Octopus Deploy Security Advisories
Home
Advisories icon
2021 2022
Severity Levels
Disclosure Policy

  • Security Advisory 2021-12

    Dec 13, 2021 · Vulnerability/Vulnerable-Dependency Severity/Low

    Octopus Deploy TeamCity Plugin log4j2 dependency (CVE-2021-44228)

    Read More

  • Security Advisory 2021-11

    Nov 24, 2021 · Vulnerability/Local-Privilege-Escalation Severity/High

    Local privilege escalation in Octopus Tentacle (CVE-2021-31822)

    Read More

  • Security Advisory 2021-10

    Sep 22, 2021 · Vulnerability/Remote-Code-Execution Severity/High

    Remote Code Execution in Octopus Tentacle (CVE-2021-31819)

    Read More

  • Security Advisory 2021-09

    Sep 22, 2021 · Vulnerability/Remote-Code-Execution Severity/High

    Remote Code Execution in Octopus Server (CVE-2021-31819)

    Read More

  • Security Advisory 2021-08

    Sep 22, 2021 · Vulnerability/Remote-Code-Execution Severity/High

    Remote Code Execution via Deserialisation in the Halibut Protocol (CVE-2021-31819)

    Read More

  • Security Advisory 2021-07

    Aug 13, 2021 · Vulnerability/Clear-Text-Storage-Of-Sensitive-Value Severity/Medium

    Proxy Password Stored in Plaintext (CVE-2021-31820)

    Read More

  • Security Advisory 2021-06

    Jul 8, 2021 · Vulnerability/Clear-Text-Storage-Of-Sensitive-Value Severity/Medium

    Cleartext Storage of Sensitive Information (CVE-2021-31817)

    Read More

  • Security Advisory 2021-05

    Jul 8, 2021 · Vulnerability/Clear-Text-Storage-Of-Sensitive-Value Severity/Medium

    Cleartext Storage of Sensitive Information (CVE-2021-31816)

    Read More

  • Security Advisory 2021-04

    Jun 10, 2021 · Vulnerability/SQL-Injection Severity/high

    SQL Injection in the Events REST API in Octopus Server (CVE-2021-31818)

    Read More

  • Security Advisory 2021-03

    May 12, 2021 · Vulnerability/Clear-text-storage-of-sensitive-value Severity/Medium

    Cleartext Storage of Sensitive Information in Octopus Server (CVE-2021-30183)

    Read More
    • ««
    • «
    • 1
    • 2
    • 3
    • »
    • »»

Recent Security Advisories

  • Security Advisory 2022-05
  • Security Advisory 2022-04
  • Security Advisory 2022-03
  • Security Advisory 2022-02
  • Security Advisory 2022-01
  • Security Advisory 2021-17
  • Security Advisory 2021-16
  • Security Advisory 2021-15

Products

OCTOPUS-SERVER 12 OCTOPUS-DEPLOY-TEAMCITY-PLUGIN 3 OCTOPUS-JAVA-SDK 3 OCTOPUS-TENTACLE 3 HALIBUT 1

Tags

SEVERITY/MEDIUM 9 SEVERITY/HIGH 7 SEVERITY/LOW 6 VULNERABILITY/VULNERABLE-DEPENDENCY 6 VULNERABILITY/CLEAR-TEXT-STORAGE-OF-SENSITIVE-VALUE 5 VULNERABILITY/LOCAL-PRIVILEGE-ESCALATION 3 VULNERABILITY/REMOTE-CODE-EXECUTION 3 VULNERABILITY/BROKEN-ACCESS-CONTROL 2 CVSS/3.4 1 CVSS/4.3 1 CVSS/5.7 1 CVSS/6.3 1 CVSS/6.4 1 VULNERABILITY/ABNORMAL-INVITE-CODE-FUNCTIONALITY 1
All Tags
CVSS/3.41 CVSS/4.31 CVSS/5.71 CVSS/6.31 CVSS/6.41 SEVERITY/HIGH7 SEVERITY/LOW6 SEVERITY/MEDIUM9 VULNERABILITY/ABNORMAL-INVITE-CODE-FUNCTIONALITY1 VULNERABILITY/BROKEN-ACCESS-CONTROL2 VULNERABILITY/CLEAR-TEXT-STORAGE-OF-SENSITIVE-VALUE5 VULNERABILITY/LOCAL-PRIVILEGE-ESCALATION3 VULNERABILITY/OPEN-REDIRECT1 VULNERABILITY/REMOTE-CODE-EXECUTION3 VULNERABILITY/SQL-INJECTION1 VULNERABILITY/VULNERABLE-DEPENDENCY6
[A~Z][0~9]
Octopus Deploy Security Advisories

Copyright   OCTOPUS DEPLOY SECURITY ADVISORIES. All Rights Reserved