Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Release: Sonatype Nexus Repository 3.92.0 Clear all filters
TI-2026-06415 CVE-2026-7308 · GHSA-f5g6-q897-4w8f

Nexus Repository 3 - Stored Cross-Site Scripting (XSS) via HTML Browse Page

Priority LOW 23

An authenticated user with upload permission to a hosted repository can store content that causes arbitrary JavaScript to execute in the browser of any user who browses that repository directory via the HTML index page i…

CVSS 4.0MEDIUM 5.1 Network Low privileges User interaction EPSS 0.00255 Published 2026-05-11 Fixed in 3.92.0 CWE-79
TI-2026-02632 CVE-2026-3048 · GHSA-q3x4-wr9j-7qg3

Nexus Repository 3 - Improper LDAP Referral Handling

Priority LOW 22

An authenticated administrator who configures or tests LDAP connectivity in Sonatype Nexus Repository Manager versions 3.0.0 through 3.91.1 may be able to initiate unintended server-side connections when interacting with…

CVSS 4.0MEDIUM 5.1 Network High privileges No interaction EPSS 0.00171 Published 2026-05-11 Fixed in 3.92.0 CWE-502