S
Vendor security profile2 actively exploited CVEs
sonatype
Product portfolio, patch evidence and exploitation signals in a single security scorecard
The data is combined from the CVE Program, NVD, CISA KEV and vendor security advisories.
Total CVEs41
Critical1
CISA KEV2
Public exploit3
Patch rate%51
Avg. CVSS6.8
12-month vulnerability rate
0
0
0
0
0
3
2
3
5
11
5
4
CVE KEV
CVE severity distribution
41toplam CVE
Critical1 (2%)
High18 (44%)
Medium19 (46%)
Low1 (2%)
Uncertain2 (5%)
Patch and exploitation view
%51
Verified patch
%5
CISA KEV
%7
Public exploit
21Patch available
0Partial
2Workaround
0Vendor: no patch
18Unknown
Latest vulnerabilities
8.7
CVE-2026-97712
Nexus Repository 3 - Privilege Escalation via Role Management
S
Patch verified
5.1
CVE-2026-97667
Nexus Repository 3 - Stored Cross-Site Scripting in Browse UI
S
Patch verified
6.9
CVE-2026-97666
Nexus Repository 3 - Unsafe Reflection in ExtDirect Repository Endpoint
S
Patch verified
7.1
CVE-2026-97665
Nexus Repository 3 - Missing Authorization on NuGet Symbol Package Upload
S
Patch verified
7.1
CVE-2026-77125
Incorrect authorization in Sonatype Nexus Repository Manager
S
Patch status unknownEPSS %0
7.2
CVE-2026-77124
Vulnerability in Sonatype Nexus Repository Manager
S
Patch status unknownEPSS %1
6.5
CVE-2026-77123
Information exposure in Sonatype Nexus Repository Manager
S
Patch status unknownEPSS %0
4.3
CVE-2026-77122
Incorrect authorization in Sonatype Nexus Repository Manager
S
Patch status unknownEPSS %0
6.5
CVE-2026-77121
Resource allocation without limits in Sonatype Nexus Repository Manager
S
Patch status unknownEPSS %0
8.6
CVE-2026-14644
Nexus Repository 3 - Privilege Escalation
S
Patch verifiedEPSS %0