AR
Product
artifactory
On CISA KEVExploited in the wild
75
CVEs
4
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 7High 27Medium 38Low 3
Watch
Add artifactory to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-82329 In wildKEV | 9.8 | Aug 28 | Potential authentication bypass leading to administrative access in Artifactory Affected: before 7.111.21; 7.117.0 before 7.117.28; 7.125.0 before 7.125.20; 7.133.0 before 7.133.29; 7.146.0 before 7.146.38; 7.161.0 before 7.161.20 |
| CVE-2022-0668 | 9.8 | Jan 8 | JFrog Artifactory prior to 7.37.13 is vulnerable to Authentication Bypass, which can lead to Privilege Escalation when a specially crafted request is sent by an unauthenticated… Affected: 6.0.0 before 6.23.41; 7.0.0 before 7.37.13 |
| CVE-2019-17444 | 9.8 | Oct 12 | Jfrog Artifactory uses default passwords (such as "password") for administrative accounts and does not require users to change them Affected: before 6.17.0 |
| CVE-2018-19971 | 9.8 | Apr 16 | JFrog Artifactory Pro 6.5.9 has Incorrect Access Control Affected: 6.5.9 |
| CVE-2019-9733 | 9.8 | Apr 11 | An issue was discovered in JFrog Artifactory 6.7.3 Affected: 6.7.3 |
| CVE-2016-10036 | 9.8 | May 1 | Unrestricted file upload vulnerability in ui/artifact/upload in JFrog Artifactory before 4.16 allows remote attackers to (1) deploy an arbitrary servlet application and execute… Affected: before 4.16 |
| CVE-2016-6501 | 9.8 | Dec 9 | JFrog Artifactory before 4.11 allows remote attackers to execute arbitrary code via an LDAP attribute with a crafted serialized Java object, aka LDAP entry poisoning Affected: through 4.10 |
Showing 7