Sploitus

16 exploited vulnerabilities in Nexus Repository Manager

Vulnerabilities with publicly known exploits

Vendors
Sonatype, Apache, Linux Mint, Canonical
With known exploits
16
Affected Sonatype Nexus Repository Manager versions
< 3.15.0, 2.14.9-01, 3.93.0, 3.14.0, 3.73.0, 2.14.6, 3.8, 3.33.0, 3.38.0
Affected Sonatype Nexus versions
< 3.21.2
Affected Apache Shiro versions
< 1.6.0

Vulnerabilities with exploits

Highest CVSS first — 13 of these already have exploit code on Sploitus

CVE-2019-7238 10 exploits
CVSS 9.8 CRITICAL 2019-03-21FIX AVAILABLE
CVE-2020-10204 6 exploits
CVSS 9.0 HIGH 2020-04-01FIX AVAILABLE
CVE-2020-10199 16 exploits
CVSS 9.0 HIGH 2020-04-01FIX AVAILABLE
CVE-2019-5475 8 exploits
CVSS 9.0 HIGH 2019-09-03FIX AVAILABLE
CVE-2020-11444 5 exploits
CVSS 8.8 HIGH 2020-04-02FIX AVAILABLE
CVE-2026-3329
CVSS 8.7 HIGH 2026-06-11
CVE-2024-4956 33 exploits
CVSS 7.5 HIGH 2024-05-16FIX AVAILABLE
CVE-2020-13933 6 exploits
CVSS 7.5 HIGH 2020-08-17FIX AVAILABLE
CVE-2018-16621 2 exploits
CVSS 7.2 HIGH 2018-11-15FIX AVAILABLE
CVE-2024-5082 2 exploits
CVSS 7.1 HIGH 2024-05-17FIX AVAILABLE
CVE-2024-5764 1 exploit
CVSS 6.5 MEDIUM 2024-10-23
CVE-2018-5307 2 exploits
CVSS 6.1 MEDIUM 2018-02-09FIX AVAILABLE
CVE-2018-5306 2 exploits
CVSS 6.1 MEDIUM 2018-02-09FIX AVAILABLE
CVE-2026-10741
CVSS 5.9 MEDIUM 2026-06-17FIX AVAILABLE
CVE-2021-37152 1 exploit
CVSS 5.4 MEDIUM 2021-07-06FIX AVAILABLE
CVE-2022-27907
CVSS 4.3 MEDIUM 2022-03-30FIX AVAILABLE