Advisories · Technology

JFrog Artifactory.

Every CVE that names JFrog Artifactory among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2021-3860 CVE record

CVSS 8.8 High

SQL injection in JFrog Artifactory
- JFrog Artifactory
- SQL injection
Not analysed yet 20 Dec 2021
CVE-2019-17444 CVE record

CVSS 9.8 CriticalCritical · CVSS 9+, CVSS 7+ and EPSS

JFrog Artifactory does not enforce default admin password change
- Jfrog Artifactory
- Hard-coded credentials
Not analysed yet 12 Oct 2020