Browse CVEs

MEDIUM 6.5 CVE-2019-10324 A cross-site request forgery vulnerability in Jenkins Artifactory Plugin 3.2.2 and earlier in ReleaseAction#doSubmit, GradleReleaseApiAction#doStagin… Artifactory after 3.2.2 Fix from $1,6002019-05-31 CRITICAL 9.8 CVE-2018-19971 JFrog Artifactory Pro 6.5.9 has Incorrect Access Control. Artifactory No fix yet Fix from $2,3002019-04-16 CRITICAL 9.8 CVE-2019-9733EPSS 53% An issue was discovered in JFrog Artifactory 6.7.3. By default, the access-admin account is used to reset the password of the admin account in case a… Artifactory No fix yet Fix from $2,3002019-04-11 HIGH 7.8 CVE-2018-1000424 An insufficiently protected credentials vulnerability exists in Jenkins Artifactory Plugin 2.16.1 and earlier in ArtifactoryBuilder.java, Credentials… Artifactory after 2.16.1 Fix from $1,9502019-01-09 HIGH 8.8 CVE-2018-1000206 JFrog Artifactory version since 5.11 contains a Cross ite Request Forgery (CSRF) vulnerability in UI rest endpoints that can result in Classic CSRF a… Artifactory 6.1.0+ Fix from $1,9502018-07-13 HIGH 7.2 CVE-2018-1000623 JFrog JFrog Artifactory version Prior to version 6.0.3, since version 4.0.0 contains a Directory Traversal vulnerability in The "Import Repository fr… Artifactory 6.0.3+ Fix from $1,9502018-07-09 CRITICAL 9.8 CVE-2016-10036EPSS 26% Unrestricted file upload vulnerability in ui/artifact/upload in JFrog Artifactory before 4.16 allows remote attackers to (1) deploy an arbitrary serv… Artifactory 4.16+ Fix from $2,3002018-05-01 CRITICAL 9.8 CVE-2016-6501 JFrog Artifactory before 4.11 allows remote attackers to execute arbitrary code via an LDAP attribute with a crafted serialized Java object, aka LDAP… Artifactory after 4.10 Fix from $2,3002016-12-09