Skip to contentOctopus Server vulnerabilities
- octopus serverIn affected versions of Octopus Deploy, there is no logging of changes to artifacts within...CVE-2022-305325.3 Medium
- octopus serverIn affected versions of Octopus Server the help sidebar can be customized to include a Cross-Site...CVE-2022-298906.1 Medium
- octopus serverIn affected versions of Octopus Server an Insecure Direct Object Reference vulnerability exists...CVE-2022-18815.3 Medium
- octopus serverWhen generating a user invitation code in Octopus Server, the validity of this code can be set...CVE-2022-16707.5 High
- octopus serverPermissions were not properly verified in the API on projects using version control in Git. This...CVE-2022-15024.3 Medium
- octopus server, deploy +1 moreIn affected Octopus Server versions when the server HTTP and HTTPS bindings are configured to...CVE-2022-231846.1 Medium
- octopus server, deploy +1 moreWhen Octopus Server is installed using a custom folder location, folder ACLs are not set...CVE-2021-265567.8 High
- octopus serverIn Octopus Server after version 2018.8.2 if the Octopus Server Web Request Proxy is configured...CVE-2021-318207.5 High
- octopus serverWhen configuring Octopus Server if it is configured with an external SQL database, on initial...CVE-2021-318177.5 High
- octopus serverWhen configuring Octopus Server if it is configured with an external SQL database, on initial...CVE-2021-318167.5 High
- octopus serverAffected versions of Octopus Server are prone to an authenticated SQL injection vulnerability in...CVE-2021-318184.3 Medium
- octopus serverCleartext storage of sensitive information in multiple versions of Octopus Server where in...CVE-2021-301837.5 High
- octopus serverAn issue was discovered in Octopus Deploy 3.4. A deployment target can be configured with an...CVE-2020-161974.3 Medium
- octopus serverA persistent cross-site scripting (XSS) vulnerability in Octopus Server 3.4.0 through 2019.10.5...CVE-2019-190855.4 Medium
- octopus serverIn Octopus Deploy 2019.7.3 through 2019.7.9, in certain circumstances, an authenticated user with...CVE-2019-156984.3 Medium
- octopus serverIn Octopus Deploy versions 2018.8.4 to 2019.7.6, when a web request proxy is configured, an...CVE-2019-155076.5 Medium
- octopus tentacle, server +1 moreIn Octopus Tentacle versions 3.0.8 to 5.0.0, when a web request proxy is configured, an...CVE-2019-155086.5 Medium
- octopus deploy, server +1 moreIn Octopus Deploy 2019.4.0 through 2019.6.6 and 2019.7.0 through 2019.7.7, an authenticated...CVE-2019-145254.9 Medium
- octopus deploy, server +1 moreIn Octopus Deploy 2019.1.0 through 2019.3.1 and 2019.4.0 through 2019.4.5, an authenticated user...CVE-2019-116328.1 High
- octopus deploy, server +1 moreAn Information Exposure issue in the Terraform deployment step in Octopus Deploy before 2019.1.8 ...CVE-2019-89446.5 Medium
- octopus serverIn Octopus Deploy 2018.8.0 through 2018.9.x before 2018.9.1, an authenticated user with...CVE-2018-18850Public exploitEPSS 12.5%8.8 High
- octopus serverIn Octopus Deploy version 2018.5.1 to 2018.5.7, a user with Task View is able to view a password...CVE-2018-120897.5 High
- octopus serverIn Octopus Deploy 2018.4.4 through 2018.5.1, Octopus variables that are sourced from the target...CVE-2018-113209.8 Critical
- octopus deploy, server +1 moreIn Octopus Deploy 3.x before 3.15.4, an authenticated user with PackagePush permission to upload...CVE-2017-113485.7 Medium