Vulnerability index

Browse CVEs

38 matching
Filters 1 Clear all
Severity

Filters apply as you choose them.

Artifactory MEDIUM 6.5
CVE-2019-10324

A cross-site request forgery vulnerability in Jenkins Artifactory Plugin 3.2.2 and earlier in ReleaseAction#doSubmit, GradleReleaseApiAction#doStagin…

Fix: after 3.2.2
Fix from $1,600 2019-05-31
Artifactory CRITICAL 9.8
CVE-2018-19971

JFrog Artifactory Pro 6.5.9 has Incorrect Access Control.

No fix yet
Fix from $2,300 2019-04-16
Artifactory CRITICAL 9.8
CVE-2019-9733EPSS 53%

An issue was discovered in JFrog Artifactory 6.7.3. By default, the access-admin account is used to reset the password of the admin account in case a…

No fix yet
Fix from $2,300 2019-04-11
Artifactory HIGH 7.8
CVE-2018-1000424

An insufficiently protected credentials vulnerability exists in Jenkins Artifactory Plugin 2.16.1 and earlier in ArtifactoryBuilder.java, Credentials…

Fix: after 2.16.1
Fix from $1,950 2019-01-09
Artifactory HIGH 8.8
CVE-2018-1000206

JFrog Artifactory version since 5.11 contains a Cross ite Request Forgery (CSRF) vulnerability in UI rest endpoints that can result in Classic CSRF a…

Fix: 6.1.0+
Fix from $1,950 2018-07-13
Artifactory HIGH 7.2
CVE-2018-1000623

JFrog JFrog Artifactory version Prior to version 6.0.3, since version 4.0.0 contains a Directory Traversal vulnerability in The "Import Repository fr…

Fix: 6.0.3+
Fix from $1,950 2018-07-09
Artifactory CRITICAL 9.8
CVE-2016-10036EPSS 26%

Unrestricted file upload vulnerability in ui/artifact/upload in JFrog Artifactory before 4.16 allows remote attackers to (1) deploy an arbitrary serv…

Fix: 4.16+
Fix from $2,300 2018-05-01
Artifactory CRITICAL 9.8
CVE-2016-6501

JFrog Artifactory before 4.11 allows remote attackers to execute arbitrary code via an LDAP attribute with a crafted serialized Java object, aka LDAP…

Fix: after 4.10
Fix from $2,300 2016-12-09