Vulnerability Reportsonatype/nexus3:3.97.3

sonatype/nexus3:latestsonatype/nexus3:3.97.3sonatype/nexus3:3.97.3-alpine

digestsha256:4b9a0efb605808c15927c751107b3f3308ae306c4b22715c96bf9bbabbb0e736

Executive Summary

Last scanned: Nov 1, 2026

Threat ScoreSAFE• The scan found one reachable-from-the-network finding with a low severity score of 3.36, which does not raise the risk level of this image.• No known exploited vulnerabilities are present in the scan results.• No vulnerabilities were found that only matter after the container is already compromised.• The image is published by a verified vendor and pinned by digest, which supports its trustworthiness.• The container runs as a non-root user (nexus) and exposes only port 8081.

0/100SAFE

ReputationVERIFIED• Verified Publisher (Trusted Vendor)• Pinned by digest (Immutable)

TRUSTED

This image is safe for production use. The scan found one low-severity issue reachable over the network, with a score of 3.36, and nothing actively exploited or only exploitable after a compromise. This issue does not change the overall risk picture, so it does not block production deployment. Continue routine scanning and patching as part of normal operations.

Already in good shape · 2 hardening steps left

Included in Pro

Scanning procedure

Vulnerability scan
Full CVE sweep across OS packages and app dependencies
Exploitability check
CVEs ranked by exploit probability (EPSS) and matched against CISA KEV
Reachability analysis
Symbol-level proof: is the vulnerable code even linked and callable in your binaries?
Runtime verification
Live-container probes: exposed endpoints, feature flags, real defaults
Supply chain analysis
Base-image lineage, package provenance and signatures — nothing slipped in unnoticed
Hardening recommendations
A hardened build plan — patch, remove unused packages, lock down the runtime — with parity tests proving nothing broke

Vulnerabilities

Vulnerability Log

1 total

CVE ID	Adjusted Severity	Package	Exploit Probability	Risk Context
CVE-2026-113730	LOW3.36	ognl:ognl 3.4.4 fixed in 3.4.13	0.4% Theoretical Threat	Directly Exposed

Want to check another image? Run a full scan with the Docker Security Scanner.