Sonatype: >> Nexus Repository Manager >> 3.18.1-01 Security Vulnerabilities
Sonatype Nexus Repository Manager OSS/Pro versions before 3.25.1 allow XSS (issue 1 of 2).
CVSS Score
5.4
EPSS Score
0.007
Published
2020-07-31
Sonatype Nexus Repository Manager OSS/Pro versions before 3.25.1 allow XSS (Issue 2 of 2).
CVSS Score
6.1
EPSS Score
0.007
Published
2020-07-31
Sonatype Nexus Repository Manager OSS/Pro version before 3.25.1 allows Remote Code Execution.
CVSS Score
8.8
EPSS Score
0.022
Published
2020-07-31
An issue was discovered in Sonatype Nexus Repository Manager 2.x before 2.14.17 and 3.x before 3.22.1. Admin users can retrieve the LDAP server system username/password (as configured in nxrm) in cleartext.
CVSS Score
4.9
EPSS Score
0.006
Published
2020-04-27
Page 4