CVE-2020-15870

MEDIUM 6.1CVE-2020-15870 · Published 31/07/2020 · updated 22/09/2026

In short

CVE-2020-15870 is a MEDIUM (CVSS 6.1) vulnerability affecting nexus repository manager (sonatype).
Chance of exploitation in the next 30 days (EPSS): 0.68%, higher than 52.3% of all vulnerabilities.
Fix: update to 3.25.1 or later.

Package	Affected versions	Patched versions
nexus repository manager sonatype	`< 3.25.1`	`3.25.1`

Sonatype Nexus Repository Manager OSS/Pro versions before 3.25.1 allow XSS (Issue 2 of 2).

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Package

Affected versions

Patched versions

< 3.25.1

3.25.1

More vulnerabilities in nexus repository manager

See all →