Approved changes feed: RSS · Atom

cpe:2.3:a:sonatype:nexus_repository_manager:2.15.2:*:*:*:*:*:*:*

part: a version: 2.15.2 update: *

VendorSonatype (4f13373e-a28c-5625-a507-2b5658f30fd0)
ProductNexus Repository Manager (b0d475df-7c29-5589-9f88-bb4315bcf5a7)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2025-9868 vulnerable 2026-06-08 07:47:10.141881 Nexus Repository 2 - SSRF Vulnerability in Remote Browser Plugin
Server-Side Request Forgery (SSRF) in the Remote Browser Plugin in Sonatype Nexus Repository 2.x up to and including 2.15.2 allows unauthenticated remote attackers to exfiltrate proxy repository credentials via crafted HTTP requests.
Published: 2025-10-08T17:07:45.543Z
Updated: 2025-10-08T17:23:36.055Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.