-2026-10748 Tue, 16 Jun 2026 00:00:00 GMT An authenticated user with the nx-licensing-create privilege can upload a specially crafted license file to execute arbitrary operating system commands as the Nexus process user in Sonatype Nexus Repository 3 versions before 3.92.0. Severity: High (CVSS 3.1 7.2, rated by NVD). Affected versions: NVD configuration (NVD status: Analyzed): from 3.0.0 (including), before 3.92.0. Sonatype: All Sonatype Nexus Repository 3.x CE/Pro versions before 3.92.0. The lowest version we list that this affects is 3.0.0. Published by NVD on June 16, 2026. https://www.cloudrepo.io/vulnerabilities/nexus/3-0-0 cloudrepo.io/vulnerabilities/nexus#CVE-2026-3329 Thu, 11 Jun 2026 00:00:00 GMT A remote unauthenticated attacker may be able to conduct credential-guessing attacks against user accounts in Sonatype Nexus Repository via authentication endpoints. Severity: High (CVSS 3.1 7.5, rated by NVD). Affected versions: NVD configuration (NVD status: Analyzed): from 3.0.0 (including), before 3.93.0. Sonatype: All Sonatype Nexus Repository versions from 3.0.0 up to and including 3.92.x. The lowest version we list that this affects is 3.0.0. Published by NVD on June 11, 2026. https://www.cloudrepo.io/vulnerabilities/nexus/3-6-0 cloudrepo.io/vulnerabilities/nexus#CVE-2026-7308 Mon, 11 May 2026 00:00:00 GMT An authenticated user with upload permission to a hosted repository can store content that causes arbitrary JavaScript to execute in the browser of any user who browses that repository directory via the HTML index page in Sonatype Nexus Repository versions 3.6.0 through versions before 3.92.0. Severity: Medium (CVSS 3.1 5.4, rated by NVD). Affected versions: NVD configuration (NVD status: Analyzed): from 3.6.0 (including), before 3.93.0. Sonatype: Sonatype Nexus Repository 3.6.0 through 3.91.x (CE/Pro). The lowest version we list that this affects is 3.6.0. Published by NVD on May 11, 2026. https://www.cloudrepo.io/vulnerabilities/nexus/3-0-0 cloudrepo.io/vulnerabilities/nexus#CVE-2026-3048 Mon, 11 May 2026 00:00:00 GMT An authenticated administrator who configures or tests LDAP connectivity in Sonatype Nexus Repository Manager versions 3.0.0 through 3.91.1 may be able to initiate unintended server-side connections when interacting with a malicious LDAP server. Severity: Low (CVSS 3.1 3.8, rated by NVD). Affected versions: NVD configuration (NVD status: Analyzed): from 3.0.0 (including), before 3.92.0. Sonatype: Sonatype Nexus Repository 3.0.0 through 3.91.x (CE/Pro). The lowest version we list that this affects is 3.0.0. Published by NVD on May 11, 2026. https://www.cloudrepo.io/vulnerabilities/nexus/3-0-0 cloudrepo.io/vulnerabilities/nexus#CVE-2026-5189 Wed, 15 Apr 2026 00:00:00 GMT CWE-798: Use of Hard-coded Credentials in Sonatype Nexus Repository Manager versions 3.0.0 through 3.70.5 allows an unauthenticated attacker with network access to gain unauthorized read/write access to the internal database and execute arbitrary OS commands as the Nexus process user. Severity: Critical (CVSS 3.1 9.8, rated by NVD). Affected versions: NVD configuration (NVD status: Analyzed): from 3.0.0 (including), before 3.71.0. Sonatype: All Sonatype Nexus Repository 3.x CE/Pro versions 3.0.0 through 3.70.5. The lowest version we list that this affects is 3.0.0. Published by NVD on April 15, 2026. https://www.cloudrepo.io/vulnerabilities/nexus/3-0-0 cloudrepo.io/vulnerabilities/nexus#CVE-2026-3438 Wed, 08 Apr 2026 00:00:00 GMT A reflected cross-site scripting vulnerability exists in Sonatype Nexus Repository versions 3.0.0 through 3.90.2 that allows unauthenticated remote attackers to execute arbitrary JavaScript in a victim's browser through a specially crafted URL. Severity: Medium (CVSS 3.1 6.1, rated by NVD). Affected versions: NVD configuration (NVD status: Analyzed): from 3.0.0 (including), before 3.91.0. Sonatype: All Sonatype Nexus Repository 3.x CE/Pro versions up to and including 3.90.x. The lowest version we list that this affects is 3.0.0. Published by NVD on April 8, 2026. https://www.cloudrepo.io/vulnerabilities/nexus/3-22-1 cloudrepo.io/vulnerabilities/nexus#CVE-2026-3199 Wed, 08 Apr 2026 00:00:00 GMT A vulnerability in the task management component of Sonatype Nexus Repository versions 3.22.1 through 3.90.2 allows an authenticated attacker with task creation permissions to execute arbitrary code, bypassing the nexus.scripts.allowCreation security control. Severity: High (CVSS 3.1 8.8, rated by NVD). Affected versions: NVD configuration (NVD status: Analyzed): from 3.22.1 (including), before 3.91.0. Sonatype: Sonatype Nexus Repository 3.22.1 through 3.90.x (CE/Pro). The lowest version we list that this affects is 3.22.1. Published by NVD on April 8, 2026. https://www.cloudrepo.io/vulnerabilities/nexus/3-82-0 cloudrepo.io/vulnerabilities/nexus#CVE-2026-0601 Wed, 14 Jan 2026 00:00:00 GMT A reflected cross-site scripting vulnerability exists in Nexus Repository 3 that allows unauthenticated attackers to execute arbitrary JavaScript in a victim's browser through a specially crafted request requiring user interaction. Severity: Medium (CVSS 4.0 5.1, rated by Sonatype (CNA)). Affected versions: NVD has published no version configuration for this record (NVD status: Deferred). Sonatype: Sonatype Nexus Repository 3.82.0 through 3.87.1 (CE/Pro). The lowest version we list that this affects is 3.82.0. Published by NVD on January 14, 2026. https://www.cloudrepo.io/vulnerabilities/nexus/3-0-0 cloudrepo.io/vulnerabilities/nexus#CVE-2026-0600 Wed, 14 Jan 2026 00:00:00 GMT Server-Side Request Forgery (SSRF) vulnerability in Sonatype Nexus Repository 3 versions 3.0.0 and later allows authenticated administrators to configure proxy repositories with URLs that can access unintended network destinations, potentially including cloud metadata services and internal network resources. Severity: Medium (CVSS 4.0 6.2, rated by Sonatype (CNA)). Affected versions: NVD has published no version configuration for this record (NVD status: Deferred). Sonatype: Sonatype Nexus Repository 3.0.0 and later (CE/Pro). The lowest version we list that this affects is 3.0.0. Published by NVD on January 14, 2026. https://www.cloudrepo.io/vulnerabilities/nexus/3-83-0 cloudrepo.io/vulnerabilities/nexus#CVE-2025-13488 Thu, 04 Dec 2025 00:00:00 GMT Due to a regression introduced in version 3.83.0, a security header is no longer applied to certain user-uploaded content served from repositories. Severity: Medium (CVSS 4.0 5.1, rated by Sonatype (CNA)). Affected versions: NVD has published no version configuration for this record (NVD status: Deferred). Sonatype: Sonatype Nexus Repository 3.x CE/Pro versions 3.83.0 through 3.86.2. The lowest version we list that this affects is 3.83.0. Published by NVD on December 4, 2025. https://www.cloudrepo.io/vulnerabilities/nexus/3-0-0 cloudrepo.io/vulnerabilities/nexus#CVE-2024-5764 Wed, 23 Oct 2024 00:00:00 GMT Use of Hard-coded Credentials vulnerability in Sonatype Nexus Repository has been discovered in the code responsible for encrypting any secrets stored in the Nexus Repository configuration database (SMTP or HTTP proxy credentials, user tokens, tokens, among others). Severity: Medium (CVSS 3.1 6.5, rated by NVD). Affected versions: NVD configuration (NVD status: Analyzed): from 3.0.0 (including), before 3.73.0. Sonatype: All previous Sonatype Nexus Repository Manager 3.x OSS/Pro versions up to and including 3.72.0. The lowest version we list that this affects is 3.0.0. Published by NVD on October 23, 2024. https://www.cloudrepo.io/vulnerabilities/nexus/3-0-0 cloudrepo.io/vulnerabilities/nexus#CVE-2024-4956 Thu, 16 May 2024 00:00:00 GMT Path Traversal in Sonatype Nexus Repository 3 allows an unauthenticated attacker to read system files. Severity: High (CVSS 3.1 7.5, rated by Sonatype (CNA)). Affected versions: NVD has published no version configuration for this record (NVD status: Deferred). Sonatype: All previous Sonatype Nexus Repository 3.x OSS/Pro versions up to and including 3.68.0. The lowest version we list that this affects is 3.0.0. Published by NVD on May 16, 2024. https://www.cloudrepo.io/vulnerabilities/nexus/3-0-0 cloudrepo.io/vulnerabilities/nexus#CVE-2022-27907 Wed, 30 Mar 2022 00:00:00 GMT Sonatype Nexus Repository Manager 3.x before 3.38.0 allows SSRF. Severity: Medium (CVSS 3.1 4.3, rated by NVD). Affected versions: NVD configuration (NVD status: Modified): from 3.0.0 (including), before 3.38.0. Sonatype: Nexus Repository 3 versions up to and including 3.37.3. The lowest version we list that this affects is 3.0.0. Published by NVD on March 30, 2022. https://www.cloudrepo.io/vulnerabilities/nexus/3-0-0 cloudrepo.io/vulnerabilities/nexus#CVE-2021-43961 Thu, 17 Mar 2022 00:00:00 GMT Sonatype Nexus Repository Manager 3.36.0 allows HTML Injection. Severity: Medium (CVSS 3.1 4.3, rated by NVD). Affected versions: NVD configuration (NVD status: Modified): from 3.0.0 (including), before 3.38.0. Sonatype: Nexus Repository 3 versions up to and including 3.37.3. The lowest version we list that this affects is 3.0.0. Published by NVD on March 17, 2022. https://www.cloudrepo.io/vulnerabilities/nexus/3-0-0 cloudrepo.io/vulnerabilities/nexus#CVE-2021-43293 Thu, 04 Nov 2021 00:00:00 GMT Sonatype Nexus Repository Manager 3.x before 3.36.0 allows a remote authenticated attacker to potentially perform network enumeration via Server Side Request Forgery (SSRF). Severity: Medium (CVSS 3.1 4.3, rated by NVD). Affected versions: NVD configuration (NVD status: Modified): from 3.0.0 (including), through 3.35.0. Sonatype publishes no affected range in the CVE record (assigned by MITRE). The lowest version we list that this affects is 3.0.0. Published by NVD on November 4, 2021. https://www.cloudrepo.io/vulnerabilities/nexus/3-0-0 cloudrepo.io/vulnerabilities/nexus#CVE-2021-42568 Tue, 02 Nov 2021 00:00:00 GMT Sonatype Nexus Repository Manager 3.x through 3.35.0 allows attackers to access the SSL Certificates Loading function via a low-privileged account. Severity: Medium (CVSS 3.1 4.3, rated by NVD). Affected versions: NVD configuration (NVD status: Modified): from 3.0.0 (including), through 3.35.0. Sonatype publishes no affected range in the CVE record (assigned by MITRE). The lowest version we list that this affects is 3.0.0. Published by NVD on November 2, 2021. https://www.cloudrepo.io/vulnerabilities/nexus/3-0-0 cloudrepo.io/vulnerabilities/nexus#CVE-2021-40143 Tue, 07 Sep 2021 00:00:00 GMT Sonatype Nexus Repository 3.x through 3.33.1-01 is vulnerable to an HTTP header injection. Severity: High (CVSS 3.1 8.2, rated by NVD). Affected versions: NVD configuration (NVD status: Analyzed): from 3.0.0 (including), before 3.34.1-01. Sonatype: Nexus Repository 3 versions up to and including 3.33.1. The lowest version we list that this affects is 3.0.0. Published by NVD on September 7, 2021. https://www.cloudrepo.io/vulnerabilities/nexus/3-0-0 cloudrepo.io/vulnerabilities/nexus#CVE-2021-37152 Tue, 10 Aug 2021 00:00:00 GMT Multiple XSS issues exist in Sonatype Nexus Repository Manager 3 before 3.33.0. Severity: Medium (CVSS 3.1 5.4, rated by NVD). Affected versions: NVD configuration (NVD status: Modified): from 3.0.0 (including), before 3.33.0. Sonatype: Nexus Repository 3 versions up to and including 3.32.0. The lowest version we list that this affects is 3.0.0. Published by NVD on August 10, 2021. https://www.cloudrepo.io/vulnerabilities/nexus/3-0-0 cloudrepo.io/vulnerabilities/nexus#CVE-2021-34553 Fri, 18 Jun 2021 00:00:00 GMT Sonatype Nexus Repository Manager 3.x before 3.31.0 allows a remote authenticated attacker to get a list of blob files and read the content of a blob file (via a GET request) without having been granted access. Severity: Medium (CVSS 3.1 4.3, rated by NVD). Affected versions: NVD configuration (NVD status: Modified): from 3.0.0 (including), before 3.31.0. Sonatype: Nexus Repository 3 versions up to and including 3.30.1. The lowest version we list that this affects is 3.0.0. Published by NVD on June 18, 2021. https://www.cloudrepo.io/vulnerabilities/nexus/3-23-0 cloudrepo.io/vulnerabilities/nexus#CVE-2021-29159 Wed, 28 Apr 2021 00:00:00 GMT A cross-site scripting (XSS) vulnerability has been discovered in Nexus Repository Manager 3.x before 3.30.1. Severity: Medium (CVSS 3.1 6.1, rated by NVD). Affected versions: NVD configuration (NVD status: Modified): from 3.23.0 (including), before 3.30.1. Sonatype: All Nexus Repository Manager 3 OSS/Pro versions between 3.23 and 3.30. The lowest version we list that this affects is 3.23.0. Published by NVD on April 28, 2021. https://www.cloudrepo.io/vulnerabilities/nexus/3-0-0 cloudrepo.io/vulnerabilities/nexus#CVE-2021-30635 Tue, 27 Apr 2021 00:00:00 GMT Sonatype Nexus Repository Manager 3.x before 3.30.1 allows a remote attacker to get a list of files and directories that exist in a UI-related folder via directory traversal (no customer-specific data is exposed). Severity: Medium (CVSS 3.1 5.3, rated by NVD). Affected versions: NVD configuration (NVD status: Modified): from 3.0 (including), before 3.30.1. Sonatype: Nexus Repository Manager 3 versions up to and including 3.30.0. The lowest version we list that this affects is 3.0.0. Published by NVD on April 27, 2021. https://www.cloudrepo.io/vulnerabilities/nexus/3-0-0 cloudrepo.io/vulnerabilities/nexus#CVE-2021-29158 Fri, 23 Apr 2021 00:00:00 GMT Sonatype Nexus Repository Manager 3 Pro up to and including 3.30.0 has Incorrect Access Control. Severity: Medium (CVSS 3.1 4.9, rated by NVD). Affected versions: NVD configuration (NVD status: Analyzed): through 3.30.0. Sonatype: Nexus Repository Manager 3 Pro versions up to and including 3.30.0. The lowest version we list that this affects is 3.0.0. Published by NVD on April 23, 2021. https://www.cloudrepo.io/vulnerabilities/nexus/3-0-0 cloudrepo.io/vulnerabilities/nexus#CVE-2020-29436 Thu, 17 Dec 2020 00:00:00 GMT Sonatype Nexus Repository Manager 3.x before 3.29.0 allows a user with admin privileges to configure the system to gain access to content outside of NXRM via an XXE vulnerability. Severity: Medium (CVSS 3.1 6.5, rated by NVD). Affected versions: NVD configuration (NVD status: Modified): from 3.0.0 (including), before 3.29.0. Sonatype publishes no affected range in the CVE record (assigned by MITRE). The lowest version we list that this affects is 3.0.0. Published by NVD on December 17, 2020. https://www.cloudrepo.io/vulnerabilities/nexus/3-0-0 cloudrepo.io/vulnerabilities/nexus#CVE-2020-24622 Tue, 25 Aug 2020 00:00:00 GMT In Sonatype Nexus Repository 3.26.1, an S3 secret key can be exposed by an admin user. Severity: Medium (CVSS 3.1 4.9, rated by NVD). Affected versions: NVD configuration (NVD status: Modified): from 3.0.0 (including), before 3.27.0. Sonatype: Nexus Repository 3 versions up to and including 3.26.1. The lowest version we list that this affects is 3.0.0. Published by NVD on August 25, 2020.