agentprime: octopus-deploy-octopus-server

agentprime: octopus-deploy-octopus-serverEvery new CVE for octopus-deploy-octopus-server.https://agentprime.io/CVE-2026-118426: Missing authorization in Octopus Deploy Octopus Serverhttps://agentprime.io/advisories/CVE-2026-118426/https://agentprime.io/advisories/CVE-2026-118426/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 29 Oct 2026 02:02:13 GMTCVECVE-2026-12887: Path traversal in Octopus Deploy Octopus Serverhttps://agentprime.io/advisories/CVE-2026-12887/https://agentprime.io/advisories/CVE-2026-12887/CVSS 5.1 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 27 Oct 2026 13:15:22 GMTCVECVE-2026-117466: Improper privilege management in Octopus Deploy Octopus Serverhttps://agentprime.io/advisories/CVE-2026-117466/https://agentprime.io/advisories/CVE-2026-117466/CVSS 8.6 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 27 Oct 2026 10:40:49 GMTCVECVE-2026-117341: Sensitive information in log files in Octopus Deploy Octopus Serverhttps://agentprime.io/advisories/CVE-2026-117341/https://agentprime.io/advisories/CVE-2026-117341/CVSS 7.7 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 27 Oct 2026 10:36:00 GMTCVECVE-2026-116870: In affected versions of Octopus Server, OIDC token issuer validation was performed inconsistently.https://agentprime.io/advisories/CVE-2026-116870/https://agentprime.io/advisories/CVE-2026-116870/CVSS 8.7 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 27 Oct 2026 10:28:11 GMTCVECVE-2026-102488: Incorrect authorization in Octopus Deploy Octopus Serverhttps://agentprime.io/advisories/CVE-2026-102488/https://agentprime.io/advisories/CVE-2026-102488/CVSS 8.7 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 08 Oct 2026 01:38:57 GMTCVECVE-2026-102478: Octopus Deploy Octopus Server: In affected versions of Octopus Server…https://agentprime.io/advisories/CVE-2026-102478/https://agentprime.io/advisories/CVE-2026-102478/CVSS 8.7 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 07 Oct 2026 01:17:54 GMTCVECVE-2026-78210: Incorrect authorization in Octopus Deploy Octopus Serverhttps://agentprime.io/advisories/CVE-2026-78210/https://agentprime.io/advisories/CVE-2026-78210/CVSS 7.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 01 Oct 2026 04:36:23 GMTCVECVE-2026-101169: Deserialization of untrusted data in Octopus Deploy Octopus Serverhttps://agentprime.io/advisories/CVE-2026-101169/https://agentprime.io/advisories/CVE-2026-101169/CVSS 8.7 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 29 Sep 2026 07:49:29 GMTCVECVE-2026-92355: Path traversal in Octopus Deploy Octopus Serverhttps://agentprime.io/advisories/CVE-2026-92355/https://agentprime.io/advisories/CVE-2026-92355/CVSS 8.7 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 16 Sep 2026 07:29:27 GMTCVECVE-2026-91778: Incorrect authorization in Octopus Deploy Octopus Serverhttps://agentprime.io/advisories/CVE-2026-91778/https://agentprime.io/advisories/CVE-2026-91778/CVSS 7.2 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 15 Sep 2026 07:05:53 GMTCVECVE-2026-14163: Sensitive information in log files in Octopus Deploy Octopus Serverhttps://agentprime.io/advisories/CVE-2026-14163/https://agentprime.io/advisories/CVE-2026-14163/CVSS 7.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 20 Aug 2026 06:48:07 GMTCVECVE-2026-12702: Improper access control in Octopus Deploy Octopus Serverhttps://agentprime.io/advisories/CVE-2026-12702/https://agentprime.io/advisories/CVE-2026-12702/CVSS 5.1 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Fri, 24 Jul 2026 08:29:31 GMTCVECVE-2026-8296: Cross-site scripting in Octopus Deploy Octopus Serverhttps://agentprime.io/advisories/CVE-2026-8296/https://agentprime.io/advisories/CVE-2026-8296/CVSS 5.6 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Fri, 19 Jun 2026 09:23:28 GMTCVECVE-2026-4881: Missing authorization in Octopus Deploy Octopus Serverhttps://agentprime.io/advisories/CVE-2026-4881/https://agentprime.io/advisories/CVE-2026-4881/CVSS 6.0 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 04 Jun 2026 08:49:59 GMTCVECVE-2026-3237: Improper authorization in Octopus Deploy Octopus Serverhttps://agentprime.io/advisories/CVE-2026-3237/https://agentprime.io/advisories/CVE-2026-3237/CVSS 2.3 (Low). Published by the CVE Program. Not analysed by agentprime yet.Tue, 17 Mar 2026 06:37:59 GMTCVECVE-2026-3236: Incorrect authorization in Octopus Deploy Octopus Serverhttps://agentprime.io/advisories/CVE-2026-3236/https://agentprime.io/advisories/CVE-2026-3236/CVSS 2.3 (Low). Published by the CVE Program. Not analysed by agentprime yet.Thu, 05 Mar 2026 10:37:03 GMTCVECVE-2026-0704: Path traversal in Octopus Deploy Octopus Serverhttps://agentprime.io/advisories/CVE-2026-0704/https://agentprime.io/advisories/CVE-2026-0704/CVSS 5.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 25 Feb 2026 12:22:18 GMTCVECVE-2025-0539: Server-side request forgery in Octopus Deploy Octopus Serverhttps://agentprime.io/advisories/CVE-2025-0539/https://agentprime.io/advisories/CVE-2025-0539/CVSS 5.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 10 Apr 2025 05:20:38 GMTCVECVE-2025-0588: HTTP response splitting in Octopus Deploy Octopus Serverhttps://agentprime.io/advisories/CVE-2025-0588/https://agentprime.io/advisories/CVE-2025-0588/CVSS 5.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 11 Feb 2025 11:22:27 GMTCVECVE-2025-0513: Cross-site scripting in Octopus Deploy Octopus Serverhttps://agentprime.io/advisories/CVE-2025-0513/https://agentprime.io/advisories/CVE-2025-0513/CVSS 1.8 (Low). Published by the CVE Program. Not analysed by agentprime yet.Tue, 11 Feb 2025 10:27:26 GMTCVECVE-2025-0526: Missing authorization in Octopus Deploy Octopus Serverhttps://agentprime.io/advisories/CVE-2025-0526/https://agentprime.io/advisories/CVE-2025-0526/CVSS 2.3 (Low). Published by the CVE Program. Not analysed by agentprime yet.Tue, 11 Feb 2025 10:09:56 GMTCVECVE-2025-0525: Information disclosure in Octopus Deploy Octopus Serverhttps://agentprime.io/advisories/CVE-2025-0525/https://agentprime.io/advisories/CVE-2025-0525/CVSS 2.3 (Low). Published by the CVE Program. Not analysed by agentprime yet.Tue, 11 Feb 2025 09:53:25 GMTCVECVE-2025-0589: Octopus Deploy Octopus Server: In affected versions of Octopus Deploy where customers are using Active Directory for…https://agentprime.io/advisories/CVE-2025-0589/https://agentprime.io/advisories/CVE-2025-0589/CVSS 6.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 11 Feb 2025 08:59:51 GMTCVECVE-2024-1656: Affected versions of Octopus Server had a weak content security policy.https://agentprime.io/advisories/CVE-2024-1656/https://agentprime.io/advisories/CVE-2024-1656/CVSS 2.6 (Low). Published by the CVE Program. Not analysed by agentprime yet.Wed, 11 Sep 2024 04:05:31 GMTCVECVE-2024-7998: Insufficient session expiration in Octopus Deploy Octopus Serverhttps://agentprime.io/advisories/CVE-2024-7998/https://agentprime.io/advisories/CVE-2024-7998/CVSS 2.6 (Low). Published by the CVE Program. Not analysed by agentprime yet.Wed, 21 Aug 2024 05:30:35 GMTCVECVE-2024-6972: Cleartext transmission of sensitive information in Octopus Deploy Octopus Serverhttps://agentprime.io/advisories/CVE-2024-6972/https://agentprime.io/advisories/CVE-2024-6972/CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 25 Jul 2024 05:16:49 GMTCVECVE-2024-4811: Incorrect authorization in Octopus Deploy Octopus Serverhttps://agentprime.io/advisories/CVE-2024-4811/https://agentprime.io/advisories/CVE-2024-4811/CVSS 2.2 (Low). Published by the CVE Program. Not analysed by agentprime yet.Thu, 25 Jul 2024 04:46:43 GMTCVECVE-2024-4456: Cross-site scripting in Octopus Deploy Octopus Serverhttps://agentprime.io/advisories/CVE-2024-4456/https://agentprime.io/advisories/CVE-2024-4456/CVSS 4.1 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 08 May 2024 00:46:31 GMTCVECVE-2024-4226: Incorrect default permissions in Octopus Deploy Octopus Serverhttps://agentprime.io/advisories/CVE-2024-4226/https://agentprime.io/advisories/CVE-2024-4226/CVSS 3.5 (Low). Published by the CVE Program. Not analysed by agentprime yet.Tue, 30 Apr 2024 01:53:34 GMTCVECVE-2023-4509: Cleartext transmission of sensitive information in Octopus Deploy Octopus Serverhttps://agentprime.io/advisories/CVE-2023-4509/https://agentprime.io/advisories/CVE-2023-4509/CVSS 4.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 17 Apr 2024 23:10:37 GMTCVECVE-2024-2975: A race condition was identified through which privilege escalation was possible in certain configurations.https://agentprime.io/advisories/CVE-2024-2975/https://agentprime.io/advisories/CVE-2024-2975/CVSS 8.8 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 09 Apr 2024 01:02:46 GMTCVECVE-2023-1904: Octopus Deploy Octopus Server: In affected versions of Octopus Server it is possible for the OpenID client secret to be…https://agentprime.io/advisories/CVE-2023-1904/https://agentprime.io/advisories/CVE-2023-1904/CVSS 4.2 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 14 Dec 2023 07:23:08 GMTCVECVE-2022-2416: In affected versions of Octopus Deploy it is possible for a low privileged guest user to craft a request that allows enumeration/recon of an environment.https://agentprime.io/advisories/CVE-2022-2416/https://agentprime.io/advisories/CVE-2022-2416/CVSS 5.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 02 Aug 2023 05:26:10 GMTCVECVE-2022-2346: In affected versions of Octopus Deploy it is possible for a low privileged guest user to interact with extension endpoints.https://agentprime.io/advisories/CVE-2022-2346/https://agentprime.io/advisories/CVE-2022-2346/CVSS 5.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 02 Aug 2023 01:09:01 GMTCVECVE-2022-4870: Sensitive information in error messages in Octopus Deploy Octopus Serverhttps://agentprime.io/advisories/CVE-2022-4870/https://agentprime.io/advisories/CVE-2022-4870/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 18 May 2023 00:00:00 GMTCVECVE-2023-2247: In affected versions of Octopus Deploy it is possible to unmask variable secrets using the variable preview functionhttps://agentprime.io/advisories/CVE-2023-2247/https://agentprime.io/advisories/CVE-2023-2247/Published by the CVE Program. Not analysed by agentprime yet.Tue, 02 May 2023 00:00:00 GMTCVECVE-2022-2507: Cross-site scripting in Octopus Deploy Octopus Serverhttps://agentprime.io/advisories/CVE-2022-2507/https://agentprime.io/advisories/CVE-2022-2507/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 19 Apr 2023 00:00:00 GMTCVECVE-2022-4009: Command injection in Octopus Deploy Octopus Serverhttps://agentprime.io/advisories/CVE-2022-4009/https://agentprime.io/advisories/CVE-2022-4009/CVSS 8.8 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 16 Mar 2023 00:00:00 GMTCVECVE-2022-2259: Improper access control in Octopus Deploy Octopus Serverhttps://agentprime.io/advisories/CVE-2022-2259/https://agentprime.io/advisories/CVE-2022-2259/CVSS 4.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Mon, 13 Mar 2023 00:00:00 GMTCVECVE-2022-2258: In affected versions of Octopus Deploy it is possible for a user to view Tagsets without being explicitly assigned permissions to view these itemshttps://agentprime.io/advisories/CVE-2022-2258/https://agentprime.io/advisories/CVE-2022-2258/CVSS 4.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Mon, 13 Mar 2023 00:00:00 GMTCVECVE-2022-2883: Unrestricted file upload in Octopus Deploy Octopus Serverhttps://agentprime.io/advisories/CVE-2022-2883/https://agentprime.io/advisories/CVE-2022-2883/CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 22 Feb 2023 00:00:00 GMTCVECVE-2022-4898: Cross-site scripting in Octopus Deploy Octopus Serverhttps://agentprime.io/advisories/CVE-2022-4898/https://agentprime.io/advisories/CVE-2022-4898/CVSS 5.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 31 Jan 2023 00:00:00 GMTCVECVE-2022-3614: Authentication bypass in Octopus Deploy Octopus Serverhttps://agentprime.io/advisories/CVE-2022-3614/https://agentprime.io/advisories/CVE-2022-3614/CVSS 6.1 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 03 Jan 2023 00:00:00 GMTCVECVE-2022-3460: Information disclosure in Octopus Deploy Octopus Serverhttps://agentprime.io/advisories/CVE-2022-3460/https://agentprime.io/advisories/CVE-2022-3460/CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Mon, 02 Jan 2023 00:00:00 GMTCVECVE-2022-2721: Sensitive information in log files in Octopus Deploy Octopus Serverhttps://agentprime.io/advisories/CVE-2022-2721/https://agentprime.io/advisories/CVE-2022-2721/CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Fri, 25 Nov 2022 00:00:00 GMTCVECVE-2022-2572: Improper authentication in Octopus Deploy Octopus Serverhttps://agentprime.io/advisories/CVE-2022-2572/https://agentprime.io/advisories/CVE-2022-2572/CVSS 9.8 (Critical). Critical: CVSS score 9.8: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Tue, 01 Nov 2022 00:00:00 GMTCVEcriticalCVE-2022-2508: Sensitive information in error messages in Octopus Deploy Octopus Serverhttps://agentprime.io/advisories/CVE-2022-2508/https://agentprime.io/advisories/CVE-2022-2508/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 27 Oct 2022 00:00:00 GMTCVECVE-2022-2782: Insufficient session expiration in Octopus Deploy Octopus Serverhttps://agentprime.io/advisories/CVE-2022-2782/https://agentprime.io/advisories/CVE-2022-2782/CVSS 9.1 (Critical). Critical: CVSS score 9.1: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Wed, 26 Oct 2022 00:00:00 GMTCVEcriticalCVE-2022-2780: Authentication bypass by replay in Octopus Deploy Octopus Serverhttps://agentprime.io/advisories/CVE-2022-2780/https://agentprime.io/advisories/CVE-2022-2780/CVSS 8.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Fri, 14 Oct 2022 00:00:00 GMTCVE