Sonatype Nexus Repository

• CVE-2026-17593 High 7.2 Nexus Repository - Arbitrary Class Instantiation via Unsafe Realm Configuration 0.8%
• CVE-2026-7494 Medium 5.3 Nexus Repository - SSRF in SSL Certificate Retrieval 0.2%
• CVE-2026-10748 High 8.6 Nexus Repository 3 - Remote Code Execution via License Deserialization 0.3%
• CVE-2026-7308 Medium 5.1 Nexus Repository 3 - Stored Cross-Site Scripting (XSS) via HTML Browse Page 0.3%
• CVE-2026-3048 Medium 5.1 Nexus Repository 3 - Improper LDAP Referral Handling 0.2%
• CVE-2026-5189 Critical 9.2 Nexus Repository 3 - Hardcoded Credential in Internal Database Component 0.5%
• CVE-2026-3199 Critical 9.4 Nexus Repository 3 - Authenticated Remote Code Execution via Task Property Injection 0.6%
• CVE-2026-3438 Medium 5.1 Nexus Repository 3 - Reflected Cross-Site Scripting (XSS) in ?describe Pages 0.4%
• CVE-2026-0600 Medium 6.2 Nexus Repository 3 - Server-Side Request Forgery in Proxy Repository Configuration 0.3%
• CVE-2026-0601 Medium 5.1 Nexus Repository 3 - Cross-Site Scripting 0.4%
• CVE-2025-13488 Medium 5.1 Nexus Repository 3 - Stored Cross-Site Scripting (XSS) 0.4%
• CVE-2025-9868 High 8.7 Nexus Repository 2 - SSRF Vulnerability in Remote Browser Plugin 0.5%
• CVE-2024-5082 High 7.1 Nexus Repository 2 - Remote Code Execution 3.1%
• CVE-2024-5083 Medium 5.1 Nexus Repository 2 - Stored XSS 0.4%
• CVE-2024-5764 Medium 5.9 Nexus Repository 3 - Static hard-coded encryption passphrase used by default 0.4%
• CVE-2024-4956 High 7.5 Nexus Repository 3 - Path Traversal 19.2%