Read the docs

Octopus Deploy

Records118All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical5CVSS 9.0–10.0
CVSS high43CVSS 7.0–8.9

Exploited now

Octopus Deploy records in CISA KEV

No Octopus Deploy vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Octopus Server 66 records MEDIUM Octopus Deploy 31 records MEDIUM Server 9 records LOW Tentacle 4 records LOW Codefresh 1 record MEDIUM Halibut 1 record MEDIUM Octopusdsc 1 record LOW

Records

1 record in Halibut · all components

TI-2021-11816 CVE-2021-31819 · GHSA-hpf7-4c2g-9chf

Deserialization of untrusted data in Octopus Deploy Halibut

Priority MEDIUM 47

In Halibut versions prior to 4.4.7 there is a deserialisation vulnerability that could allow remote code execution on systems that already trust each other based on certificate verification.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.02355 Published 2021-09-22 Fixed in 4.4.7 CWE-502
Open these records in search →