Skip to contentOctopus Deploy vulnerabilities
Newest
- octopus serverIn affected versions of Octopus Server where access is managed by an external authentication...CVE-2022-25729.8 Critical
- octopus serverIn affected versions of Octopus Server it is possible to reveal the existence of resources in a...CVE-2022-25085.3 Medium
- octopus serverIn affected versions of Octopus Server it is possible for a session token to be valid...CVE-2022-27829.1 Critical
- octopus serverIn affected versions of Octopus Server it is possible to use the Git Connectivity test function...CVE-2022-27808.1 High
- octopus serverIn affected versions of Octopus Server it is possible to reveal information about teams via the...CVE-2022-28286.5 Medium
- octopus serverIn affected versions of Octopus Server it was identified that when a sensitive value is a...CVE-2022-27205.3 Medium
- octopus serverIn affected versions of Octopus Server it was identified that a session cookie could be used as...CVE-2022-27835.3 Medium
- octopus serverIn affected versions of Octopus Server it was identified that the same encryption process was...CVE-2022-27815.3 Medium
- octopus serverIn affected versions of Octopus Deploy it is possible to bypass rate limiting on login using null...CVE-2022-27789.8 Critical
- octopus serverIn affected versions of Octopus Deploy it is possible to reveal the Space ID of spaces that the...CVE-2022-27604.3 Medium
- octopus serverIn affected versions of Octopus Deploy it is possible to upload a package to built-in feed with...CVE-2022-25286.5 Medium
- octopus serverIn affected versions of Octopus Deploy it is possible to perform a Regex Denial of Service...CVE-2022-20757.5 High
- octopus serverIn affected versions of Octopus Deploy it is possible to perform a Regex Denial of Service using...CVE-2022-20747.5 High
- octopus serverIn affected versions of Octopus Deploy it is possible to perform a Regex Denial of Service via...CVE-2022-20497.5 High
- octopus serverIn affected versions of Octopus Deploy it is possible to unmask sensitive variables by using...CVE-2022-19015.3 Medium
- octopus serverIn affected versions of Octopus Deploy, there is no logging of changes to artifacts within...CVE-2022-305325.3 Medium
- octopus serverIn affected versions of Octopus Server the help sidebar can be customized to include a Cross-Site...CVE-2022-298906.1 Medium
- octopus serverIn affected versions of Octopus Server an Insecure Direct Object Reference vulnerability exists...CVE-2022-18815.3 Medium
- octopus deploy server, octopus deploy +1 moreIn Octopus Server after version 2022.1.1495 and before 2022.1.2647 if private spaces were enabled...CVE-2022-20137.5 High
- octopus serverWhen generating a user invitation code in Octopus Server, the validity of this code can be set...CVE-2022-16707.5 High
- octopus serverPermissions were not properly verified in the API on projects using version control in Git. This...CVE-2022-15024.3 Medium
- octopus server, deploy +1 moreIn affected Octopus Server versions when the server HTTP and HTTPS bindings are configured to...CVE-2022-231846.1 Medium
- octopus tentacleWhen the Windows Tentacle docker image starts up it logs all the commands that it runs along with...CVE-2021-318215.5 Medium
- octopus tentacleWhen Octopus Tentacle is installed on a Linux operating system, the systemd service file...CVE-2021-318227.8 High
- octopus tentacleWhen Octopus Tentacle is installed using a custom folder location, folder ACLs are not set...CVE-2021-265577.8 High
- octopus server, deploy +1 moreWhen Octopus Server is installed using a custom folder location, folder ACLs are not set...CVE-2021-265567.8 High
- octopus halibutRemote Code Execution in HalibutCVE-2021-31819Fix available9.8 Critical
- octopus serverIn Octopus Server after version 2018.8.2 if the Octopus Server Web Request Proxy is configured...CVE-2021-318207.5 High
- octopus serverWhen configuring Octopus Server if it is configured with an external SQL database, on initial...CVE-2021-318177.5 High
- octopus serverWhen configuring Octopus Server if it is configured with an external SQL database, on initial...CVE-2021-318167.5 High
- octopus serverAffected versions of Octopus Server are prone to an authenticated SQL injection vulnerability in...CVE-2021-318184.3 Medium