Sonatype Nexus Repository Manager Unauthorized Access Vulnerability

Sonatype Nexus Repository Manager NXRM is a repository manager from Sonatype, Inc. that is used to manage, store, and distribute software, among other things. A security vulnerability exists in Sonatype NXRM OSS/Pro versions prior to 3.26.0. An attacker could exploit the vulnerability to access...

CVE-2020-15868

Sonatype Nexus Repository Manager OSS/Pro before 3.26.0 has Incorrect Access Control...

CVE-2020-15868

Sonatype Nexus Repository Manager OSS/Pro before 3.26.0 has Incorrect Access Control...

Improper access control

Sonatype Nexus Repository Manager OSS/Pro before 3.26.0 has Incorrect Access Control...

CVE-2020-15868

Sonatype Nexus Repository Manager OSS/Pro before 3.26.0 has Incorrect Access Control...

CVE-2020-15868

Affected product: Sonatype Nexus Repository Manager OSS/Pro prior to 3.26.0. Vulnerability: Incorrect Access Control (root cause). Impact: authenticated? no; the CNVD entry states an attacker could access unauthorized content with a specially crafted request. CVSS details: CVSS v3.1 base 7.5 (HIG...

Sonatype Nexus Repository Manager Remote Code Execution Vulnerability (CNVD-2021-32036)

Nexus Repository Manager is a repository manager from Sonatype that lets you proxy, collect, and manage your dependencies so you don't have to deal with a series of JARs as often, allowing you to distribute your software with ease.OSS is the open-source, free version, and Pro is the professional,...

CVE-2020-15871

Sonatype Nexus Repository Manager OSS/Pro version before 3.25.1 allows Remote Code Execution...

CVE-2020-15869

Sonatype Nexus Repository Manager OSS/Pro versions before 3.25.1 allow XSS issue 1 of 2...

CVE-2020-15870

Sonatype Nexus Repository Manager OSS/Pro versions before 3.25.1 allow XSS Issue 2 of 2...

CVE-2020-15871

Sonatype Nexus Repository Manager OSS/Pro version before 3.25.1 allows Remote Code Execution...

CVE-2020-15870

Sonatype Nexus Repository Manager OSS/Pro versions before 3.25.1 allow XSS Issue 2 of 2...

CVE-2020-15869

Sonatype Nexus Repository Manager OSS/Pro versions before 3.25.1 allow XSS issue 1 of 2...

Cross site scripting

Sonatype Nexus Repository Manager OSS/Pro versions before 3.25.1 allow XSS Issue 2 of 2...

Cross site scripting

Sonatype Nexus Repository Manager OSS/Pro versions before 3.25.1 allow XSS issue 1 of 2...

Remote code execution

Sonatype Nexus Repository Manager OSS/Pro version before 3.25.1 allows Remote Code Execution...

CVE-2020-15871

CVE-2020-15871 affects Sonatype Nexus Repository Manager OSS/Pro prior to 3.25.1, enabling remote code execution. The issue is described across multiple sources as a RCE vulnerability in Nexus Repository Manager OSS/Pro versions before 3.25.1. Remediation: upgrade to version 3.25.1 or later. Publ...

CVE-2020-15871

Sonatype Nexus Repository Manager OSS/Pro version before 3.25.1 allows Remote Code Execution...

CVE-2020-15869

Sonatype Nexus Repository Manager OSS/Pro versions before 3.25.1 allow XSS issue 1 of 2...

CVE-2020-15869

CVE-2020-15869 affects Sonatype Nexus Repository Manager OSS/Pro, versions before 3.25.1, due to an XSS vulnerability. The connected documents confirm the affected product and version range; no further technical details (exploit vectors, root cause specifics, or remediation) are provided in the s...