Skip to contentOctopus vulnerabilities
Newest
- octopus serverIn affected versions of Octopus Deploy it is possible to perform a Regex Denial of Service via...CVE-2022-20497.5 High
- octopus serverIn affected versions of Octopus Deploy it is possible to unmask sensitive variables by using...CVE-2022-19015.3 Medium
- octopus serverIn affected versions of Octopus Deploy, there is no logging of changes to artifacts within...CVE-2022-305325.3 Medium
- octopus serverIn affected versions of Octopus Server the help sidebar can be customized to include a Cross-Site...CVE-2022-298906.1 Medium
- octopus serverIn affected versions of Octopus Server an Insecure Direct Object Reference vulnerability exists...CVE-2022-18815.3 Medium
- octopus deploy server, octopus deploy +1 moreIn Octopus Server after version 2022.1.1495 and before 2022.1.2647 if private spaces were enabled...CVE-2022-20137.5 High
- octopus serverWhen generating a user invitation code in Octopus Server, the validity of this code can be set...CVE-2022-16707.5 High
- octopus serverPermissions were not properly verified in the API on projects using version control in Git. This...CVE-2022-15024.3 Medium
- octopus server, deploy +1 moreIn affected Octopus Server versions when the server HTTP and HTTPS bindings are configured to...CVE-2022-231846.1 Medium
- octopus tentacleWhen the Windows Tentacle docker image starts up it logs all the commands that it runs along with...CVE-2021-318215.5 Medium
- octopus tentacleWhen Octopus Tentacle is installed on a Linux operating system, the systemd service file...CVE-2021-318227.8 High
- octopus tentacleWhen Octopus Tentacle is installed using a custom folder location, folder ACLs are not set...CVE-2021-265577.8 High
- octopus server, deploy +1 moreWhen Octopus Server is installed using a custom folder location, folder ACLs are not set...CVE-2021-265567.8 High
- octopus halibutRemote Code Execution in HalibutCVE-2021-31819Fix available9.8 Critical
- octopus serverIn Octopus Server after version 2018.8.2 if the Octopus Server Web Request Proxy is configured...CVE-2021-318207.5 High
- octopus serverWhen configuring Octopus Server if it is configured with an external SQL database, on initial...CVE-2021-318177.5 High
- octopus serverWhen configuring Octopus Server if it is configured with an external SQL database, on initial...CVE-2021-318167.5 High
- octopus serverAffected versions of Octopus Server are prone to an authenticated SQL injection vulnerability in...CVE-2021-318184.3 Medium
- octopus serverCleartext storage of sensitive information in multiple versions of Octopus Server where in...CVE-2021-301837.5 High
- octopus octopusdscCleartext Storage of Sensitive InformationCVE-2021-212706.2 Medium
- octopus deployIn Octopus Deploy through 2020.4.2, an attacker could redirect users to an external site via a...CVE-2020-261616.1 Medium
- octopus deployAn issue was discovered in Octopus Deploy through 2020.4.4. If enabled, the websocket endpoint...CVE-2020-271557.5 High
- octopus deployIn Octopus Deploy 3.1.0 to 2020.4.0, certain scripts can reveal sensitive information to the user...CVE-2020-258257.5 High
- octopus deployIn Octopus Deploy 2020.3.x before 2020.3.4 and 2020.4.x before 2020.4.1, if an authenticated user...CVE-2020-245667.5 High
- octopus serverAn issue was discovered in Octopus Deploy 3.4. A deployment target can be configured with an...CVE-2020-161974.3 Medium
- octopus deployIn Octopus Deploy 2018.8.0 through 2019.x before 2019.12.2, an authenticated user with could...CVE-2020-144706.5 Medium
- octopus deployIn Octopus Deploy before 2019.12.9 and 2020 before 2020.1.12, the TaskView permission is not...CVE-2020-122864.3 Medium
- octopus deployIn Octopus Deploy before 2020.1.5, for customers running on-premises Active Directory linked to...CVE-2020-106788.8 High
- octopus deployIn Octopus Deploy before 2019.10.6, an authenticated user with TeamEdit permission could send a...CVE-2019-193766.5 Medium
- octopus deployIn Octopus Deploy before 2019.10.7, in a configuration where SSL offloading is enabled, the CSRF...CVE-2019-193755.3 Medium
- octopus serverA persistent cross-site scripting (XSS) vulnerability in Octopus Server 3.4.0 through 2019.10.5...CVE-2019-190855.4 Medium
- octopus deployIn Octopus Deploy 3.3.0 through 2019.10.4, an authenticated user with PackagePush permission to...CVE-2019-190844.3 Medium
- octopus serverIn Octopus Deploy 2019.7.3 through 2019.7.9, in certain circumstances, an authenticated user with...CVE-2019-156984.3 Medium
- octopus serverIn Octopus Deploy versions 2018.8.4 to 2019.7.6, when a web request proxy is configured, an...CVE-2019-155076.5 Medium
- octopus tentacle, server +1 moreIn Octopus Tentacle versions 3.0.8 to 5.0.0, when a web request proxy is configured, an...CVE-2019-155086.5 Medium
- octopus deploy, server +1 moreIn Octopus Deploy 2019.4.0 through 2019.6.6 and 2019.7.0 through 2019.7.7, an authenticated...CVE-2019-145254.9 Medium
- octopus deployIn Octopus Deploy versions 3.0.19 to 2019.7.2, when a web request proxy is configured, an...CVE-2019-142686.5 Medium
- octopus deploy, server +1 moreIn Octopus Deploy 2019.1.0 through 2019.3.1 and 2019.4.0 through 2019.4.5, an authenticated user...CVE-2019-116328.1 High
- octopus deploy, server +1 moreAn Information Exposure issue in the Terraform deployment step in Octopus Deploy before 2019.1.8 ...CVE-2019-89446.5 Medium
- octopus serverIn Octopus Deploy 2018.8.0 through 2018.9.x before 2018.9.1, an authenticated user with...CVE-2018-18850Public exploitEPSS 12.5%8.8 High
- octopus deployIn Octopus Deploy 3.0 onwards (before 2018.6.7), an authenticated user with incorrect permissions...CVE-2018-128846.5 Medium
- octopus serverIn Octopus Deploy version 2018.5.1 to 2018.5.7, a user with Task View is able to view a password...CVE-2018-120897.5 High
- octopus serverIn Octopus Deploy 2018.4.4 through 2018.5.1, Octopus variables that are sourced from the target...CVE-2018-113209.8 Critical
- octopus deployIn Octopus Deploy 3.4.x before 2018.4.7, an authenticated user is able to view/update/save...CVE-2018-105815.4 Medium
- octopus deployIn Octopus Deploy before 2018.4.7, target and tenant tag variable scopes were not checked against...CVE-2018-105507.5 High
- octopus deployIn Octopus Deploy 2.0 and later before 2018.3.7, an authenticated user, with variable edit...CVE-2018-90396.5 Medium
- octopus deployAn issue was discovered in Octopus Deploy before 4.1.9. Any user with user editing permissions...CVE-2018-57068.8 High
- octopus deployIn Octopus Deploy versions 3.2.11 - 4.1.5 (fixed in 4.1.6), an authenticated user with...CVE-2018-48628.8 High
- octopus deployIn Octopus Deploy before 4.1.3, the machine update process doesn't check that the user has access...CVE-2017-176658.8 High
- octopus deployCross-site scripting (XSS) vulnerability in the All Variables tab in Octopus Deploy 3.4.0-3.13.6 ...CVE-2017-168105.4 Medium
- Show moreLoading…