Artifactory
Approved changes feed: RSS · Atom
cpe:2.3:a:jfrog:artifactory:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Jfrog (22eacafb-32ef-571d-9c05-c2b5f5d3b0e8) |
|---|---|
| Product | Artifactory (310ae0fb-3687-5aaf-a8d0-a32b299b4a7c) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from purl2cpe mapping |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:jfrog/artifactory |
purl2cpe | 2026-06-01 10:18:11.160729 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2024-6915 |
vulnerable | 2026-06-08 06:58:20.747430 |
JFrog Artifactory Cache Poisoning
CRITICAL (9.3)
JFrog Artifactory versions below 7.90.6, 7.84.20, 7.77.14, 7.71.23, 7.68.22, 7.63.22, 7.59.23, 7.55.18 are vulnerable to Improper Input Validation that could potentially lead to cache poisoning.
Published: 2024-08-05T19:34:31.571Z
Updated: 2024-08-06T14:01:18.510Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-4142 |
vulnerable | 2026-06-08 06:50:17.101528 |
JFrog Artifactory Improper input validation within token creation flow
CRITICAL (9)
An Improper input validation vulnerability that could potentially lead to privilege escalation was discovered in JFrog Artifactory.
Due to this vulnerability, users with low privileges may gain administrative access to the system.
This issue can also be exploited in Artifactory platforms with anonymous access enabled.
Published: 2024-05-01T20:18:23.916Z
Updated: 2024-08-01T20:33:52.579Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-2248 |
vulnerable | 2026-06-08 06:33:30.698435 |
JFrog Artifactory Header Injection
MEDIUM (6.4)
A Header Injection vulnerability in the JFrog platform in versions below 7.85.0 (SaaS) and 7.84.7 (Self-Hosted) may allow threat actors to take over the end user's account when clicking on a specially crafted URL sent to the victim’s user email.
Published: 2024-05-15T13:13:29.213Z
Updated: 2024-08-01T19:03:39.335Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-2247 |
vulnerable | 2026-06-08 06:33:30.697273 |
JFrog Artifactory Cross-Site Scripting
HIGH (8.8)
JFrog Artifactory versions below 7.77.7, 7.82.1, are vulnerable to DOM-based cross-site scripting due to improper handling of the import override mechanism.
Published: 2024-03-13T14:06:57.151Z
Updated: 2024-08-01T19:03:39.114Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-42662 |
vulnerable | 2026-06-08 06:11:08.853388 |
JFrog Artifactory Improper SSO Mechanism may lead to Exposure of Access Tokens
CRITICAL (9.3)
JFrog Artifactory versions 7.59 and above, but below 7.59.18, 7.63.18, 7.68.19, 7.71.8 are vulnerable to an issue whereby user interaction with specially crafted URLs could lead to exposure of user access tokens due to improper handling of the CLI / IDE browser based SSO integration.
Published: 2024-03-07T08:29:03.112Z
Updated: 2024-08-02T20:00:35.991Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-42661 |
vulnerable | 2026-06-08 06:11:08.852856 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-42509 |
vulnerable | 2026-06-08 06:11:08.311542 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-42508 |
vulnerable | 2026-06-08 06:11:08.311097 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-45730 |
vulnerable | 2026-06-08 05:36:49.358878 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-41834 |
vulnerable | 2026-06-08 05:35:21.134799 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-7931 |
vulnerable | 2026-06-08 05:27:14.521095 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-19937 |
vulnerable | 2026-06-08 05:13:24.070935 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-17444 |
not_vulnerable | 2026-06-08 05:13:10.511953 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-1000623 |
vulnerable | 2026-06-08 05:10:25.853845 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2016-6501 |
vulnerable | 2026-06-08 05:08:02.621733 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2016-10036 |
vulnerable | 2026-06-08 05:07:17.068046 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.