Sploitus

5 exploited vulnerabilities in Sonatype Nexus Repository Manager

Vulnerabilities with publicly known exploits

Vendors
Sonatype
With known exploits
5
Affected Sonatype Nexus Repository Manager versions
< 3.15.0, 2.14.6, 3.33.0, 3.38.0
Affected Sonatype Nexus versions
≤ 3.21.2

Vulnerabilities with exploits

Highest CVSS first — 4 of these already have exploit code on Sploitus

CVE-2019-7238 10 exploits
CVSS 9.8 CRITICAL 2019-03-21FIX AVAILABLE
CVE-2020-11444 5 exploits
CVSS 8.8 HIGH 2020-04-02FIX AVAILABLE
CVE-2018-5307 2 exploits
CVSS 6.1 MEDIUM 2018-02-09FIX AVAILABLE
CVE-2021-37152 1 exploit
CVSS 5.4 MEDIUM 2021-07-06FIX AVAILABLE
CVE-2022-27907
CVSS 4.3 MEDIUM 2022-03-30FIX AVAILABLE