CVE security advisories and vulnerability history for artifactory by jfrog.
78
Total CVEs
Published
4
In CISA KEV
Exploited in the wild
12
Public exploits
PoC or exploit code
7.0
Avg CVSS
2016–2026
Last updated
Overview
jfrog artifactory has 78 published CVE records since 2016, of which 4 are in CISA's Known Exploited Vulnerabilities catalog and 12 have a known public exploit. The average CVSS base score across scored CVEs is 7.0.
Severity and exploitation
How the CVSS severity of jfrog artifactory's CVEs breaks down, plus how many are exploited in the wild or have public exploit code.
Critical10
High29
Medium36
Low3
In CISA’s Known Exploited Vulnerabilities catalog
4
4 of jfrog artifactory's CVEs are confirmed exploited in the wild.
Public exploits
12
12 of jfrog artifactory's CVEs have a known public exploit available.
Affected versions and CVEs
Browse every jfrog artifactory version named in a CVE, then pick one to see only the CVEs that affect it.
Version ranges
7.161.0 <= v < 7.161.1621 CVEs
< 7.146.3520 CVEs
7.146.0 <= v < 7.146.349 CVEs
7.161.0 <= v < 7.161.159 CVEs
< 7.111.187 CVEs
7.117.0 <= v < 7.117.257 CVEs
7.125.0 <= v < 7.125.187 CVEs
7.133.0 <= v < 7.133.277 CVEs
6.0.0 <= v < 6.23.384 CVEs
<= 3.2.23 CVEs
7.0.0 <= v < 7.31.103 CVEs
Common weakness types
The CWE weakness categories most often found in jfrog artifactory CVEs. Follow any weakness for its full explanation.
Common questions about jfrog artifactory vulnerabilities.
How many CVEs does jfrog artifactory have?
jfrog artifactory has 78 published CVE records since 2016.
How many jfrog artifactory CVEs are in CISA KEV?
Yes — 4 of jfrog artifactory's CVEs are listed in CISA's Known Exploited Vulnerabilities catalog, confirmed exploited in the wild and carrying a CISA remediation deadline.
Are there public exploits for jfrog artifactory vulnerabilities?
Yes — 12 of jfrog artifactory's CVEs have a known public exploit.
Which versions of jfrog artifactory are affected?
236 distinct jfrog artifactory versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version.
What are the most common weakness types in jfrog artifactory CVEs?
jfrog artifactory's CVEs most often map to these CWE weakness types: CWE-862 (Missing Authorization), CWE-20 (Improper Input Validation), CWE-918 (Server-Side Request Forgery (SSRF)), CWE-287 (Improper Authentication).
How many critical jfrog artifactory vulnerabilities are there?
jfrog artifactory has 10 critical and 29 high-severity CVEs.
What is the average severity of jfrog artifactory CVEs?
The average CVSS base score across jfrog artifactory's scored CVEs is 7.0.
