Vulnerabilities in jfrog

34 results
Vexday analysis

JFrog tem 13 vulnerabilidades catalogadas, todas publicadas nos últimos 90 dias, indicando exposição recente e concentrada. Nenhuma está sob exploração ativa (KEV) e não há críticas por CVSS, reduzindo o risco imediato. A fraqueza dominante é CWE-918 (SSRF), típica de plataformas que interagem com recursos remotos, exigindo validação rigorosa de URLs e redes internas.

CVE-2026-66015HIGHJFrog Platform contains an authorization flaw that may allow authenticated privilege escalation.EPSS 0.3%CVE-2026-66014HIGHPotential authentication bypass leading to privilege escalation in ArtifactoryEPSS 0.3%CVE-2026-65617HIGHPotential remote code execution on an Artifactory package service container.EPSS 0.3%CVE-2026-42017HIGHPrivilege escalation via JFrog Worker event token exposureEPSS 0.3%CVE-2024-2248MEDIUMJFrog Artifactory Header InjectionEPSS 0.3%CVE-2025-14830MEDIUMJFrog Artifactory Cross-Site ScriptingEPSS 0.2%CVE-2026-66018MEDIUMJFrog Artifactory build environment properties exposureEPSS 0.2%CVE-2026-42016HIGHIncorrect authorization validation of user token in JFrog Artifactory allows Privilege EscalationEPSS 0.2%CVE-2026-65924MEDIUMServer-Side Request Forgery (SSRF) via Terraform Remote repositoryEPSS 0.2%CVE-2026-65618MEDIUMImproper URL validation when handling specific URLs Pub, Terraform and Docker packages might lead to SSRF vulnerabilityEPSS 0.2%CVE-2026-65925MEDIUMServer-Side Request Forgery (SSRF) via JFrog Artifactory Cargo remote repositoryEPSS 0.2%CVE-2026-65923MEDIUMPotential server-side request forgery in Artifactory Ansible repository handlingEPSS 0.2%CVE-2026-65616HIGHPotential privilege escalation to JFrog administrator privilegesEPSS 0.2%CVE-2026-65922HIGHPotential unauthorized modification of Artifactory internal metadataEPSS 0.2%