Skip to content

Jfrog Artifactory vulnerabilities

jfrog artifactoryJFrog Artifactory Improper input validation leads to arbitrary file writeCVE-2023-42661Fix available7.2 HighMarch 7, 2024
jfrog artifactoryJFrog Artifactory Improper SSO Mechanism may lead to Exposure of Access TokensCVE-2023-42662Fix available9.3 CriticalMarch 7, 2024
jfrog artifactoryJFrog Artifactory Improper header input validation leads to email manipulation sent from the platformCVE-2023-42508Fix available6.5 MediumOctober 3, 2023
jfrog artifactoryJFrog Artifactory prior to 7.37.13 is vulnerable to Authentication Bypass, which can lead to...CVE-2022-0668Fix available5.3 MediumJanuary 8, 2023
jfrog artifactoryJFrog Artifactory prior to version 7.33.6 and 6.23.38, is vulnerable to CSRF ( Cross-Site Request...CVE-2021-23163Fix available3.1 LowJuly 6, 2022
jfrog artifactoryJFrog Artifactory prior to version 7.31.10 and 6.23.38 is vulnerable to Sensitive Data Exposure...CVE-2021-46687Fix available4.9 MediumJuly 6, 2022
jfrog artifactoryJFrog Artifactory prior to version 7.29.8 and 6.23.38 is vulnerable to Reflected Cross-Site...CVE-2021-45721Fix available6.1 MediumJuly 6, 2022
jfrog artifactoryJFrog Artifactory prior to version 7.28.0 and 6.23.38, is vulnerable to Broken Access Control,...CVE-2021-41834Fix available5.3 MediumMay 23, 2022
jfrog artifactoryJFrog Artifactory prior to 7.31.10, is vulnerable to Broken Access Control where a Project Admin...CVE-2021-45730Fix available6.0 MediumMay 19, 2022
jfrog artifactoryJFrog Artifactory before 7.36.1 and 6.23.41, is vulnerable to Insecure Deserialization of...CVE-2022-0573Fix available8.8 HighMay 16, 2022
jfrog artifactoryJFrog Artifactory before 7.31.10, is vulnerable to Broken Access Control where a project admin...CVE-2021-46270Fix available2.7 LowMarch 2, 2022
jfrog artifactoryJFrog Artifactory before 7.29.3 and 6.23.38, is vulnerable to Broken Access Control, a low...CVE-2021-45074Fix available4.3 MediumMarch 2, 2022
jfrog artifactoryJFrog Artifactory before 7.25.4 (Enterprise+ deployments only), is vulnerable to Blind SQL...CVE-2021-3860Fix available8.8 HighDecember 20, 2021
jfrog artifactoryJFrog Artifactory does not enforce default admin password changeCVE-2019-17444EPSS 69.4%9.8 CriticalOctober 12, 2020
jenkins project artifactory plugin, jfrog artifactory +1 morePasswords transmitted in plain text by Jenkins Artifactory PluginCVE-2020-2165Fix available7.5 HighMarch 25, 2020
jenkins project artifactory plugin, jfrog artifactory +1 morePasswords stored in plain text by Jenkins Artifactory PluginCVE-2020-2164Fix available6.5 MediumMarch 25, 2020
jfrog artifactoryIn JFrog Artifactory before 6.18, it is not possible to restrict either system or repository...CVE-2019-199377.2 HighMarch 16, 2020
jfrog artifactoryIn JFrog Artifactory 5.x and 6.x, insecure FreeMarker template processing leads to remote code...CVE-2020-7931Public exploitFix available8.8 HighJanuary 23, 2020
jenkins project artifactory plugin, jfrog artifactory +1 moreCross-site request forgery vulnerability in Jenkins Artifactory PluginCVE-2019-10324Fix available6.5 MediumMay 31, 2019
jenkins project artifactory plugin, jfrog artifactory +1 moreJenkins Artifactory Plugin missing permission checkCVE-2019-103234.3 MediumMay 31, 2019
jenkins project artifactory plugin, jfrog artifactory +1 moreJenkins Artifactory Plugin missing permission checkCVE-2019-103224.3 MediumMay 31, 2019
jenkins project artifactory plugin, jfrog artifactory +1 moreJenkins Artifactory Plugin cross-site request forgery vulnerabilityCVE-2019-103214.3 MediumMay 31, 2019
jfrog artifactoryJFrog Artifactory Pro 6.5.9 has Incorrect Access Control.CVE-2018-199719.8 CriticalApril 16, 2019
jfrog artifactoryAn issue was discovered in JFrog Artifactory 6.7.3. By default, the access-admin account is used...CVE-2019-9733EPSS 53.9%9.8 CriticalApril 11, 2019
jfrog artifactoryJenkins Artifactory Plugin stored old directly entered credentials unencrypted on diskCVE-2018-1000424Fix available7.8 HighJanuary 9, 2019
jfrog artifactoryJFrog Artifactory version since 5.11 contains a Cross ite Request Forgery (CSRF) vulnerability in...CVE-2018-10002068.8 HighJuly 13, 2018
jfrog artifactoryJFrog JFrog Artifactory version Prior to version 6.0.3, since version 4.0.0 contains a Directory...CVE-2018-10006237.2 HighJuly 9, 2018
jfrog artifactoryUnrestricted file upload vulnerability in ui/artifact/upload in JFrog Artifactory before 4.16...CVE-2016-10036Public exploitEPSS 25.2%9.8 CriticalMay 1, 2018
jfrog artifactoryJFrog Artifactory before 4.11 allows remote attackers to execute arbitrary code via an LDAP...CVE-2016-65019.8 CriticalDecember 9, 2016