agentprime: jfrog-artifactory

agentprime: jfrog-artifactoryEvery new CVE for jfrog-artifactory.https://agentprime.io/CVE-2026-82329: Potential authentication bypass leading to administrative access in Artifactoryhttps://agentprime.io/advisories/CVE-2026-82329/https://agentprime.io/advisories/CVE-2026-82329/CVSS 9.8 (Critical). Critical: In CISA’s KEV catalogue since 2 Sept 2026: it is known to be exploited. CVSS score 9.8: 9.0 or more. CVSS score 9.8 (7.0 or more) and EPSS 0.14 (0.1 or more): a high score and a real chance of exploitation in the next 30 days. Published by the CVE Program. Not analysed by agentprime yet.Fri, 28 Aug 2026 18:27:43 GMTCVEcriticalKEVCVE-2026-70550: Potential unauthorized access to private Composer repository metadata in JFrog Artifactoryhttps://agentprime.io/advisories/CVE-2026-70550/https://agentprime.io/advisories/CVE-2026-70550/CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 25 Aug 2026 15:22:53 GMTCVECVE-2026-70548: SSRF In CocoaPods Via JFrog Artifactory External Dependencyhttps://agentprime.io/advisories/CVE-2026-70548/https://agentprime.io/advisories/CVE-2026-70548/CVSS 3.5 (Low). Published by the CVE Program. Not analysed by agentprime yet.Tue, 25 Aug 2026 15:17:16 GMTCVECVE-2026-69104: Potential unauthorized repository migration in JFrog Artifactoryhttps://agentprime.io/advisories/CVE-2026-69104/https://agentprime.io/advisories/CVE-2026-69104/CVSS 7.6 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 25 Aug 2026 15:09:29 GMTCVECVE-2026-70551: Server-Side Request Forgery Via VCS remote download in JFrog Artifactoryhttps://agentprime.io/advisories/CVE-2026-70551/https://agentprime.io/advisories/CVE-2026-70551/CVSS 8.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 25 Aug 2026 15:06:48 GMTCVECVE-2026-69106: Potential cache poisoning in JFrog Artifactoryhttps://agentprime.io/advisories/CVE-2026-69106/https://agentprime.io/advisories/CVE-2026-69106/CVSS 8.8 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 12 Aug 2026 17:48:29 GMTCVECVE-2026-42018: Anonymous user token generation exposure in JFrog Artifactoryhttps://agentprime.io/advisories/CVE-2026-42018/https://agentprime.io/advisories/CVE-2026-42018/CVSS 7.5 (High). Critical: In CISA’s KEV catalogue since 11 Sept 2026: it is known to be exploited. Published by the CVE Program. Not analysed by agentprime yet.Wed, 12 Aug 2026 17:43:21 GMTCVEcriticalKEVCVE-2026-69107: Potential unauthorized artifact access in JFrog Artifactoryhttps://agentprime.io/advisories/CVE-2026-69107/https://agentprime.io/advisories/CVE-2026-69107/CVSS 5.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 12 Aug 2026 15:51:47 GMTCVECVE-2026-69105: Potential package cache integrity issue in JFrog Artifactoryhttps://agentprime.io/advisories/CVE-2026-69105/https://agentprime.io/advisories/CVE-2026-69105/CVSS 8.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 12 Aug 2026 15:19:40 GMTCVECVE-2026-70547: Potential unauthorized metadata exposure in JFrog Artifactoryhttps://agentprime.io/advisories/CVE-2026-70547/https://agentprime.io/advisories/CVE-2026-70547/CVSS 4.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 12 Aug 2026 15:18:29 GMTCVECVE-2026-66016: Rendered Artifactory Helm manifests may contain generated TLS private keyshttps://agentprime.io/advisories/CVE-2026-66016/https://agentprime.io/advisories/CVE-2026-66016/CVSS 6.7 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 12 Aug 2026 15:16:39 GMTCVECVE-2026-68759: Integration credential holders may impersonate users in JFrog Accesshttps://agentprime.io/advisories/CVE-2026-68759/https://agentprime.io/advisories/CVE-2026-68759/CVSS 7.2 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 12 Aug 2026 15:15:50 GMTCVECVE-2026-65926: Private Release Bundle versions may be disclosed under specific configurationshttps://agentprime.io/advisories/CVE-2026-65926/https://agentprime.io/advisories/CVE-2026-65926/CVSS 3.1 (Low). Published by the CVE Program. Not analysed by agentprime yet.Wed, 12 Aug 2026 15:14:42 GMTCVECVE-2026-66384: Authenticated users may write data outside the intended Docker cache pathhttps://agentprime.io/advisories/CVE-2026-66384/https://agentprime.io/advisories/CVE-2026-66384/CVSS 5.3 (Medium). Critical: In CISA’s KEV catalogue since 27 Aug 2026: it is known to be exploited. Published by the CVE Program. Not analysed by agentprime yet.Wed, 12 Aug 2026 15:14:04 GMTCVEcriticalKEVCVE-2026-68758: Authenticated users may access restricted Artifactory support informationhttps://agentprime.io/advisories/CVE-2026-68758/https://agentprime.io/advisories/CVE-2026-68758/CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 12 Aug 2026 15:12:56 GMTCVECVE-2026-66375: Low-privilege users may remove protected Artifactory metadatahttps://agentprime.io/advisories/CVE-2026-66375/https://agentprime.io/advisories/CVE-2026-66375/CVSS 8.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 12 Aug 2026 15:11:35 GMTCVECVE-2026-68757: Potential improper SAML signature verification in JFrog Artifactoryhttps://agentprime.io/advisories/CVE-2026-68757/https://agentprime.io/advisories/CVE-2026-68757/CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 12 Aug 2026 15:10:23 GMTCVECVE-2026-68756: Potential insecure deserialization in JFrog Artifactoryhttps://agentprime.io/advisories/CVE-2026-68756/https://agentprime.io/advisories/CVE-2026-68756/CVSS 6.6 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 12 Aug 2026 15:09:21 GMTCVECVE-2026-66382: Authenticated users may write files outside the intended Artifactory work directoryhttps://agentprime.io/advisories/CVE-2026-66382/https://agentprime.io/advisories/CVE-2026-66382/CVSS 4.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 12 Aug 2026 15:08:11 GMTCVECVE-2026-66381: Repository readers may access content outside configured upstream pathshttps://agentprime.io/advisories/CVE-2026-66381/https://agentprime.io/advisories/CVE-2026-66381/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 12 Aug 2026 15:07:01 GMTCVECVE-2026-68760: Potential remember-me authentication bypass in JFrog Artifactoryhttps://agentprime.io/advisories/CVE-2026-68760/https://agentprime.io/advisories/CVE-2026-68760/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 12 Aug 2026 15:04:59 GMTCVECVE-2026-66379: Authenticated users may view private Puppet module metadatahttps://agentprime.io/advisories/CVE-2026-66379/https://agentprime.io/advisories/CVE-2026-66379/CVSS 4.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 12 Aug 2026 15:03:03 GMTCVECVE-2026-66378: Authenticated users may access private NuGet metadatahttps://agentprime.io/advisories/CVE-2026-66378/https://agentprime.io/advisories/CVE-2026-66378/CVSS 4.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 12 Aug 2026 15:02:08 GMTCVECVE-2026-66377: Anonymous users may access restricted Artifactory repository informationhttps://agentprime.io/advisories/CVE-2026-66377/https://agentprime.io/advisories/CVE-2026-66377/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 12 Aug 2026 15:00:49 GMTCVECVE-2026-68755: Bundle writers may alter trusted release information in JFrog Artifactoryhttps://agentprime.io/advisories/CVE-2026-68755/https://agentprime.io/advisories/CVE-2026-68755/CVSS 4.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 12 Aug 2026 15:00:06 GMTCVECVE-2026-66380: Authenticated users may access private OCI referrer metadatahttps://agentprime.io/advisories/CVE-2026-66380/https://agentprime.io/advisories/CVE-2026-66380/CVSS 4.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 12 Aug 2026 14:59:24 GMTCVECVE-2026-68754: Publishers without delete permission can overwrite docker layer informationhttps://agentprime.io/advisories/CVE-2026-68754/https://agentprime.io/advisories/CVE-2026-68754/CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 12 Aug 2026 14:58:43 GMTCVECVE-2026-68753: Anonymous users may access restricted Artifactory content under specific configurationshttps://agentprime.io/advisories/CVE-2026-68753/https://agentprime.io/advisories/CVE-2026-68753/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 12 Aug 2026 14:57:38 GMTCVECVE-2026-66376: Deleted users may temporarily retain access to JFrog Artifactoryhttps://agentprime.io/advisories/CVE-2026-66376/https://agentprime.io/advisories/CVE-2026-66376/CVSS 4.2 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 12 Aug 2026 14:55:59 GMTCVECVE-2026-68752: Project Resource Managers may escalate privileges in JFrog Artifactoryhttps://agentprime.io/advisories/CVE-2026-68752/https://agentprime.io/advisories/CVE-2026-68752/CVSS 7.2 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 12 Aug 2026 14:55:01 GMTCVECVE-2026-65922: Potential unauthorized modification of Artifactory internal metadatahttps://agentprime.io/advisories/CVE-2026-65922/https://agentprime.io/advisories/CVE-2026-65922/CVSS 7.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Mon, 27 Jul 2026 19:44:44 GMTCVECVE-2026-65923: Potential server-side request forgery in Artifactory Ansible repository handlinghttps://agentprime.io/advisories/CVE-2026-65923/https://agentprime.io/advisories/CVE-2026-65923/CVSS 6.8 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Mon, 27 Jul 2026 19:43:46 GMTCVECVE-2026-65617: Potential remote code execution on an Artifactory package service container.https://agentprime.io/advisories/CVE-2026-65617/https://agentprime.io/advisories/CVE-2026-65617/CVSS 8.8 (High). Published by the CVE Program. Not analysed by agentprime yet.Mon, 27 Jul 2026 19:37:27 GMTCVECVE-2026-65924: Server-Side Request Forgery (SSRF) via Terraform Remote repositoryhttps://agentprime.io/advisories/CVE-2026-65924/https://agentprime.io/advisories/CVE-2026-65924/CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Mon, 27 Jul 2026 19:36:35 GMTCVECVE-2026-65925: Server-Side Request Forgery (SSRF) via JFrog Artifactory Cargo remote repositoryhttps://agentprime.io/advisories/CVE-2026-65925/https://agentprime.io/advisories/CVE-2026-65925/CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Mon, 27 Jul 2026 19:35:17 GMTCVECVE-2026-65616: Potential privilege escalation to JFrog administrator privilegeshttps://agentprime.io/advisories/CVE-2026-65616/https://agentprime.io/advisories/CVE-2026-65616/CVSS 8.8 (High). Published by the CVE Program. Not analysed by agentprime yet.Mon, 27 Jul 2026 19:34:17 GMTCVECVE-2026-66015: JFrog Platform contains an authorization flaw that may allow authenticated privilege escalation.https://agentprime.io/advisories/CVE-2026-66015/https://agentprime.io/advisories/CVE-2026-66015/CVSS 7.2 (High). Published by the CVE Program. Not analysed by agentprime yet.Mon, 27 Jul 2026 19:33:27 GMTCVECVE-2026-65618: Improper URL validation when handling specific URLs Pub, Terraform and Docker packages might lead to SSRF vulnerabilityhttps://agentprime.io/advisories/CVE-2026-65618/https://agentprime.io/advisories/CVE-2026-65618/CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Mon, 27 Jul 2026 19:32:29 GMTCVECVE-2026-66018: JFrog Artifactory build environment properties exposurehttps://agentprime.io/advisories/CVE-2026-66018/https://agentprime.io/advisories/CVE-2026-66018/CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Mon, 27 Jul 2026 19:31:34 GMTCVECVE-2026-66014: Potential authentication bypass leading to privilege escalation in Artifactoryhttps://agentprime.io/advisories/CVE-2026-66014/https://agentprime.io/advisories/CVE-2026-66014/CVSS 8.8 (High). Published by the CVE Program. Not analysed by agentprime yet.Mon, 27 Jul 2026 19:29:47 GMTCVECVE-2026-65921: Potential path traversal leading to unauthorized file writeshttps://agentprime.io/advisories/CVE-2026-65921/https://agentprime.io/advisories/CVE-2026-65921/CVSS 8.8 (High). Published by the CVE Program. Not analysed by agentprime yet.Mon, 27 Jul 2026 19:27:31 GMTCVECVE-2026-42017: Privilege escalation via JFrog Worker event token exposurehttps://agentprime.io/advisories/CVE-2026-42017/https://agentprime.io/advisories/CVE-2026-42017/CVSS 8.8 (High). Published by the CVE Program. Not analysed by agentprime yet.Mon, 27 Jul 2026 19:26:23 GMTCVECVE-2026-42016: Incorrect authorization validation of user token in JFrog Artifactory allows Privilege Escalationhttps://agentprime.io/advisories/CVE-2026-42016/https://agentprime.io/advisories/CVE-2026-42016/CVSS 8.1 (High). Critical: In CISA’s KEV catalogue since 11 Sept 2026: it is known to be exploited. Published by the CVE Program. Not analysed by agentprime yet.Mon, 27 Jul 2026 19:20:56 GMTCVEcriticalKEVCVE-2024-6915: JFrog Artifactory Cache Poisoninghttps://agentprime.io/advisories/CVE-2024-6915/https://agentprime.io/advisories/CVE-2024-6915/CVSS 9.3 (Critical). Critical: CVSS score 9.3: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Mon, 05 Aug 2024 19:34:31 GMTCVEcriticalCVE-2024-2248: JFrog Artifactory Header Injectionhttps://agentprime.io/advisories/CVE-2024-2248/https://agentprime.io/advisories/CVE-2024-2248/CVSS 6.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 15 May 2024 13:13:29 GMTCVECVE-2024-4142: JFrog Artifactory Improper input validation within token creation flowhttps://agentprime.io/advisories/CVE-2024-4142/https://agentprime.io/advisories/CVE-2024-4142/CVSS 9.0 (Critical). Critical: CVSS score 9.0: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Wed, 01 May 2024 20:18:23 GMTCVEcriticalCVE-2024-2247: JFrog Artifactory Cross-Site Scriptinghttps://agentprime.io/advisories/CVE-2024-2247/https://agentprime.io/advisories/CVE-2024-2247/CVSS 8.8 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 13 Mar 2024 14:06:57 GMTCVECVE-2023-42509: JFrog Artifactory Sensitive Data Leakage in Repository configuration processhttps://agentprime.io/advisories/CVE-2023-42509/https://agentprime.io/advisories/CVE-2023-42509/CVSS 6.6 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 07 Mar 2024 14:07:09 GMTCVECVE-2023-42661: JFrog Artifactory Improper input validation leads to arbitrary file writehttps://agentprime.io/advisories/CVE-2023-42661/https://agentprime.io/advisories/CVE-2023-42661/CVSS 7.2 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 07 Mar 2024 13:56:38 GMTCVECVE-2023-42662: JFrog Artifactory Improper SSO Mechanism may lead to Exposure of Access Tokenshttps://agentprime.io/advisories/CVE-2023-42662/https://agentprime.io/advisories/CVE-2023-42662/CVSS 9.3 (Critical). Critical: CVSS score 9.3: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Thu, 07 Mar 2024 08:29:03 GMTCVEcritical