Octopus Deploy
Approved changes feed: RSS · Atom
cpe:2.3:a:octopus:octopus_deploy:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Octopus (62d36c7c-63f4-5854-a734-f948ec5d2bcb) |
|---|---|
| Product | Octopus Deploy (41e7579e-1d5a-5b3e-8b00-de8725a38394) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2023-2247 |
vulnerable | 2026-06-08 06:02:41.684727 |
Details available
In affected versions of Octopus Deploy it is possible to unmask variable secrets using the variable preview function
Published: 2023-05-02T00:00:00.000Z
Updated: 2024-12-03T15:16:16.476Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-2013 |
vulnerable | 2026-06-08 05:42:50.054563 |
Details available
In Octopus Server after version 2022.1.1495 and before 2022.1.2647 if private spaces were enabled via the experimental feature flag all new users would have access to the Script Console within their private space.
Published: 2022-06-12T23:50:09.000Z
Updated: 2024-08-03T00:24:43.695Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-23184 |
vulnerable | 2026-06-08 05:40:56.569997 |
Details available
In affected Octopus Server versions when the server HTTP and HTTPS bindings are configured to localhost, Octopus Server will allow open redirects.
Published: 2022-02-07T02:35:09.000Z
Updated: 2024-08-03T03:36:20.357Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-26556 |
vulnerable | 2026-06-08 05:30:44.834280 |
Details available
When Octopus Server is installed using a custom folder location, folder ACLs are not set correctly and could lead to an unprivileged user using DLL side-loading to gain privileged access.
Published: 2021-10-07T01:00:12.000Z
Updated: 2024-08-03T20:26:25.523Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-27155 |
vulnerable | 2026-06-08 05:23:52.165896 |
Details available
An issue was discovered in Octopus Deploy through 2020.4.4. If enabled, the websocket endpoint may allow an untrusted tentacle host to present itself as a trusted one.
Published: 2020-10-22T16:48:40.000Z
Updated: 2024-08-04T16:11:35.688Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-26161 |
vulnerable | 2026-06-08 05:23:50.744023 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-25825 |
vulnerable | 2026-06-08 05:23:49.479280 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-24566 |
vulnerable | 2026-06-08 05:22:34.434116 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-14470 |
vulnerable | 2026-06-08 05:19:23.513973 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-12286 |
vulnerable | 2026-06-08 05:17:56.834610 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-10678 |
vulnerable | 2026-06-08 05:16:35.557365 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-8944 |
vulnerable | 2026-06-08 05:14:24.728121 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-19084 |
vulnerable | 2026-06-08 05:13:21.483484 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-14525 |
vulnerable | 2026-06-08 05:12:54.937386 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-14268 |
vulnerable | 2026-06-08 05:12:54.358644 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-11632 |
vulnerable | 2026-06-08 05:12:37.765181 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-9039 |
vulnerable | 2026-06-08 05:12:06.834545 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-5706 |
vulnerable | 2026-06-08 05:11:51.630710 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-4862 |
vulnerable | 2026-06-08 05:11:49.835500 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-10581 |
vulnerable | 2026-06-08 05:10:26.833826 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-10550 |
vulnerable | 2026-06-08 05:10:26.803024 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2017-17665 |
vulnerable | 2026-06-08 05:09:09.714624 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2017-16810 |
vulnerable | 2026-06-08 05:09:01.089469 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2017-16801 |
vulnerable | 2026-06-08 05:09:01.077964 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2017-15611 |
vulnerable | 2026-06-08 05:08:59.018038 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2017-15610 |
vulnerable | 2026-06-08 05:08:59.017742 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2017-15609 |
vulnerable | 2026-06-08 05:08:59.017347 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.