Artifactory
Approved changes feed: RSS · Atom
cpe:2.3:a:jfrog:artifactory:*:*:*:*:*:-:*:*
part: a version: * update: *
| Vendor | Jfrog (22eacafb-32ef-571d-9c05-c2b5f5d3b0e8) |
|---|---|
| Product | Artifactory (310ae0fb-3687-5aaf-a8d0-a32b299b4a7c) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | - |
| Target hardware | * |
| Other | * |
| Notes | Imported from purl2cpe mapping |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:jfrog/artifactory |
purl2cpe | 2026-06-01 10:18:11.170359 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2024-6915 |
vulnerable | 2026-06-08 06:58:20.746807 |
JFrog Artifactory Cache Poisoning
CRITICAL (9.3)
JFrog Artifactory versions below 7.90.6, 7.84.20, 7.77.14, 7.71.23, 7.68.22, 7.63.22, 7.59.23, 7.55.18 are vulnerable to Improper Input Validation that could potentially lead to cache poisoning.
Published: 2024-08-05T19:34:31.571Z
Updated: 2024-08-06T14:01:18.510Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-4142 |
vulnerable | 2026-06-08 06:50:17.100890 |
JFrog Artifactory Improper input validation within token creation flow
CRITICAL (9)
An Improper input validation vulnerability that could potentially lead to privilege escalation was discovered in JFrog Artifactory.
Due to this vulnerability, users with low privileges may gain administrative access to the system.
This issue can also be exploited in Artifactory platforms with anonymous access enabled.
Published: 2024-05-01T20:18:23.916Z
Updated: 2024-08-01T20:33:52.579Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-3505 |
vulnerable | 2026-06-08 06:41:53.485889 |
JFrog Self-Hosted Artifactory Proxy configuration accessible to low-privilege users
MEDIUM (4.3)
JFrog Artifactory Self-Hosted versions below 7.77.3, are vulnerable to sensitive information disclosure whereby a low-privileged authenticated user can read the proxy configuration.
This does not affect JFrog cloud deployments.
Published: 2024-04-15T07:42:27.975Z
Updated: 2024-08-01T20:12:07.415Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-2247 |
vulnerable | 2026-06-08 06:33:30.698014 |
JFrog Artifactory Cross-Site Scripting
HIGH (8.8)
JFrog Artifactory versions below 7.77.7, 7.82.1, are vulnerable to DOM-based cross-site scripting due to improper handling of the import override mechanism.
Published: 2024-03-13T14:06:57.151Z
Updated: 2024-08-01T19:03:39.114Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-42662 |
vulnerable | 2026-06-08 06:11:08.853427 |
JFrog Artifactory Improper SSO Mechanism may lead to Exposure of Access Tokens
CRITICAL (9.3)
JFrog Artifactory versions 7.59 and above, but below 7.59.18, 7.63.18, 7.68.19, 7.71.8 are vulnerable to an issue whereby user interaction with specially crafted URLs could lead to exposure of user access tokens due to improper handling of the CLI / IDE browser based SSO integration.
Published: 2024-03-07T08:29:03.112Z
Updated: 2024-08-02T20:00:35.991Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-42661 |
vulnerable | 2026-06-08 06:11:08.853007 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-42509 |
vulnerable | 2026-06-08 06:11:08.312596 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-0668 |
vulnerable | 2026-06-08 05:39:10.490965 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-0573 |
vulnerable | 2026-06-08 05:39:10.317940 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-46687 |
vulnerable | 2026-06-08 05:38:03.711033 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-46270 |
vulnerable | 2026-06-08 05:38:03.183552 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-45730 |
vulnerable | 2026-06-08 05:36:49.358925 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-45721 |
vulnerable | 2026-06-08 05:36:49.355593 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-45074 |
vulnerable | 2026-06-08 05:36:47.772318 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-41834 |
vulnerable | 2026-06-08 05:35:21.135516 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-23163 |
vulnerable | 2026-06-08 05:30:02.315341 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-7931 |
vulnerable | 2026-06-08 05:27:14.520262 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-17444 |
vulnerable | 2026-06-08 05:13:10.512657 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-1000206 |
vulnerable | 2026-06-08 05:10:25.646238 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.