Skip to main content

Forum Ideas Office Hours Innovate

Courses Videos

Knowledge Base Documentation

SSC Maturity Survey STEPP Assessment Hosted Workshops

Sign In Submit a request Sign In

Forum Ideas Office Hours Innovate

Courses Videos

Knowledge Base Documentation

SSC Maturity Survey STEPP Assessment Hosted Workshops

Sonatype Support
Announcements
Security Advisories

Security Advisories

Important advisories of known security vulnerabilities in Sonatype products.

CVE-2018-5307 Nexus Repository 2 - Cross-Site Scripting XSS - 2018-02-08
CVE-2014-9389 Nexus Repository 2 - Directory Traversal - 2014-12-23
CVE-2014-2034 Nexus Repository 2 - REST API Account Creation - 2014-03-03

First
Previous

Terms of Service Privacy Policy Cookie Preferences
Copyright © 2008-present, Sonatype Inc. All rights reserved. Includes the third-party code listed here. Sonatype and Sonatype Nexus are trademarks of Sonatype, Inc. Apache Maven and Maven are trademarks of the Apache Software Foundation. M2Eclipse is a trademark of the Eclipse Foundation. All other trademarks are the property of their respective owners.