Skip to main content

Vendors Questionnaires Investors News

0-Doubt — neutral IT/Security research

Browse Products Market reports Resellers Certified analysts Investors RFI/RFP questionnaires How trust works Nothing here is ranked by payment Help & FAQ API Privacy Terms Cookies

Sonatype SBOM Manager | 0-Doubt

Home
Vendors
Sonatype
Sonatype SBOM Manager

Home
Vendors
Application Security (ASPM)
Sonatype SBOM Manager

Sonatype SBOM Manager

AI-generated from public sourcesThe starting point for every profile: auto-generated by 0-Doubt from public vendor materials, and not yet confirmed by the vendor or an independent analyst. Nothing here is hidden or overstated — it simply has not been reviewed yet.Where every profile starts, before the vendor or an analyst has reviewed it. A higher label means a more independent source — not a better product.How trust works →Secure coding rating: 0/100How this score is computedA product with no known CVEs starts at a neutral score and climbs the longer it goes without one; a product with known CVEs is penalized by severity instead. This one has 61 known CVEs (vendor-level match — see the CVE list below) and is tracked as ~107 days old in our catalog (a stand-in for real release date, which we don't track). The platform admin controls the formula's weights.

Automates SBOM ingestion, monitoring, and compliance management for software

by Sonatype · sonatype.com · source ↗

Screenshots

1

Sonatype SBOM Manager — screenshot

Known CVEs (61)3 new

CVE-2026-97712 ↗new2026
Sonatype Nexus Repository 3 allows a user that holds the role create or role update permission to grant roles and privileges that the account does not hold. This can give the user more access than int…
CVE-2026-97667 ↗new2026
Sonatype Nexus Repository 3 allows a user account that holds the edit permission on a hosted R repository to store script content in the metadata of an uploaded R package. The script runs in the brows…
↗

Materials

0

No datasheets, whitepapers, case studies, videos, or demos linked yet.

Other Application Security (ASPM) products

Software Improvement Group Sigrid® · Software Improvement Group
SonarSource SonarQube · Sonar
SonarSource SonarQube Cloud · Sonar
Sonatype Lifecycle · Sonatype
Sprocket Security · Sprocket Security
StackHawk AppSec · StackHawk
StackHawk AppSec Intelligence Platform · StackHawk
StackHawk StackHawk · StackHawk

CVE-2026-97666

new2026

Sonatype Nexus Repository 3 allows an unauthenticated remote attacker to supply attacker-controlled input to a Java class loading call through an ExtDirect endpoint. This allows the attacker to learn …

…and 58 more · see all on the vendor page →