Name: Vietnam CyStack Joint Stock Company
Address: Tan Hong Ha Complex, 317 Truong Chinh Street, Hanoi, Vietnam, 100000, VN
Telephone: (+84) 247 109 9656
Price range: Negotiable

Products & ServicesProducts & Services
SolutionsSolutions
PricingPricing
CompanyCompany
ResourcesResources

VulnScan

artifactory Security Vulnerabilities | CyStack CVE Database

Vulnerability	Exploitation status	Fix	Published	Severity

`CVE-2026-82329`Potential authentication bypass leading to administrative access in Artifactory	Exploitation statusKEV	FixYes	Published08/28/2026	SeverityCritical
`CVE-2026-70550`Potential unauthorized access to private Composer repository metadata in JFrog Artifactory	Exploitation statusNot known exploited	FixYes	Published08/25/2026	SeverityMedium
`CVE-2026-70548`SSRF In CocoaPods Via JFrog Artifactory External Dependency	Exploitation statusNot known exploited	FixYes	Published08/25/2026	SeverityLow
`CVE-2026-69104`Potential unauthorized repository migration in JFrog Artifactory	Exploitation statusNot known exploited	FixYes	Published08/25/2026	SeverityHigh
`CVE-2026-70551`Server-Side Request Forgery Via VCS remote download in JFrog Artifactory	Exploitation statusNot known exploited	FixYes	Published08/25/2026	SeverityHigh
`CVE-2026-69106`Potential cache poisoning in JFrog Artifactory	Exploitation statusNot known exploited	FixYes	Published08/12/2026	SeverityHigh
`CVE-2026-42018`Anonymous user token generation exposure in JFrog Artifactory	Exploitation statusKEV	FixYes	Published08/12/2026	SeverityHigh
`CVE-2026-69107`Potential unauthorized artifact access in JFrog Artifactory	Exploitation statusNot known exploited	FixYes	Published08/12/2026	SeverityMedium
`CVE-2026-69105`Potential package cache integrity issue in JFrog Artifactory	Exploitation statusNot known exploited	FixYes	Published08/12/2026	SeverityHigh
`CVE-2026-70547`Potential unauthorized metadata exposure in JFrog Artifactory	Exploitation statusNot known exploited	FixYes	Published08/12/2026	SeverityMedium
`CVE-2026-66016`Rendered Artifactory Helm manifests may contain generated TLS private keys	Exploitation statusNot known exploited	FixYes	Published08/12/2026	SeverityMedium
`CVE-2026-68759`Integration credential holders may impersonate users in JFrog Access	Exploitation statusNot known exploited	FixYes	Published08/12/2026	SeverityHigh
`CVE-2026-65926`Private Release Bundle versions may be disclosed under specific configurations	Exploitation statusNot known exploited	FixYes	Published08/12/2026	SeverityLow
`CVE-2026-66384`Authenticated users may write data outside the intended Docker cache path	Exploitation statusKEV	FixYes	Published08/12/2026	SeverityMedium
`CVE-2026-68758`Authenticated users may access restricted Artifactory support information	Exploitation statusNot known exploited	FixYes	Published08/12/2026	SeverityMedium
`CVE-2026-66375`Low-privilege users may remove protected Artifactory metadata	Exploitation statusNot known exploited	FixYes	Published08/12/2026	SeverityHigh
`CVE-2026-68757`Potential improper SAML signature verification in JFrog Artifactory	Exploitation statusNot known exploited	FixYes	Published08/12/2026	SeverityHigh
`CVE-2026-68756`Potential insecure deserialization in JFrog Artifactory	Exploitation statusNot known exploited	FixYes	Published08/12/2026	SeverityMedium
`CVE-2026-66382`Authenticated users may write files outside the intended Artifactory work directory	Exploitation statusNot known exploited	FixYes	Published08/12/2026	SeverityMedium
`CVE-2026-66381`Repository readers may access content outside configured upstream paths	Exploitation statusNot known exploited	FixYes	Published08/12/2026	SeverityMedium
`CVE-2026-68760`Potential remember-me authentication bypass in JFrog Artifactory	Exploitation statusNot known exploited	FixYes	Published08/12/2026	SeverityMedium
`CVE-2026-66379`Authenticated users may view private Puppet module metadata	Exploitation statusNot known exploited	FixYes	Published08/12/2026	SeverityMedium
`CVE-2026-66378`Authenticated users may access private NuGet metadata	Exploitation statusNot known exploited	FixYes	Published08/12/2026	SeverityMedium
`CVE-2026-66377`Anonymous users may access restricted Artifactory repository information	Exploitation statusNot known exploited	FixYes	Published08/12/2026	SeverityMedium
`CVE-2026-68755`Bundle writers may alter trusted release information in JFrog Artifactory	Exploitation statusNot known exploited	FixYes	Published08/12/2026	SeverityMedium
`CVE-2026-66380`Authenticated users may access private OCI referrer metadata	Exploitation statusNot known exploited	FixYes	Published08/12/2026	SeverityMedium
`CVE-2026-68754`Publishers without delete permission can overwrite docker layer information	Exploitation statusNot known exploited	FixYes	Published08/12/2026	SeverityMedium
`CVE-2026-68753`Anonymous users may access restricted Artifactory content under specific configurations	Exploitation statusNot known exploited	FixYes	Published08/12/2026	SeverityMedium
`CVE-2026-66376`Deleted users may temporarily retain access to JFrog Artifactory	Exploitation statusNot known exploited	FixYes	Published08/12/2026	SeverityMedium
`CVE-2026-68752`Project Resource Managers may escalate privileges in JFrog Artifactory	Exploitation statusNot known exploited	FixYes	Published08/12/2026	SeverityHigh
`CVE-2026-65922`Potential unauthorized modification of Artifactory internal metadata	Exploitation statusNot known exploited	FixYes	Published07/27/2026	SeverityHigh
`CVE-2026-65923`Potential server-side request forgery in Artifactory Ansible repository handling	Exploitation statusNot known exploited	FixYes	Published07/27/2026	SeverityMedium
`CVE-2026-65617`Potential remote code execution on an Artifactory package service container.	Exploitation statusNot known exploited	FixYes	Published07/27/2026	SeverityHigh
`CVE-2026-65924`Server-Side Request Forgery (SSRF) via Terraform Remote repository	Exploitation statusNot known exploited	FixYes	Published07/27/2026	SeverityMedium
`CVE-2026-65925`Server-Side Request Forgery (SSRF) via JFrog Artifactory Cargo remote repository	Exploitation statusNot known exploited	FixYes	Published07/27/2026	SeverityMedium
`CVE-2026-65616`Potential privilege escalation to JFrog administrator privileges	Exploitation statusNot known exploited	FixYes	Published07/27/2026	SeverityHigh
`CVE-2026-66015`JFrog Platform contains an authorization flaw that may allow authenticated privilege escalation.	Exploitation statusNot known exploited	FixYes	Published07/27/2026	SeverityHigh
`CVE-2026-65618`Improper URL validation when handling specific URLs Pub, Terraform and Docker packages might lead to SSRF vulnerability	Exploitation statusNot known exploited	FixYes	Published07/27/2026	SeverityMedium
`CVE-2026-66018`JFrog Artifactory build environment properties exposure	Exploitation statusNot known exploited	FixYes	Published07/27/2026	SeverityMedium
`CVE-2026-66014`Potential authentication bypass leading to privilege escalation in Artifactory	Exploitation statusNot known exploited	FixYes	Published07/27/2026	SeverityHigh
`CVE-2026-65921`Potential path traversal leading to unauthorized file writes	Exploitation statusNot known exploited	FixYes	Published07/27/2026	SeverityHigh
`CVE-2026-42017`Privilege escalation via JFrog Worker event token exposure	Exploitation statusNot known exploited	FixYes	Published07/27/2026	SeverityHigh
`CVE-2026-42016`Incorrect authorization validation of user token in JFrog Artifactory allows Privilege Escalation	Exploitation statusKEV	FixYes	Published07/27/2026	SeverityHigh
`CVE-2024-6915`JFrog Artifactory Cache Poisoning	Exploitation statusNot known exploited	FixYes	Published08/05/2024	SeverityCritical
`CVE-2024-2248`JFrog Artifactory Header Injection	Exploitation statusNot known exploited	FixYes	Published05/15/2024	SeverityMedium
`CVE-2024-4142`JFrog Artifactory Improper input validation within token creation flow	Exploitation statusNot known exploited	FixYes	Published05/01/2024	SeverityCritical
`CVE-2024-3505`JFrog Self-Hosted Artifactory Proxy configuration accessible to low-privilege users	Exploitation statusNot known exploited	FixYes	Published04/15/2024	SeverityMedium
`CVE-2024-2247`JFrog Artifactory Cross-Site Scripting	Exploitation statusNot known exploited	FixYes	Published03/13/2024	SeverityHigh
`CVE-2023-42509`JFrog Artifactory Sensitive Data Leakage in Repository configuration process	Exploitation statusNot known exploited	FixYes	Published03/07/2024	SeverityMedium
`CVE-2023-42661`JFrog Artifactory Improper input validation leads to arbitrary file write	Exploitation statusNot known exploited	FixYes	Published03/07/2024	SeverityHigh
`CVE-2023-42662`JFrog Artifactory Improper SSO Mechanism may lead to Exposure of Access Tokens	Exploitation statusNot known exploited	FixYes	Published03/07/2024	SeverityCritical
`CVE-2023-42508`JFrog Artifactory Improper header input validation leads to email manipulation sent from the platform	Exploitation statusNot known exploited	FixYes	Published10/03/2023	SeverityMedium
`CVE-2022-0668`	Exploitation statusNot known exploited	FixYes	Published01/08/2023	SeverityMedium
`CVE-2021-23163`	Exploitation statusNot confirmed	FixYes	Published07/06/2022	SeverityLow
`CVE-2021-46687`	Exploitation statusNot confirmed	FixYes	Published07/06/2022	SeverityMedium
`CVE-2021-45721`	Exploitation statusNot confirmed	FixYes	Published07/06/2022	SeverityMedium
`CVE-2021-41834`	Exploitation statusNot confirmed	FixYes	Published05/23/2022	SeverityMedium
`CVE-2021-45730`	Exploitation statusNot confirmed	FixYes	Published05/19/2022	SeverityMedium
`CVE-2022-0573`	Exploitation statusNot confirmed	FixYes	Published05/16/2022	SeverityHigh
`CVE-2021-46270`	Exploitation statusNot confirmed	FixYes	Published03/02/2022	SeverityLow
`CVE-2021-45074`	Exploitation statusNot confirmed	FixYes	Published03/02/2022	SeverityMedium
`CVE-2021-3860`	Exploitation statusNot known exploited	FixYes	Published12/20/2021	SeverityHigh
`CVE-2019-17444`JFrog Artifactory does not enforce default admin password change	Exploitation statusNot confirmed	FixYes	Published10/12/2020	SeverityCritical
`CVE-2020-2164`	Exploitation statusNot confirmed	FixNot confirmed	Published03/25/2020	SeverityUnknown
`CVE-2020-2165`	Exploitation statusNot confirmed	FixNot confirmed	Published03/25/2020	SeverityUnknown
`CVE-2019-19937`	Exploitation statusNot confirmed	FixNot confirmed	Published03/16/2020	SeverityUnknown
`CVE-2020-7931`	Exploitation statusNot confirmed	FixNot confirmed	Published01/23/2020	SeverityUnknown
`CVE-2019-10324`	Exploitation statusNot confirmed	FixNot confirmed	Published05/31/2019	SeverityUnknown
`CVE-2019-10323`	Exploitation statusNot confirmed	FixNot confirmed	Published05/31/2019	SeverityUnknown
`CVE-2019-10321`	Exploitation statusNot confirmed	FixNot confirmed	Published05/31/2019	SeverityUnknown
`CVE-2019-10322`	Exploitation statusNot confirmed	FixNot confirmed	Published05/31/2019	SeverityUnknown
`CVE-2018-19971`	Exploitation statusNot confirmed	FixNot confirmed	Published04/16/2019	SeverityUnknown
`CVE-2019-9733`	Exploitation statusNot confirmed	FixNot confirmed	Published04/11/2019	SeverityUnknown
`CVE-2018-1000424`	Exploitation statusNot confirmed	FixNot confirmed	Published01/09/2019	SeverityUnknown
`CVE-2018-1000206`	Exploitation statusNot confirmed	FixYes	Published07/13/2018	SeverityUnknown
`CVE-2018-1000623`	Exploitation statusNot confirmed	FixYes	Published07/09/2018	SeverityUnknown
`CVE-2016-10036`	Exploitation statusPublic exploit	FixNot confirmed	Published05/01/2018	SeverityUnknown
`CVE-2016-6501`	Exploitation statusNot confirmed	FixNot confirmed	Published12/09/2016	SeverityUnknown

78 / 78 Results

All vulnerabilities loaded

Security vulnerabilities in artifactory

artifactory

How many security vulnerabilities does artifactory currently have?

Does the latest version of artifactory have any known vulnerabilities?

Filters

Run an in-depth assessment with complete web risk management