agentprime: sonatype-nexus-repository-3Every new CVE for sonatype-nexus-repository-3.https://agentprime.io/CVE-2026-113368: Nexus Repository 3 - Group Repository Member Authorization Bypasshttps://agentprime.io/advisories/CVE-2026-113368/https://agentprime.io/advisories/CVE-2026-113368/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 04 Nov 2026 20:01:20 GMTCVECVE-2026-113369: Nexus Repository 3 - Stored Cross-Site Scripting in OCI Attestations Tabhttps://agentprime.io/advisories/CVE-2026-113369/https://agentprime.io/advisories/CVE-2026-113369/CVSS 6.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 04 Nov 2026 20:01:20 GMTCVECVE-2026-113370: Nexus Repository 3 - SQL Injection in Reindex Search by Pattern Taskhttps://agentprime.io/advisories/CVE-2026-113370/https://agentprime.io/advisories/CVE-2026-113370/CVSS 7.7 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 04 Nov 2026 20:01:20 GMTCVECVE-2026-113371: Nexus Repository 3 - Insufficiently Protected Credentials in Repository Signing Passphrasehttps://agentprime.io/advisories/CVE-2026-113371/https://agentprime.io/advisories/CVE-2026-113371/CVSS 7.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 04 Nov 2026 20:01:20 GMTCVECVE-2026-113372: Nexus Repository 3 - Insufficiently Protected Credentials in YUM Repository Signing Keyhttps://agentprime.io/advisories/CVE-2026-113372/https://agentprime.io/advisories/CVE-2026-113372/CVSS 7.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 04 Nov 2026 20:01:19 GMTCVECVE-2026-113373: Nexus Repository 3 - Disabled or Locked Single Sign-On Users Can Sign In Againhttps://agentprime.io/advisories/CVE-2026-113373/https://agentprime.io/advisories/CVE-2026-113373/CVSS 9.1 (Critical). Critical: CVSS score 9.1: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Wed, 04 Nov 2026 20:01:19 GMTCVEcriticalCVE-2026-113374: Nexus Repository 3 - Privilege Escalation via Rut Auth Capability Creationhttps://agentprime.io/advisories/CVE-2026-113374/https://agentprime.io/advisories/CVE-2026-113374/CVSS 8.6 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 04 Nov 2026 20:01:19 GMTCVECVE-2026-97712: Nexus Repository 3 - Privilege Escalation via Role Managementhttps://agentprime.io/advisories/CVE-2026-97712/https://agentprime.io/advisories/CVE-2026-97712/CVSS 8.7 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 15 Oct 2026 15:34:40 GMTCVECVE-2026-97667: Nexus Repository 3 - Stored Cross-Site Scripting in Browse UIhttps://agentprime.io/advisories/CVE-2026-97667/https://agentprime.io/advisories/CVE-2026-97667/CVSS 5.1 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 15 Oct 2026 15:34:40 GMTCVECVE-2026-97666: Nexus Repository 3 - Unsafe Reflection in ExtDirect Repository Endpointhttps://agentprime.io/advisories/CVE-2026-97666/https://agentprime.io/advisories/CVE-2026-97666/CVSS 6.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 15 Oct 2026 15:34:40 GMTCVECVE-2026-97665: Nexus Repository 3 - Missing Authorization on NuGet Symbol Package Uploadhttps://agentprime.io/advisories/CVE-2026-97665/https://agentprime.io/advisories/CVE-2026-97665/CVSS 7.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 15 Oct 2026 15:34:40 GMTCVECVE-2026-77121: Nexus Repository 3 - Denial of Service via Unbounded Maven POM Metadata Fieldshttps://agentprime.io/advisories/CVE-2026-77121/https://agentprime.io/advisories/CVE-2026-77121/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 02 Sep 2026 17:03:26 GMTCVECVE-2026-77122: Nexus Repository 3 - Incorrect Authorization Allows Disclosure of Member Repository Metadata via Group Repository Permissionshttps://agentprime.io/advisories/CVE-2026-77122/https://agentprime.io/advisories/CVE-2026-77122/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 02 Sep 2026 17:03:25 GMTCVECVE-2026-77123: Nexus Repository 3 - Webhook Secret Disclosure via Capability Read APIhttps://agentprime.io/advisories/CVE-2026-77123/https://agentprime.io/advisories/CVE-2026-77123/CVSS 6.0 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 02 Sep 2026 17:03:25 GMTCVECVE-2026-77124: Nexus Repository 3 - Script Execution Disable Setting Not Enforcedhttps://agentprime.io/advisories/CVE-2026-77124/https://agentprime.io/advisories/CVE-2026-77124/CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 02 Sep 2026 17:03:25 GMTCVECVE-2026-77125: Nexus Repository 3 - Incorrect Authorization on Blobstore Group Endpointshttps://agentprime.io/advisories/CVE-2026-77125/https://agentprime.io/advisories/CVE-2026-77125/CVSS 7.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 02 Sep 2026 17:03:25 GMTCVECVE-2026-14644: Nexus Repository 3 - Privilege Escalationhttps://agentprime.io/advisories/CVE-2026-14644/https://agentprime.io/advisories/CVE-2026-14644/CVSS 8.6 (High). Published by the CVE Program. Not analysed by agentprime yet.Fri, 07 Aug 2026 16:07:43 GMTCVECVE-2026-17594: Nexus Repository 3 - Authorization Bypass in Repository Creationhttps://agentprime.io/advisories/CVE-2026-17594/https://agentprime.io/advisories/CVE-2026-17594/CVSS 8.2 (High). Published by the CVE Program. Not analysed by agentprime yet.Fri, 07 Aug 2026 16:07:43 GMTCVECVE-2026-17595: Nexus Repository 3 - JEXL Content Selector Sandbox Property-Read Bypasshttps://agentprime.io/advisories/CVE-2026-17595/https://agentprime.io/advisories/CVE-2026-17595/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Fri, 07 Aug 2026 16:07:43 GMTCVECVE-2026-17596: Nexus Repository 3 - Stored Cross-Site Scripting (XSS) via Blob Store Namehttps://agentprime.io/advisories/CVE-2026-17596/https://agentprime.io/advisories/CVE-2026-17596/CVSS 6.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Fri, 07 Aug 2026 16:07:42 GMTCVECVE-2026-17598: Nexus Repository 3 - Improper Input Validation in Scheduled Task Configurationhttps://agentprime.io/advisories/CVE-2026-17598/https://agentprime.io/advisories/CVE-2026-17598/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Fri, 07 Aug 2026 16:07:42 GMTCVECVE-2026-17599: Nexus Repository 3 - Unverified Onboarding State on change-admin-password Endpointhttps://agentprime.io/advisories/CVE-2026-17599/https://agentprime.io/advisories/CVE-2026-17599/CVSS 6.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Fri, 07 Aug 2026 16:07:42 GMTCVECVE-2026-17600: Nexus Repository 3 - Session Not Invalidated on User Account Deletion or Deactivationhttps://agentprime.io/advisories/CVE-2026-17600/https://agentprime.io/advisories/CVE-2026-17600/CVSS 8.7 (High). Published by the CVE Program. Not analysed by agentprime yet.Fri, 07 Aug 2026 16:07:42 GMTCVECVE-2026-17601: Nexus Repository 3 - Wildcard Privilege Update Self-Escalation to Administratorhttps://agentprime.io/advisories/CVE-2026-17601/https://agentprime.io/advisories/CVE-2026-17601/CVSS 8.9 (High). Published by the CVE Program. Not analysed by agentprime yet.Fri, 07 Aug 2026 16:07:42 GMTCVECVE-2026-17603: Nexus Repository 3 - HikariCP connectionInitSql Injection RCE via DataStore Configuration APIhttps://agentprime.io/advisories/CVE-2026-17603/https://agentprime.io/advisories/CVE-2026-17603/CVSS 8.7 (High). Published by the CVE Program. Not analysed by agentprime yet.Fri, 07 Aug 2026 16:07:41 GMTCVECVE-2026-17597: Nexus Repository 3 - Server-Side Request Forgery via Email Configuration Verificationhttps://agentprime.io/advisories/CVE-2026-17597/https://agentprime.io/advisories/CVE-2026-17597/CVSS 5.1 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Fri, 07 Aug 2026 16:07:41 GMTCVECVE-2026-14646: Nexus Repository 3 - Server-Side Request Forgery (SSRF) via HTTP Redirecthttps://agentprime.io/advisories/CVE-2026-14646/https://agentprime.io/advisories/CVE-2026-14646/CVSS 4.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 14 Jul 2026 16:49:46 GMTCVECVE-2026-14645: Nexus Repository 3 - Server-Side Request Forgery (SSRF) via Webhook: Global Capabilityhttps://agentprime.io/advisories/CVE-2026-14645/https://agentprime.io/advisories/CVE-2026-14645/CVSS 5.1 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 14 Jul 2026 16:33:47 GMTCVECVE-2026-14504: Nexus Repository 3 - Authorization Bypass in Component Upload APIhttps://agentprime.io/advisories/CVE-2026-14504/https://agentprime.io/advisories/CVE-2026-14504/CVSS 8.2 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 14 Jul 2026 15:55:04 GMTCVE