Nexus Repository Manager
Approved changes feed: RSS · Atom
cpe:2.3:a:sonatype:nexus_repository_manager:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Sonatype (4f13373e-a28c-5625-a507-2b5658f30fd0) |
|---|---|
| Product | Nexus Repository Manager (b0d475df-7c29-5589-9f88-bb4315bcf5a7) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from purl2cpe mapping |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:docker/sonatype/nexus |
purl2cpe | 2026-06-01 10:16:49.041940 |
pkg:github/sonatype/docker-nexus |
purl2cpe | 2026-06-01 10:16:49.041944 |
pkg:github/sonatype/nexus-public |
purl2cpe | 2026-06-01 10:16:49.041947 |
pkg:sonatype/repomanager2 |
purl2cpe | 2026-06-01 10:16:49.041951 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2024-5764 |
vulnerable | 2026-06-08 06:56:17.398392 |
Nexus Repository 3 - Static hard-coded encryption passphrase used by default
Use of Hard-coded Credentials vulnerability in Sonatype Nexus Repository has been discovered in the code responsible for encrypting any secrets stored in the Nexus Repository configuration database (SMTP or HTTP proxy credentials, user tokens, tokens, among others). The affected versions relied on a static hard-coded encryption passphrase. While it was possible for an administrator to define an alternate encryption passphrase, it could only be done at first boot and not updated.
This issue affects Nexus Repository: from 3.0.0 through 3.72.0.
Published: 2024-10-23T14:47:55.783Z
Updated: 2024-10-23T15:55:05.124Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-27907 |
vulnerable | 2026-06-08 05:42:43.707507 |
Details available
Sonatype Nexus Repository Manager 3.x before 3.38.0 allows SSRF.
Published: 2022-03-30T15:51:37.000Z
Updated: 2024-08-03T05:41:11.001Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-43961 |
vulnerable | 2026-06-08 05:36:44.660320 |
Details available
Sonatype Nexus Repository Manager 3.36.0 allows HTML Injection.
Published: 2022-03-17T21:13:13.000Z
Updated: 2024-08-04T04:10:17.007Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-43293 |
vulnerable | 2026-06-08 05:36:43.090698 |
Details available
Sonatype Nexus Repository Manager 3.x before 3.36.0 allows a remote authenticated attacker to potentially perform network enumeration via Server Side Request Forgery (SSRF).
Published: 2021-11-04T17:51:51.000Z
Updated: 2024-08-04T03:55:28.466Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-42568 |
vulnerable | 2026-06-08 05:35:22.356320 |
Details available
Sonatype Nexus Repository Manager 3.x through 3.35.0 allows attackers to access the SSL Certificates Loading function via a low-privileged account.
Published: 2021-11-02T12:42:39.000Z
Updated: 2024-08-04T03:38:49.389Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-37152 |
vulnerable | 2026-06-08 05:32:53.439242 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-34553 |
vulnerable | 2026-06-08 05:32:13.775815 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-30635 |
vulnerable | 2026-06-08 05:31:51.206927 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-29159 |
vulnerable | 2026-06-08 05:31:25.913377 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-29436 |
vulnerable | 2026-06-08 05:24:58.219079 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-15012 |
vulnerable | 2026-06-08 05:19:25.111455 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-11415 |
vulnerable | 2026-06-08 05:16:47.180741 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-9630 |
vulnerable | 2026-06-08 05:14:25.872211 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-9629 |
vulnerable | 2026-06-08 05:14:25.871691 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-7238 |
vulnerable | 2026-06-08 05:14:14.138537 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-5475 |
vulnerable | 2026-06-08 05:13:59.247247 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-16530 |
vulnerable | 2026-06-08 05:13:08.529890 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-15893 |
vulnerable | 2026-06-08 05:12:58.183407 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-15588 |
vulnerable | 2026-06-08 05:12:57.637456 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-14469 |
vulnerable | 2026-06-08 05:12:54.892093 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-11629 |
vulnerable | 2026-06-08 05:12:37.762892 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-5307 |
vulnerable | 2026-06-08 05:11:50.590697 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-5306 |
vulnerable | 2026-06-08 05:11:50.590255 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-16621 |
vulnerable | 2026-06-08 05:11:05.269429 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-16620 |
vulnerable | 2026-06-08 05:11:05.269096 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-16619 |
vulnerable | 2026-06-08 05:11:05.268645 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-12100 |
vulnerable | 2026-06-08 05:10:39.827974 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2017-17717 |
vulnerable | 2026-06-08 05:09:09.783532 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.