Known vulnerabilities in Nexus Repository Manager 3

Version: 3
Software CPE: cpe:2.3:a:sonatype:nexus_repository_manager:*:*:*:*:*:*:*:*
Total vulnerabilities: 10
Public exploits: 1
Known exploited (KEV): 0
Highest CVSSv4 Score: 8.8

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting Nexus Repository Manager version 3 Nexus Repository Manager 3 is affected by 10 vulnerabilities: 1 high, 9 low Critical High Medium Low

Vulnerabilities (10)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU147241 - Incorrect Authorization
CVE-2026-77122
CWE-863 Low
No
No
3.96.0-09 07.09.2026 SB2026090751
#VU147240 - Insertion of Sensitive Information Into Sent Data
CVE-2026-77123
CWE-201 Low
No
No
3.96.0-09 07.09.2026 SB2026090751
#VU147239 - Incorrect Authorization
CVE-2026-77125
CWE-863 Low
No
No
3.96.0-09 07.09.2026 SB2026090751
#VU147238 - Incomplete List of Disallowed Inputs
CVE-2026-77124
CWE-184 Low
No
No
3.96.0-09 07.09.2026 SB2026090751
#VU131132 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2026-7308
CWE-79 Low
No
No
3.92.0-03 12.05.2026 SB2026051242
#VU131131 - Server-Side Request Forgery (SSRF)
CVE-2026-3048
CWE-918 Low
No
No
3.92.0-03 12.05.2026 SB2026051242
#VU125802 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2026-3438
CWE-79 Low
No
No
3.91.0-07 10.04.2026 SB2026041093
#VU121281 - Server-Side Request Forgery (SSRF)
CVE-2026-0600
CWE-918 Low
No
No
3.88.0-08 13.01.2026 SB20260113100
#VU120175 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2021-43961
CWE-79 Low
No
No
3.38.0 17.12.2025 SB2022031742
#VU89813 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2024-4956
CWE-22 High
Public exploit available
No
3.68.1-02 24.05.2024 SB2024052498