How many Octopus Deploy Octopus Server CVEs are in CISA KEV?

None of Octopus Deploy Octopus Server's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.

Which versions of Octopus Deploy Octopus Server are affected?

565 distinct Octopus Deploy Octopus Server versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version.

What are the most common weakness types in Octopus Deploy Octopus Server CVEs?

Octopus Deploy Octopus Server's CVEs most often map to these CWE weakness types: CWE-79 (Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')), CWE-863 (Incorrect Authorization), CWE-532 (Insertion of Sensitive Information into Log File), CWE-22 (Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')).

How many critical Octopus Deploy Octopus Server vulnerabilities are there?

Octopus Deploy Octopus Server has 4 critical and 27 high-severity CVEs.

What is the average severity of Octopus Deploy Octopus Server CVEs?

The average CVSS base score across Octopus Deploy Octopus Server's scored CVEs is 6.1.

Octopus Deploy Octopus Server Vulnerabilities: CVEs, CISA KEV & Security Advisories

Name: Octopus Deploy Octopus Server vulnerability dataset (CVEs)
Creator: RadicalNotion.AI
License: https://creativecommons.org/licenses/by-nc/4.0/

RadicalNotion.AI

Octopus Deploy Octopus Server Vulnerabilities: CVEs, CISA KEV & Security Advisories

Overview

Octopus Deploy Octopus Server has 79 published CVE records since 2017, of which 0 are in CISA's Known Exploited Vulnerabilities catalog and 2 have a known public exploit. The average CVSS base score across scored CVEs is 6.1. Affected platforms include linux, windows.

Severity and exploitation

How the CVSS severity of Octopus Deploy Octopus Server's CVEs breaks down, plus how many are exploited in the wild or have public exploit code.

Critical4

High27

Medium39

Low9

In CISA’s Known Exploited Vulnerabilities catalog

None of Octopus Deploy Octopus Server's CVEs are currently listed in CISA's KEV catalog.

Public exploits

2 of Octopus Deploy Octopus Server's CVEs have a known public exploit available.

Affected versions and CVEs

Browse every Octopus Deploy Octopus Server version named in a CVE, then pick one to see only the CVEs that affect it.

Version ranges

>= 2022.3.34824 CVEs
>= 2022.2.672916 CVEs
>= 2022.4.79112 CVEs
>= 0.911 CVEs
< 2022.3.1058610 CVEs
< 2022.1.28945 CVEs
>= 2022.1.21215 CVEs
2022.3.348 <= v < 2022.3.105865 CVEs
< 2022.2.85524 CVEs
< 2022.3.107504 CVEs
< 2022.3.49534 CVEs
>= 2021.1.7149

Common weakness types

The CWE weakness categories most often found in Octopus Deploy Octopus Server CVEs. Follow any weakness for its full explanation.

Disclosure activity by year

How many Octopus Deploy Octopus Server CVEs were published each year.

2017

2018

2019

2020

2021

2022

2023

Other Octopus Deploy products

Browse vulnerabilities for other products by Octopus Deploy.

octopus deploy31 CVEs server9 CVEs Octopus Tentacle4 CVEs octopustentacle4 CVEs tentacle4 CVEs codefresh1 CVEs halibut1 CVEs Kubernetes Worker or Kubernetes Agent

Frequently asked questions

Common questions about Octopus Deploy Octopus Server vulnerabilities.

How many CVEs does Octopus Deploy Octopus Server have?: Octopus Deploy Octopus Server has 79 published CVE records since 2017.
How many Octopus Deploy Octopus Server CVEs are in CISA KEV?: None of Octopus Deploy Octopus Server's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.
Are there public exploits for Octopus Deploy Octopus Server vulnerabilities?: Yes — 2 of Octopus Deploy Octopus Server's CVEs have a known public exploit.
Which versions of Octopus Deploy Octopus Server are affected?: 565 distinct Octopus Deploy Octopus Server versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version.
What are the most common weakness types in Octopus Deploy Octopus Server CVEs?: Octopus Deploy Octopus Server's CVEs most often map to these CWE weakness types: CWE-79 (Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')), CWE-863 (Incorrect Authorization), CWE-532 (Insertion of Sensitive Information into Log File), CWE-22 (Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')).
How many critical Octopus Deploy Octopus Server vulnerabilities are there?: Octopus Deploy Octopus Server has 4 critical and 27 high-severity CVEs.
What is the average severity of Octopus Deploy Octopus Server CVEs?: The average CVSS base score across Octopus Deploy Octopus Server's scored CVEs is 6.1.

References

Vulnerability data is sourced from the CVE Program; severity, KEV, and exploit signals are aggregated by RadicalNotion.AI.

Track Octopus Deploy Octopus Server vulnerabilities

Get an alert for each new Octopus Deploy Octopus Server CVE, with AI-written analysis and remediation steps.

Create an account See pricing

Fixed in

2022.3.1058610 CVEs
2022.1.28945 CVEs
2022.2.85524 CVEs
2022.3.107504 CVEs
2022.3.49534 CVEs
2020.6.51463 CVEs
2021.1.73163 CVEs
2021.3.130213 CVEs
2022.1.31543 CVEs
2022.2.68723 CVEs
2022.2.78973 CVEs
2022.2.79653 CVEs
2022.4.28983 CVEs
2022.4.83193 CVEs
2024.2.91933 CVEs
2022.1.28492 CVEs
2022.1.31802 CVEs
2022.1.32642 CVEs
2022.2.69712 CVEs
2022.2.79342 CVEs
2022.2.82772 CVEs
2022.2.83512 CVEs
2022.3.104052 CVEs
2022.3.110432 CVEs
2022.3.110982 CVEs
2022.3.23872 CVEs
2022.3.91632 CVEs
2022.4.80632 CVEs
2022.4.84012 CVEs
2022.4.84632 CVEs
2022.4.99972 CVEs
2023.1.102352 CVEs
2023.1.96722 CVEs
2023.2.105452 CVEs
2024.1.127592 CVEs
2024.3.130712 CVEs
2024.3.130972 CVEs
2024.4.70652 CVEs
2024.4.70912 CVEs
2025.4.103592 CVEs
2026.1.115872 CVEs
2026.1.117252 CVEs
2026.2.131902 CVEs
2026.2.133442 CVEs
2026.3.118162 CVEs
2026.3.158162 CVEs
2018.9.11 CVE
2019.1.81 CVE
2019.7.61 CVE
2020.4.2291 CVE
2020.5.2561 CVE
2020.6.53101 CVE
2021.1.76221 CVE
2021.2.80111 CVE
2021.3.110571 CVE
2021.3.125331 CVE
2021.3.131501 CVE
2022.1.26471 CVE
2022.1.30091 CVE
2022.1.31061 CVE
2022.1.31341 CVE
2022.1.31351 CVE
2022.1.32811 CVE
2022.1.531 CVE
2022.2.72441 CVE
2022.2.77181 CVE
2022.3.109291 CVE
2022.3.109571 CVE
2022.3.26161 CVE
2022.3.77821 CVE
2022.4.13711 CVE
2022.4.7911 CVE
2022.4.82211 CVE
2022.4.83321 CVE
2023.1.119421 CVE
2023.1.41891 CVE
2023.1.67151 CVE
2023.1.97941 CVE
2023.1.98791 CVE
2023.2.131511 CVE
2023.2.81591 CVE
2023.3.133611 CVE
2023.3.50491 CVE
2023.4.2961 CVE
2023.4.83381 CVE
2023.4.84321 CVE
2023.4.86081 CVE
2024.1.111271 CVE
2024.1.120871 CVE
2024.1.129311 CVE
2024.1.130381 CVE
2024.1.4371 CVE
2024.2.1011 CVE
2024.2.20751 CVE
2024.2.93131 CVE
2024.2.94821 CVE
2024.3.127661 CVE
2024.3.129851 CVE
2024.3.130071 CVE
2024.4.69621 CVE
2024.4.69951 CVE
2025.3.147151 CVE
2025.3.147311 CVE
2025.3.147611 CVE
2025.4.104091 CVE
2025.4.105231 CVE
2025.4.105451 CVE
2025.4.106781 CVE
2026.1.113131 CVE
2026.1.114511 CVE
2026.1.117391 CVE
2026.1.117681 CVE
2026.1.117811 CVE
2026.1.55711 CVE
2026.2.124381 CVE
2026.2.131141 CVE
2026.2.133641 CVE
2026.2.134081 CVE
2026.2.134411 CVE
2026.3.139511 CVE
2026.3.158291 CVE