Skip to contentOctopus Server vulnerabilities
- octopus serverIn affected versions of Octopus Deploy, there is no logging of changes to artifacts within...CVE-2022-305325.3 Medium
- octopus serverIn affected versions of Octopus Server the help sidebar can be customized to include a Cross-Site...CVE-2022-298906.1 Medium
- octopus serverIn affected versions of Octopus Server an Insecure Direct Object Reference vulnerability exists...CVE-2022-18815.3 Medium
- octopus serverWhen generating a user invitation code in Octopus Server, the validity of this code can be set...CVE-2022-16707.5 High
- octopus server, deploy +1 moreIn affected Octopus Server versions when the server HTTP and HTTPS bindings are configured to...CVE-2022-231846.1 Medium
- octopus server, deploy +1 moreWhen Octopus Server is installed using a custom folder location, folder ACLs are not set...CVE-2021-265567.8 High
- octopus serverIn Octopus Server after version 2018.8.2 if the Octopus Server Web Request Proxy is configured...CVE-2021-318207.5 High
- octopus serverAn issue was discovered in Octopus Deploy 3.4. A deployment target can be configured with an...CVE-2020-161974.3 Medium
- octopus serverIn Octopus Deploy 2019.7.3 through 2019.7.9, in certain circumstances, an authenticated user with...CVE-2019-156984.3 Medium
- octopus deploy, server +1 moreIn Octopus Deploy 2019.4.0 through 2019.6.6 and 2019.7.0 through 2019.7.7, an authenticated...CVE-2019-145254.9 Medium
- octopus deploy, server +1 moreIn Octopus Deploy 2019.1.0 through 2019.3.1 and 2019.4.0 through 2019.4.5, an authenticated user...CVE-2019-116328.1 High
- octopus deploy, server +1 moreAn Information Exposure issue in the Terraform deployment step in Octopus Deploy before 2019.1.8 ...CVE-2019-89446.5 Medium
- octopus serverIn Octopus Deploy 2018.8.0 through 2018.9.x before 2018.9.1, an authenticated user with...CVE-2018-18850Public exploitEPSS 12.5%8.8 High
- octopus serverIn Octopus Deploy version 2018.5.1 to 2018.5.7, a user with Task View is able to view a password...CVE-2018-120897.5 High
- octopus serverIn Octopus Deploy 2018.4.4 through 2018.5.1, Octopus variables that are sourced from the target...CVE-2018-113209.8 Critical
- octopus deploy, server +1 moreIn Octopus Deploy 3.x before 3.15.4, an authenticated user with PackagePush permission to upload...CVE-2017-113485.7 Medium