CVE security advisories and vulnerability history for artifactory by jfrog.
78
Total CVEs
Published
1
In CISA KEV
Exploited in the wild
6
Public exploits
PoC or exploit code
7.0
Avg CVSS
2016–2026
Last updated
Overview
jfrog artifactory has 78 published CVE records since 2016, of which 1 are in CISA's Known Exploited Vulnerabilities catalog and 6 have a known public exploit. The average CVSS base score across scored CVEs is 7.0.
This page aggregates every publicly disclosed vulnerability (CVE) affecting jfrog artifactory, with a severity breakdown, the affected and patched versions, the most common weakness types, and the full CVE list.
Severity and exploitation
How the CVSS severity of jfrog artifactory's CVEs breaks down, plus how many are exploited in the wild or have public exploit code.
Critical11
High28
Medium36
Low3
In CISA’s Known Exploited Vulnerabilities catalog
1
One of jfrog artifactory's CVEs is confirmed exploited in the wild.
Public exploits
6
6 of jfrog artifactory's CVEs have a known public exploit available.
Affected versions and CVEs
Browse every jfrog artifactory version named in a CVE, then pick one to see only the CVEs that affect it.
Version ranges
7.161.0 <= v < 7.161.1621 CVEs
< 7.146.3520 CVEs
7.146.0 <= v < 7.146.349 CVEs
7.161.0 <= v < 7.161.159 CVEs
< 7.111.187 CVEs
7.117.0 <= v < 7.117.257 CVEs
7.125.0 <= v < 7.125.187 CVEs
7.133.0 <= v < 7.133.277 CVEs
6.0.0 <= v < 6.23.384 CVEs
<= 3.2.23 CVEs
7.0.0 <= v < 7.31.103 CVEs
Common weakness types
The CWE weakness categories most often found in jfrog artifactory CVEs. Follow any weakness for its full explanation.
Common questions about jfrog artifactory vulnerabilities.
How many CVEs does jfrog artifactory have?
jfrog artifactory has 78 published CVE records since 2016.
How many jfrog artifactory CVEs are in CISA KEV?
Yes — 1 of jfrog artifactory's CVEs are listed in CISA's Known Exploited Vulnerabilities catalog, confirmed exploited in the wild and carrying a CISA remediation deadline.
Are there public exploits for jfrog artifactory vulnerabilities?
Yes — 6 of jfrog artifactory's CVEs have a known public exploit.
Which versions of jfrog artifactory are affected?
236 distinct jfrog artifactory versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version.
What are the most common weakness types in jfrog artifactory CVEs?
jfrog artifactory's CVEs most often map to these CWE weakness types: CWE-862 (Missing Authorization), CWE-918 (Server-Side Request Forgery (SSRF)), CWE-20 (Improper Input Validation), CWE-287 (Improper Authentication).
How many critical jfrog artifactory vulnerabilities are there?
jfrog artifactory has 11 critical and 28 high-severity CVEs.
What is the average severity of jfrog artifactory CVEs?
The average CVSS base score across jfrog artifactory's scored CVEs is 7.0.
