The following is a list of CVEs that do not impact Artifactory.
CVE | Severity | Artifactory Fix Version | Reason |
|---|---|---|---|
High | 7.111.4 | Does not affect Artifactory, since it only affects | |
Medium | Artifactory is not affected because the vulnerable function ListenAndServe is never called. | ||
Medium | 7.110.1 | Artifactory is not affected as it does not enable the Default Servlet. | |
Medium | Affected flow which includes loading data from external sources on runtime such as such as Java Applets or Web Start are not used in JFrog products. | ||
Medium | Affected system property sun.io.useCanonCachesis needs to be set to true for Artifactory to be affected. The value of this property is set to false by default and not changed by JFrog. | ||
High | Default servlet does not have a param-name named readonly set to false, which would be required for Artifactory to be affected. | ||
High | Webapps/examples is not part of Artifactory deployment. | ||
Critical | 7.104.2 | The Evidence service, which was not yet available to users, contained Go language vulnerabilities in the 7.98 release. | |
Normal / High | 7.102.0 | CVE exists in the Docker image and doesn't affect Artifactory. | |
Critical | 7.102.0 | Flag required to leverage vulnerability (--experimental-permission) is not used the JFrog Platform. | |
High | 7.102.0 | Does not affect Artifactory, since it only affects | |
Medium | 7.98.10 | Does not affect Artifactory because as JakartaServer Pages is not used. | |
High | 7.98.10 | Does not affect Artifactory as the vulnerable components including Jakarta Authentication or any ServerAuthContext components are not used in its its authentication flow. | |
High | 7.99.1 | Does not affect Artifactory as the vulnerable | |
Medium / High | 7.99.1 | CVE exists in the Docker image and doesn't affect Artifactory. | |
Medium | 7.90.13 | The component using this functionality already forward those HTTP headers by design, hence this vulnerability didn't introduce any new behavior. | |
High | 7.95.0 | Does not affect Artifactory as the vulnerable functionality is not in use. | |
High | 7.92.0 | Does not affect Artifactory is as it doesn't make use of the traefik IP filtering feature. | |
Critical | 7.90.5 | Does not affect Artifactory as it only affects | |
Critical | 7.90.5 | Does not affect Artifactory as it only affects | |
High | 7.90.5 | Does not affect Artifactory as it only affects | |
High | 7.90.5 | Does not affect Artifactory as it only affects | |
High | 7.90.5 | Does not affect Artifactory as it only affects | |
High | 7.90.5 | Does not affect Artifactory as it only affects | |
High | 7.90.5 | Does not affect Artifactory as it only affects | |
High | 7.90.5 | Does not affect Artifactory as it only affects | |
High | 7.90.5 | Does not affect Artifactory as it only affects | |
High | 7.90.5 | Does not affect Artifactory as it only affects | |
High | 7.90.5 | Does not affect Artifactory as it only affects | |
High | 7.90.5 | Does not affect Artifactory as it only affects | |
High | 7.90.5 | Does not affect Artifactory as it only affects | |
High | 7.90.5 | Does not affect Artifactory as it only affects | |
High | 7.90.5 | Does not affect Artifactory as it only affects | |
High | 7.91.1 | Does not impact Artifactory, as Artifactory does not use the vulnerable | |
Medium | N/A | Does not affect Artifactory, as Artifactory does not use the | |
High | 7.86.0 | The CVE is present only in the docker image and does not affect Artifactory. | |
High | 7.86.0 | Does not affect Artifactory, as it only affects | |
Medium | 7.86.0 | Does not affect Artifactory, as it only affects | |
Critical | 7.84.3 | Does not affect Artifactory, as the Artifactory usage of | |
High | 7.83.1 | Upgraded | |
High | 7.81.1 | Does not affect Artifactory, as it only affects | |
Medium | 7.81.1 | Does not affect Artifactory, as it only affects | |
High | 7.80.0 | Does not affect Artifactory, as it only affects | |
High | 7.79.2 | Does not affect Artifactory, as it only affects | |
High | 7.79.2 | Does not affect Artifactory, as it only affects | |
Critical | 7.76.0 | Does not affect Artifactory, as it only affects | |
High | 7.76.0 | Does not affect Artifactory, as it only affects | |
High | 7.76.0 | Does not affect Artifactory, as it only affects | |
Medium | 7.75.0 | Does not affect Artifactory, as in the location where a vulnerable version of the | |
High | 7.71.5 | Does not affect Artifactory, as it only affects | |
Critical | 7.71.2 | Does not affect Artifactory, as it only affects | |
High | 7.71.2 | Does not affect Artifactory, as it only affects | |
High | 7.71.2 | Does not affect Artifactory, as it only affects | |
Critical | 7.70.2 | Does not affect Artifactory, as it only affects | |
High | 7.68.11 | Does not affect Artifactory, as it only affects | |
High | 7.68.6 | Does not affect Artifactory, since it only affects | |
High | 7.68.6 | Does not affect Artifactory, since it only affects | |
High | 7.68.6 | Does not affect Artifactory, since it only affects | |
Medium | 7.68.6 | Does not affect Artifactory, since it only affects | |
Critical | 7.66.3 | Does not affect Artifactory, since it only affects | |
Critical | 7.66.3 | Does not affect Artifactory, since it only affects | |
High | 7.66.3 | Does not affect Artifactory, since it only affects | |
High | 7.66.3 | Does not affect Artifactory, since it only affects | |
High | 7.66.3 | Does not affect Artifactory, since it only affects | |
Medium | 7.66.3 | Does not affect Artifactory, since it only affects | |
Medium | 7.66.3 | Does not affect Artifactory, since it only affects | |
Medium | 7.66.3 | Does not affect Artifactory, since it only affects | |
Medium | 7.66.3 | Does not affect Artifactory, since it only affects | |
Critical | 7.65.3 | Does not affect Artifactory, since it only affects | |
High | 7.65.3 | Does not affect Artifactory, since it only affects | |
Medium | 7.65.3 | Does not affect Artifactory, since it only affects | |
Medium | 7.65.3 | Does not affect Artifactory, since it only affects | |
Medium | 7.65.3 | Does not affect Artifactory, since it only affects | |
Medium | 7.65.3 | Does not affect Artifactory, since it only affects | |
Medium | 7.65.3 | Does not affect Artifactory, since it only affects | |
Critical | 7.64.4 | Does not impact Artifactory, since it only affects | |
High | 7.64.4 | Does not impact Artifactory, since it only affects | |
Medium | 7.64.4 | Does not impact Artifactory, since it only affects | |
Medium | 7.64.4 | Does not impact Artifactory, since it only affects | |
Medium | 7.64.4 | Does not impact Artifactory, since it only affects | |
High | 7.63.5 | Does not affect Artifactory, since it only impacts | |
High | 7.61.3 | Does not affect Artifactory, since it only impacts | |
High | 7.61.3 | Does not affect Artifactory, since it only impacts | |
High | 7.61.3 | Does not affect Artifactory, since it only impacts | |
High | 7.61.3 | Does not affect Artifactory, since it only impacts | |
High | 7.61.3 | Does not affect Artifactory, since it only impacts | |
High | 7.61.3 | Does not affect Artifactory, since it only impacts | |
Medium | 7.61.3 | Does not affect Artifactory, since it only impacts | |
Medium | 7.61.3 | Does not affect Artifactory, since it only impacts | |
Medium | 7.61.3 | Does not affect Artifactory, since it only impacts | |
Medium | 7.61.3 | Does not affect Artifactory, since it only impacts | |
High | 7.59.5 | Does not affect Artifactory, since it only affects | |
High | 7.59.5 | Does not affect Artifactory, since it only affects | |
High | 7.59.5 | Does not affect Artifactory, since it only affects | |
High | 7.58.5 | Doesn't impact Artifactory, since it only affects | |
High | 7.58.1 | Doesn't impact Artifactory, since it only affects | |
High | 7.58.1 | Doesn't impact Artifactory, since it only affects | |
Medium | 7.58.1 | Doesn't impact Artifactory, since it only affects | |
High | 7.58.0 | Doesn't affect Artifactory, since it only affects | |
High | 7.58.0 | Doesn't affect Artifactory, since it only affects | |
High | 7.58.0 | Doesn't affect Artifactory, since it only affects | |
High | 7.58.0 | Doesn't affect Artifactory, since it only affects | |
Critical | 7.57.1 | Does not affect Artifactory, since it only affects | |
Medium | 7.57.1 | Does not affect Artifactory, since it only affects | |
High | 7.56.2 | Does not affect Artifactory, since it only affects | |
High | 7.56.2 | Does not affect Artifactory, since it only affects | |
High | 7.56.2 | Does not affect Artifactory, since it only affects | |
Medium | 7.56.2 | Does not affect Artifactory, since it only affects | |
High | 7.55.1 | Does not affect Artifactory, since it only affects | |
High | 7.55.1 | Does not affect Artifactory, since it only affects | |
High | 7.55.1 | Does not affect Artifactory, since it only affects | |
High | 7.55.1 | Does not affect Artifactory, since it only affects | |
High | 7.55.1 | Does not affect Artifactory, since it only affects | |
High | 7.55.1 | Does not affect Artifactory, since it only affects | |
High | 7.55.1 | Does not affect Artifactory, since it only affects | |
High | 7.55.1 | Does not affect Artifactory, since it only affects | |
High | 7.55.1 | Does not affect Artifactory, since it only affects | |
High | 7.55.1 | Does not affect Artifactory, since it only affects | |
Critical | 7.53.1 | Does not affect Artifactory, since it only affects | |
High | 7.53.1 | Does not affect Artifactory, since it only affects | |
High | 7.53.1 | Does not affect Artifactory, since it only affects | |
High | 7.53.1 | Does not affect Artifactory, since it only affects | |
High | 7.53.1 | Does not affect Artifactory, since it only affects | |
High | 7.53.1 | Does not affect Artifactory, since it only affects | |
High | 7.53.1 | Does not affect Artifactory, since it only affects | |
Medium | 7.53.1 | Does not affect Artifactory, since it only affects | |
Medium | 7.53.1 | Does not affect Artifactory, since it only affects | |
Critical | 7.52.0 | Does not affect Artifactory, since it only affects | |
High | 7.52.0 | Does not affect Artifactory, since it only affects | |
High | 7.52.0 | Does not affect Artifactory, since it only affects | |
High | 7.52.0 | Does not affect Artifactory, since it only affects | |
High | 7.52.0 | Does not affect Artifactory, since it only affects | |
High | 7.52.0 | Does not affect Artifactory, since it only affects | |
High | 7.52.0 | Does not affect Artifactory, since it only affects | |
High | 7.52.0 | Does not affect Artifactory, since it only affects | |
High | 7.52.0 | Does not affect Artifactory, since it only affects | |
Medium | 7.52.0 | Does not affect Artifactory, since it only affects | |
Medium | 7.52.0 | Does not affect Artifactory, since it only affects | |
Medium | 7.52.0 | Does not affect Artifactory, since it only affects | |
Critical | 7.50.3 | Does not affect Artifactory, since it only affects | |
High | 7.50.3 | Doesn't affect Artifactory, since it only affects | |
High | 7.50.3 | Doesn't affect Artifactory, since it only affects | |
High | 7.50.3 | Doesn't affect Artifactory, since it only affects | |
High | 7.49.3 | Doesn't affect Artifactory, since it only affects | |
High | 7.49.3 | Does not affect Artifactory, since it only affects Upgraded | |
High | 7.49.3 | Does not affect Artifactory, since it only affects | |
High | 7.49.3 | Does not affect Artifactory, since it only affects | |
High | 7.49.3 | Does not affect Artifactory, since it only affects | |
High | 7.49.3 | Does not affect Artifactory, since it only affects | |
High | 7.49.3 | Does not affect Artifactory, since it only affects | |
High | 7.49.3 | Does not affect Artifactory, since it only affects | |
Medium | 7.49.3 | Does not affect Artifactory, since it only affects | |
Medium | 7.49.3 | Does not affect Artifactory, since it only affects | |
Medium | 7.49.3 | Does not affect Artifactory, since it only affects | |
Medium | 7.49.3 | Does not affect Artifactory, since it only affects | |
Medium | 7.49.3 | Does not affect Artifactory, since it only affects | |
Critical | 7.47.7 | Does not affect Artifactory, since it only affects | |
Critical | 7.47.7 | Does not affect Artifactory, since it only affects | |
Critical | 7.47.7 | Does not affect Artifactory, since it only affects | |
High | 7.47.7 | Does not affect Artifactory, since it only affects | |
High | 7.47.7 | Does not affect Artifactory, since it only affects | |
High | 7.47.7 | Does not affect Artifactory, since it only affects | |
High | 7.46.3 | Does not affect Artifactory, since it only affects | |
Medium | 7.47.7 | Does not affect Artifactory, since it only affects | |
Medium | 7.47.7 | Does not affect Artifactory, since it only affects
| |
Medium | 7.47.7 | Does not affect Artifactory, since it only affects | |
Medium | 7.47.7 | Does not affect Artifactory, since it only affects | |
Medium | 7.47.7 | Does not affect Artifactory, since it only affects grpc-tools and
| |
Medium | 7.47.7 |
| |
Medium | 7.47.7 | Does not affect Artifactory, since it only affects
| |
Medium | 7.46.3 | Does not affect Artifactory, since it only affects | |
Medium | 7.46.3 | Does not affect Artifactory, since it only affects | |
Medium | 7.46.3 | Does not affect Artifactory, since it only affects | |
Medium | 7.46.3 | Does not affect Artifactory, since it only affects | |
Critical | 7.46.3 | Does not affect Artifactory, since it only affects | |
High | 7.46.3 | Does not affect Artifactory, since it only affects | |
Critical | 7.46.3 | Does not affect Artifactory, since it only affects | |
High | 7.46.3 | Does not affect Artifactory, since it only affects | |
High | 7.46.3 | Does not affect Artifactory, since it only affects | |
High | 7.46.3 | Does not affect Artifactory, since it only affects | |
High | 7.46.3 | Does not affect Artifactory, since it only affects | |
Medium | 7.46.3 | Does not affect Artifactory, since it only affects | |
Medium | 7.46.3 | Does not affect Artifactory, since it only affects | |
Medium | 7.46.3 | Does not affect Artifactory, since it only affects | |
Medium | 7.46.3 | Does not affect Artifactory, since it only affects | |
Medium | 7.46.3 | Does not affect Artifactory, since it only affects | |
Medium | 7.46.3 | Does not affect Artifactory, since it only affectsio.netty:netty-common. | |
Medium | 7.46.3 | Does not affect Artifactory, since it only affects | |
Medium | 7.46.3 | Does not affect Artifactory, since it only affects | |
Critical | 7.46.3 | Does not affect Artifactory, since it only affects | |
Critical | 7.42.1 | Does not affect Artifactory, since it only affects | |
High | 7.42.1 | Does not affect Artifactory, since it only affects | |
High | 7.41.4 | Does not affect Artifactory, since it only affects | |
Medium | 7.41.4 | Does not affect Artifactory, since it only affects | |
High | 7.41.4 | Does not affect Artifactory, since it only affects | |
Critical | 7.41.4 | Does not affect Artifactory, since it only affects | |
High | 7.41.4 | Does not affect Artifactory, since it only affects | |
Critical | 7.39.4 | Does not affect Artifactory, since it only affects | |
High | 7.39.4 | Does not affect Artifactory, since it only affects | |
Medium | 7.39.4 | Does not affect Artifactory, since it only affects | |
High | 7.39.4 | Does not affect Artifactory, since it only affects | |
High | 7.39.4 | Does not affect Artifactory, since it only affects to | |
Medium | 7.39.4 | Does not affect Artifactory, since it only affects | |
Medium | 7.37.13 | Does not affect Artifactory, since it only affects | |
High | 7.37.13 | Does not affect Artifactory, since it only affects | |
Critical | 7.37.13 | Does not affect Artifactory, since it only affects | |
Medium | 7.35.1 | Does not affect Artifactory, since it only affects | |
Medium | 7.34.4 | Does not affect Artifactory, since it only affects org.springframework:spring-core:5.3.12. | |
Medium | 7.31.10 | Does not affect Artifactory, since it only affects | |
Medium | 7.31.10 | Does not affect Artifactory, since it only affects | |
Medium | 7.31.10 | Does not affect Artifactory, since it only affects mysql:mysql-connector-java:8.0.20. | |
High | 7.31.10 | Does not affect Artifactory, since it only affects the Apache Tomcat versions: 9.0.48 and 8.5.73. | |
High | 7.31.10 | Does not affect Artifactory, since it only affects the | |
High | 7.31.10 | Does not affect Artifactory, since they only affect Java. | |
Medium | 7.31.10 | Does not affect Artifactory, since it only affects the | |
Medium | 7.27.3 | Does not affect Artifactory, since it only affects the Apache Tomcat. | |
High | 7.27.3 | Does not affect Artifactory, since it only affects the | |
High | 7.27.3 | Does not affect Artifactory, since it only affects the | |
High | 7.27.3 | Does not affect Artifactory, since it only affects the | |
High | 7.25.4 | Does not affect Artifactory, since it only affects the | |
High | 7.25.4 | Does not affect Artifactory, since it only affects the | |
Critical | 7.25.4 | Does not affect Artifactory, since it only affects the | |
Critical | 7.25.4 | Does not affect Artifactory, since it only affects the | |
Normal | 7.24.1 | Does not affect Artifactory, since it only affects the Maven version 3.8.1. | |
High | 7.24.1 | Does not affect Artifactory, since it only affects the Apache Velocity engine. | |
Critical | 7.23.3 | Does not affect Artifactory, since it only affects | |
Critical | 7.21.3 | Does not affect Artifactory, since it only affects | |
High | 7.21.3 | Does not affect Artifactory, since it only affects | |
Medium | 7.21.3 | Does not affect Artifactory, since it only affects | |
Medium | 7.21.3 | Does not affect Artifactory, since it only affects | |
High | 7.17.4 | Does not affect Artifactory, since it only affects | |
Medium | 7.15.3 | Does not affect Artifactory, since it only affects | |
High | 7.11.1 | Does not affect Artifactory, since it only affects | |
Medium | 7.11.1 | Does not affect Artifactory, since it only affectsO | |
High | 7.11.1 | Does not affect Artifactory, since it only affects | |
High | 7.11.1 | Does not affect Artifactory, since it only affects | |
High | 7.10.5 | Does not affect Artifactory, since it only affects | |
High | 7.10.5 | Does not affect Artifactory, since it only affects at | |
Critical | 7.10.2 | Does not affect Artifactory, since it only affects | |
Medium | 7.10.1 | Does not affect Artifactory, since it only affects | |
Medium | 7.10.1 | Does not affect Artifactory, since it only affects | |
High | 7.10.1 | Does not affect Artifactory, since it only affects | |
High | 7.10.1 | Does not affect Artifactory, since it only affects | |
High | 7.10.1 | Does not affect Artifactory, since it only affects | |
High | 7.10.1 | Does not affect Artifactory, since it only affects | |
Critical | 7.10.1 | Does not affect Artifactory, since it only affects | |
High | 7.9.0 | Does not affect Artifactory, since it only affects lodash. | |
Critical | 7.9.0 | Does not affect Artifactory, since it only affects | |
Critical | 7.8.1 | Does not affect Artifactory, since it only affects | |
Critical | 7.8.1 | Does not affect Artifactory, since it only affects | |
Critical | 7.8.1 | Does not affect Artifactory, since it only affects | |
High | 7.7.0 | Does not affect Artifactory, since it only affects | |
High | 7.7.0 | Does not affect Artifactory, since it only affects | |
High | 7.7.0 | Does not affect Artifactory, since it only affects | |
Critical | 6.23.25 | Does not affect Artifactory, since it only affects | |
High | N/A | Does not affect Artifactory, as it only affects While the usage of the vulnerable version of derby is found, it is not exploitable because it requires administrative access to the machine and the attributes in | |
High | N/A | Does not affect Artifactory, since it only affects | |
High | N/A | JFrog Artifactory is not affected, since it does not use the | |
Critical | N/A | JFrog Platformis not affected, since it does not use the impacted packages. | |
Critical | N/A | Does not affect Artifactory, since it does not use the impacted | |
Medium | N/A | Does not affect Artifactory, since it does not use the impacted component that is included in the Apache Tomcat version. | |
High | N/A | Does not affect Artifactory, since it does not use the impacted component that is included in the Apache Tomcat version. | |
High | N/A | Does not affect Artifactory, since only | |
Medium | N/A | Does not affect Artifactory, since it only affects the Android Platform. | |
Medium | N/A | Does not affect Artifactory, since it only affects the Android Platform. | |
N/A | Medium | N/A | Does not affect Artifactory, as it applies only when using Apache Sling which is not the case in Artifactory. |
N/A | Medium | N/A | Does not affect Artifactory, since it only affects |
High | N/A | Does not affect Artifactory, since Artifactory is not using | |
High | N/A | Does not affect Artifactory, since the vulnerability is exploitable in case Tomcat is configured with PersistenceManager, which Artifactory does not use. | |
High | N/A | This CVE supposedly affects Artifactory 6.x versions. The | |
High | N/A | This CVE supposedly affects Artifactory 6.x versions. The | |
High | N/A | The | |
High | N/A | The JFrog Apache Tomcat version is 8.5.32, which is not one of the vulnerable versions. | |
High | N/A | The JFrog | |
Medium | N/A | JFrog is not responsible for vulnerabilities in the Windows operating system. Anyone using an on-premises environment should keep the Windows operating system up to date. | |
High | N/A | Does not affect Artifactory, since JFrog does not use Apache Struts. | |
High | N/A | Does not affect Artifactory, since the issue relates to certain HP Inkjet printers and is not relevant to JFrog. | |
High | N/A | Does not affect Artifactory, since the issue relates to certain HP Inkjet printers and is not relevant to JFrog. | |
High | N/A | Does not affect Artifactory, since JFrog does not use | |
High | N/A | Does not affect Artifactory, since JFrog does not use | |
High | N/A | Does not affect Artifactory, since JFrog does not use | |
High | N/A | Does not affect Artifactory, since the default value for the | |
Critical | N/A | Does not affect Artifactory, since the the | |
High | N/A | Does not affect Artifactory, since the issue refers/relates only to the "Send File" service which is not used by Artifactory. | |
Critical | N/A | Artifactory is not affected by the Apache Struts 2 vulnerability. | |
High | N/A | For LDAP authentication, Artifactory strictly uses the Artifactory does not use any other provider with LDAP, such as | |
High | N/A | Does not affect Artifactory, since Artifactory Jfrog does not require Python to be installed; the CVE is not relevant for Jfrog. | |
High | N/A | Does not affect Artifactory, since Artifactory uses |