Vulnerabilidades em Sonatype

49 resultados
Análise Vexday

Sonatype apresenta 22 vulnerabilidades conhecidas com 2 classificadas como críticas, sendo 10 publicadas nos últimos 90 dias — indicativo de atividade recente na superfície de ataque. Nenhuma vulnerabilidade está sob exploração ativa conhecida (KEV zero), reduzindo a pressão operacional imediata. A fraqueza dominante é CWE-918 (Server-Side Request Forgery), típica em ferramentas de análise e gestão de dependências, requerendo atenção em ambientes com acesso a redes internas.

CVE-2024-5083MEDIUMNexus Repository 2 - Stored XSSEPSS 0.4%CVE-2026-3438MEDIUMNexus Repository 3 - Reflected Cross-Site Scripting (XSS) in ?describe PagesEPSS 0.4%CVE-2024-5764MEDIUMNexus Repository 3 - Static hard-coded encryption passphrase used by defaultEPSS 0.4%CVE-2026-17598MEDIUMNexus Repository 3 - Improper Input Validation in Scheduled Task ConfigurationEPSS 0.4%CVE-2026-17595MEDIUMNexus Repository 3 - JEXL Content Selector Sandbox Property-Read BypassEPSS 0.4%CVE-2026-14504HIGHNexus Repository 3 - Authorization Bypass in Component Upload APIEPSS 0.4%CVE-2026-14645MEDIUMNexus Repository 3 - Server-Side Request Forgery (SSRF) via Webhook: Global CapabilityEPSS 0.4%CVE-2025-13488MEDIUMNexus Repository 3 - Stored Cross-Site Scripting (XSS)EPSS 0.4%CVE-2026-14646MEDIUMNexus Repository 3 - Server-Side Request Forgery (SSRF) via HTTP RedirectEPSS 0.4%CVE-2026-97665HIGHNexus Repository 3 - Missing Authorization on NuGet Symbol Package UploadEPSS 0.3%CVE-2026-10748HIGHNexus Repository 3 - Remote Code Execution via License DeserializationEPSS 0.3%CVE-2026-0600MEDIUMNexus Repository 3 - Server-Side Request Forgery in Proxy Repository ConfigurationEPSS 0.3%CVE-2026-17597MEDIUMNexus Repository 3 - Server-Side Request Forgery via Email Configuration VerificationEPSS 0.3%CVE-2026-97667MEDIUMNexus Repository 3 - Stored Cross-Site Scripting in Browse UIEPSS 0.3%CVE-2026-77125HIGHNexus Repository 3 - Incorrect Authorization on Blobstore Group EndpointsEPSS 0.3%CVE-2026-77122MEDIUMNexus Repository 3 - Incorrect Authorization Allows Disclosure of Member Repository Metadata via Group Repository PermissionsEPSS 0.3%CVE-2026-113374HIGHNexus Repository 3 - Privilege Escalation via Rut Auth Capability CreationEPSS 0.3%CVE-2026-10741MEDIUMNexus Repository Manager - Incorrect Authorization allows credential disclosure via proxy repository configurationEPSS 0.3%CVE-2026-97712HIGHNexus Repository 3 - Privilege Escalation via Role ManagementEPSS 0.3%CVE-2026-7308MEDIUMNexus Repository 3 - Stored Cross-Site Scripting (XSS) via HTML Browse PageEPSS 0.3%