# \#vulnerabilities

**URL:** https://community.sonatype.com/tag/vulnerabilities/52.md

[Latest](https://community.sonatype.com/latest.md) · [Categories](https://community.sonatype.com/categories.md) · [Tags](https://community.sonatype.com/tags.md)

---

## [Nexus RM3 OSS h2 vulnerability](https://community.sonatype.com/t/nexus-rm3-oss-h2-vulnerability/9179)

<div class="topic-metadata">

**Author:** [@atharva.inamdar](https://community.sonatype.com/u/atharva.inamdar)\
**Replies:** 5\
**Last updated:** [November 27, 2023, 2:56pm UTC](https://community.sonatype.com/t/nexus-rm3-oss-h2-vulnerability/9179 "2023-11-27T14:56:34Z")

</div>

NXRM3 version: 3.41.1-01 h2 DB: 1.4.200 Current version of h2 DB contains a few critical vulnerabilities: CVE-2021-23463 CVE-2021-42392 CVE-2022-23221 It seems these are fixed in latest 2.0.206+ versions. What’s th…

---

## [Sonartype Nexus Repository Manager - Vulnerability Scanner option](https://community.sonatype.com/t/sonartype-nexus-repository-manager-vulnerability-scanner-option/8858)

<div class="topic-metadata">

**Author:** [@prasad.cloud.user](https://community.sonatype.com/u/prasad.cloud.user)\
**Replies:** 4\
**Last updated:** [June 24, 2022, 7:34pm UTC](https://community.sonatype.com/t/sonartype-nexus-repository-manager-vulnerability-scanner-option/8858 "2022-06-24T19:34:49Z")

</div>

Hi Team, We are using Sonatype Nexus Repository Manager of Version OSS 3.30.0-01 and we are looking for an option to scan the packages being downloaded from the repositories whenever team perform build on their applicat…

---

## [NXRM Log4j Visualizer feature available to the community!](https://community.sonatype.com/t/nxrm-log4j-visualizer-feature-available-to-the-community/7995)

<div class="topic-metadata">

**Author:** [@glee](https://community.sonatype.com/u/glee)\
**Replies:** 0\
**Last updated:** [January 6, 2022, 6:27pm UTC](https://community.sonatype.com/t/nxrm-log4j-visualizer-feature-available-to-the-community/7995 "2022-01-06T18:27:19Z")

</div>

Hi Sonatype Community, Concerned about Log4j? We can help! The new Log4j visualizer in Nexus Repository 3.37.3 provides greater visibility into Maven Log4j component downloads impacted by CVE-2021-4428. This experimenta…

---

## [Nexus API: Finding Components With Vulnerabilities](https://community.sonatype.com/t/nexus-api-finding-components-with-vulnerabilities/5933)

<div class="topic-metadata">

**Author:** [@qasim.mohammed](https://community.sonatype.com/u/qasim.mohammed)\
**Replies:** 1\
**Last updated:** [February 24, 2021, 6:37pm UTC](https://community.sonatype.com/t/nexus-api-finding-components-with-vulnerabilities/5933 "2021-02-24T18:37:45Z")

</div>

Hi I’m wondering about the API capabilities of finding components with vulnerabilities in Nexus OOS. My use case is to create a Grafana dashboard which lists the number of components in each repository, and then the nu…

---

## [Multiple security vulnerabilities in the nexus Docker images](https://community.sonatype.com/t/multiple-security-vulnerabilities-in-the-nexus-docker-images/2091)

<div class="topic-metadata">

**Author:** [@eill](https://community.sonatype.com/u/eill)\
**Replies:** 1\
**Last updated:** [July 3, 2019, 1:24pm UTC](https://community.sonatype.com/t/multiple-security-vulnerabilities-in-the-nexus-docker-images/2091 "2019-07-03T13:24:45Z")

</div>

Hello, a couple days ago the company Kenna Security published the blog post about security problems in the most popular Docker containers. The detailed report also contains information about the nexus and nexus3 containe…