CVE-2020-11444高 8.8Sonatype Nexus Repository Manager 3.x up to and including 3.21.2 has Incorrect Access Control.
CVE-2020-10204高 7.2Sonatype Nexus Repository before 3.21.2 allows Remote Code Execution.
CVE-2020-10203中 4.8Sonatype Nexus Repository before 3.21.2 allows XSS.
CVE-2020-10199高 8.8悪用確認済み（CISA KEV）Sonatype Nexus Repository before 3.21.2 allows JavaEL Injection (issue 1 of 2).
CVE-2014-9389高 7.5Directory traversal vulnerability in Sonatype Nexus OSS and Pro before 2.11.1-01 allows remote attackers to read or write to arbitrary files…