How many jfrog JFrog Artifactory CVEs are in CISA KEV?

None of jfrog JFrog Artifactory's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.

Are there public exploits for jfrog JFrog Artifactory vulnerabilities?

Yes — 1 of jfrog JFrog Artifactory's CVEs have a known public exploit.

Which versions of jfrog JFrog Artifactory are affected?

11 distinct jfrog JFrog Artifactory versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version.

What are the most common weakness types in jfrog JFrog Artifactory CVEs?

jfrog JFrog Artifactory's CVEs most often map to these CWE weakness types: CWE-284 (Improper Access Control), CWE-352 (Cross-Site Request Forgery (CSRF)), CWE-274 (Improper Handling of Insufficient Privileges), CWE-502 (Deserialization of Untrusted Data).

How many critical jfrog JFrog Artifactory vulnerabilities are there?

jfrog JFrog Artifactory has 1 critical and 3 high-severity CVEs.

What is the average severity of jfrog JFrog Artifactory CVEs?

The average CVSS base score across jfrog JFrog Artifactory's scored CVEs is 6.9.

JFrog Artifactory Vulnerabilities: CVEs, CISA KEV & Security Advisories

Name: JFrog Artifactory vulnerability dataset (CVEs)
Creator: RadicalNotion.AI
License: https://creativecommons.org/licenses/by-nc/4.0/

RadicalNotion.AI

JFrog Artifactory Vulnerabilities: CVEs, CISA KEV & Security Advisories

Overview

JFrog Artifactory has 8 published CVE records since 2021, of which 0 are in CISA's Known Exploited Vulnerabilities catalog and 1 have a known public exploit. The average CVSS base score across scored CVEs is 6.9.

This page aggregates every publicly disclosed vulnerability (CVE) affecting JFrog Artifactory, with a severity breakdown, the affected and patched versions, the most common weakness types, and the full CVE list.

Severity and exploitation

How the CVSS severity of JFrog Artifactory's CVEs breaks down, plus how many are exploited in the wild or have public exploit code.

Critical1

High3

Medium3

Low1

In CISA’s Known Exploited Vulnerabilities catalog

None of JFrog Artifactory's CVEs are currently listed in CISA's KEV catalog.

Public exploits

One of JFrog Artifactory's CVEs has a known public exploit available.

Affected versions and CVEs

Browse every JFrog Artifactory version named in a CVE, then pick one to see only the CVEs that affect it.

Fixed in

6.23.382 CVEs
6.23.412 CVEs
6.x2 CVEs
7.x2 CVEs
6.23.301 CVE
7.25.41 CVE
7.29.31 CVE
7.29.81 CVE
7.31.101 CVE
7.36.11 CVE
7.37.131 CVE

Find a version

8 CVEs

Sort

Critical vulnerability · 2023-01-08
CVE-2022-0668
Patch
CWE-274
Critical · CVSS 9.8
EPSS 0.6% (48th pct)2023-01-08
High vulnerability · 2022-07-06
CVE-2021-23163
Patch
CWE-352
High · CVSS 8.8
EPSS 0.3% (28th pct)2022-07-06
Medium vulnerability · 2022-07-06
CVE-2021-46687
Patch
CWE-359
Medium · CVSS 4.9
EPSS 0.8% (55th pct)2022-07-06
Medium vulnerability · 2022-07-06
CVE-2021-45721
Patch
CWE-79
Medium · CVSS 6.1
EPSS 0.6% (44th pct)2022-07-06
High vulnerability · 2022-05-16
CVE-2022-0573
Patch
CWE-502
High · CVSS 8.8
EPSS 2.0% (79th pct)2022-05-16
Low vulnerability · 2022-03-02
CVE-2021-46270
Patch
CWE-284
Low · CVSS 2.7
EPSS 0.6% (48th pct)2022-03-02
Medium vulnerability · 2022-03-02
CVE-2021-45074
Patch
CWE-284
Medium · CVSS 5.4
EPSS 0.6% (48th pct)2022-03-02
High vulnerability · 2021-12-20
CVE-2021-3860
Public exploit
Patch
CWE-89
High · CVSS 8.8
EPSS 1.0% (60th pct)2021-12-20

Common weakness types

The CWE weakness categories most often found in JFrog Artifactory CVEs. Follow any weakness for its full explanation.

Disclosure activity by year

How many JFrog Artifactory CVEs were published each year.

2021

2022

2023

Other jfrog products

Browse vulnerabilities for other products by jfrog.

artifactory78 CVEs jenkins-artifactory-plugin7 CVEs artifactory-docker-examples6 CVEs Artifactory Self-Hosted1 CVEs Artifactory (Workers)1 CVEs

All jfrog vulnerabilities

Frequently asked questions

Common questions about JFrog Artifactory vulnerabilities.

How many CVEs does jfrog JFrog Artifactory have?: jfrog JFrog Artifactory has 8 published CVE records since 2021.
How many jfrog JFrog Artifactory CVEs are in CISA KEV?: None of jfrog JFrog Artifactory's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.
Are there public exploits for jfrog JFrog Artifactory vulnerabilities?: Yes — 1 of jfrog JFrog Artifactory's CVEs have a known public exploit.
Which versions of jfrog JFrog Artifactory are affected?: 11 distinct jfrog JFrog Artifactory versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version.
What are the most common weakness types in jfrog JFrog Artifactory CVEs?: jfrog JFrog Artifactory's CVEs most often map to these CWE weakness types: CWE-284 (Improper Access Control), CWE-352 (Cross-Site Request Forgery (CSRF)), CWE-274 (Improper Handling of Insufficient Privileges), CWE-502 (Deserialization of Untrusted Data).
How many critical jfrog JFrog Artifactory vulnerabilities are there?: jfrog JFrog Artifactory has 1 critical and 3 high-severity CVEs.
What is the average severity of jfrog JFrog Artifactory CVEs?: The average CVSS base score across jfrog JFrog Artifactory's scored CVEs is 6.9.

References

Vulnerability data is sourced from the CVE Program; severity, KEV, and exploit signals are aggregated by RadicalNotion.AI.

Track JFrog Artifactory vulnerabilities

Monitor new JFrog Artifactory vulnerabilities as they are disclosed, with AI-written analysis and remediation guidance.

Start free See pricing