← Back

Octopus

octopus

102 CVEs • 6 products

Products (6)

Click to collapse
Toggle
Octopus Server
octopus_server
64 CVEs
Octopus Deploy
octopus_deploy
31 CVEs
Server
server
9 CVEs
Tentacle
tentacle
4 CVEs
Octopusdsc
octopusdsc
1 CVE
Halibut
halibut
1 CVE

CVEs (102)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2017-15609
1Octopus
1Octopus Deploy
May 13, 2026
Oct 19, 2017
N/A· v4
7.5 HIGH· v3
5.0 MEDIUM· v2
Octopus before 3.17.7 allows attackers to obtain sensitive cleartext information by reading a variable JSON file in certain situations involving Offline Drop Targets.
CVE-2017-11348
1Octopus
2Octopus Deploy
Octopus Server
May 13, 2026
Jul 17, 2017
N/A· v4
5.7 MEDIUM· v3
6.3 MEDIUM· v2
In Octopus Deploy 3.x before 3.15.4, an authenticated user with PackagePush permission to upload packages could upload a maliciously crafted NuGet package, potentially overwriting other packages or modifying system files...Show more
In Octopus Deploy 3.x before 3.15.4, an authenticated user with PackagePush permission to upload packages could upload a maliciously crafted NuGet package, potentially overwriting other packages or modifying system files. This is a directory traversal in the PackageId value.Show less