Vulnerabilities > Sonatype > Nexus Repository Manager 3 > Medium

DATE CVE VULNERABILITY TITLE RISK
2021-04-23 CVE-2021-29158 Incorrect Authorization vulnerability in Sonatype Nexus Repository Manager 3 3.25.1
Sonatype Nexus Repository Manager 3 Pro up to and including 3.30.0 has Incorrect Access Control.
network
low complexity
sonatype CWE-863
4.9
4.9
2020-07-31 CVE-2020-15870 Cross-site Scripting vulnerability in Sonatype Nexus Repository Manager 3
Sonatype Nexus Repository Manager OSS/Pro versions before 3.25.1 allow XSS (Issue 2 of 2).
network
low complexity
sonatype CWE-79
6.1
6.1
2020-07-31 CVE-2020-15869 Cross-site Scripting vulnerability in Sonatype Nexus Repository Manager 3
Sonatype Nexus Repository Manager OSS/Pro versions before 3.25.1 allow XSS (issue 1 of 2).
network
low complexity
sonatype CWE-79
5.4
5.4