CVE-2020-15870
MediumCVSS 6.1Exploitation Probability (EPSS)
Elevated risk51th percentile - higher than 51% of all known CVEs
Summary
Sonatype Nexus Repository Manager OSS/Pro versions before 3.25.1 allow XSS (Issue 2 of 2). This enables injection of malicious script into the user interface.
Risk Assessment
The XSS vulnerability may allow an attacker to execute script in a logged-in user's browser, risking session or data theft. In an artifact repository this could lead to administrator account takeover.
Recommendation
Upgrade Sonatype Nexus Repository Manager OSS/Pro to version 3.25.1 or later. Additionally consider deploying security headers and browser content filtering.
Other vulnerabilities in Sonatype Nexus Repository Manager
See all- CVE-2026-5189Critical
Sonatype Nexus Repository Manager versions 3.0.0 through 3.70.5 contain hard-coded credentials (CWE-798), allowing an unauthenticated attacker with network access to gain unauthorized read/write access to the internal database and execute arbitrary OS commands as the Nexus process user. Exploitation requires the non-default nexus.orient.binaryListenerEnabled=true configuration.
- CVE-2019-7238CriticalActively exploited
Sonatype Nexus Repository Manager before 3.15.0 has incorrect access control, which may allow unauthorized users to perform operations they are not permitted to do.
- CVE-2017-17717Critical
Sonatype Nexus Repository Manager through 2.14.5 has weak password encryption with a hardcoded CMMDwoV value in the LDAP integration feature.
- CVE-2026-11403High
A vulnerability in Sonatype Nexus Repository Manager allows a remote attacker to gain unauthorized access to repository operations as a targeted user. Exploitation requires enabling a format-specific API key realm (NuGet API Key, Docker Bearer Token, or npm Bearer Token) and the targeted user having an active API key.
- CVE-2026-10741Medium
Vulnerability in Sonatype Nexus Repository Manager before version 3.93.0 allows a delegated repository administrator to disclose stored upstream proxy credentials via an authorization flaw in proxy repository configuration.
- CVE-2026-3048Low
An authenticated administrator who configures or tests LDAP connectivity in Sonatype Nexus Repository Manager versions 3.0.0 through 3.91.1 may be able to initiate unintended server-side connections when interacting with a malicious LDAP server.
- CVE-2021-29158Medium
Sonatype Nexus Repository Manager 3 Pro up to and including 3.30.0 has Incorrect Access Control. The flaw may allow unauthorized access to repository resources.
- CVE-2020-15871High
Sonatype Nexus Repository Manager OSS/Pro version before 3.25.1 allows Remote Code Execution.
- CVE-2020-15869Medium
Sonatype Nexus Repository Manager OSS/Pro versions before 3.25.1 allow XSS (issue 1 of 2). This enables injection of malicious script into the user interface.
- CVE-2020-11753High
An issue was discovered in Sonatype Nexus Repository Manager in versions 3.21.1 and 3.22.0. It is possible for a user with appropriate privileges to create, modify, and execute scripting tasks without use of the UI or API. NOTE: in 3.22.0, scripting is disabled by default (making this not exploitable).
Original NVD description (English source)
Sonatype Nexus Repository Manager OSS/Pro versions before 3.25.1 allow XSS (Issue 2 of 2).
Vulnerability data from NVD (NIST) · CISA KEV · EPSS