octopus octopus deploy

Name: octopus octopus deploy
Brand: octopus

productUS

cpe:2.3:a:octopus:octopus_deploy:*:*:*:*:*:*:*:*

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

KEV-listed

public exploit

EPSS ≥ 10%

critical

by severity

0critical12high19medium0low

updated 2026-10-24

vulnerabilities (31)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2020-24566US	high7.5	1.81% (78th)	—	2020.3.4	2020-09-09	2020.3 → 2020.3.4
CVE-2019-8944US	medium6.5	1.55% (75th)	—	no fix	2019-02-20	5 versions
CVE-2020-25825US	high7.5	1.54% (75th)	—	no fix	2020-10-12	3.1.0 → 2020.4.0
CVE-2019-14525US	medium4.9	1.53% (75th)	—	2019.6.6	2019-08-05	2019.4.0 → 2019.6.6
CVE-2020-27155US	high7.5	1.27% (70th)	—	no fix	2020-10-22	3.11.13 → 2020.4.4
CVE-2018-10550US	high7.5	1.23% (69th)	—	2018.4.7	2018-04-30	< 2018.4.7
CVE-2017-11348US	medium5.7	1.22% (69th)	—	no fix	2017-07-17	2 versions
CVE-2019-11632US	high8.1	1.15% (67th)	—	no fix	2019-05-01	2019.1.0 → 2019.3.1
CVE-2017-17665US	high8.8OT elevated	1.14% (66th)	—	4.1.3	2017-12-13	< 4.1.3
CVE-2018-4862US	high8.8	1.08% (65th)	—	no fix	2018-01-03	3.2.11 → 4.1.5
CVE-2019-14268US	medium6.5	1.08% (65th)	—	no fix	2019-07-25	3.0.19 → 2019.7.2
CVE-2020-26161US	medium6.1	1.07% (65th)	—	no fix	2020-10-26	2019.8.2 → 2020.4.2
CVE-2020-10678US	high8.8	1.02% (63rd)	—	2020.1.5	2020-03-19	< 2020.1.5
CVE-2018-9039US	medium6.5OT elevated	1.01% (63rd)	—	2018.3.7	2018-03-27	2.0 → 2018.3.7
CVE-2018-5706US	high8.8	1.00% (63rd)	—	4.1.9	2018-01-16	< 4.1.9
CVE-2019-19376US	medium6.5	0.99% (62nd)	—	2019.9.8	2019-11-28	3 versions
CVE-2020-12286US	medium4.3	0.98% (62nd)	—	2020.1.12	2020-04-28	2 versions
CVE-2022-2013US	high7.5	0.91% (60th)	—	2022.1.2647	2022-06-13	2022.1.1495 → 2022.1.2647
CVE-2020-14470US	medium6.5	0.85% (58th)	—	2019.12.2	2020-06-19	2018.8.0 → 2019.12.2
CVE-2017-15609US	high7.5OT elevated	0.81% (56th)	—	no fix	2017-10-19	≤ 3.17.6
CVE-2018-12884US	medium6.5	0.79% (56th)	—	no fix	2018-06-26	= 3.0
CVE-2017-16810US	medium5.4	0.78% (55th)	—	no fix	2017-11-14	3.4.0 → 3.13.6
CVE-2017-16801US	medium5.4	0.77% (55th)	—	no fix	2017-11-13	3.7.0 → 3.17.3
CVE-2017-15611US	medium6.5	0.73% (54th)	—	no fix	2017-10-19	≤ 3.17.6
CVE-2018-10581US	medium5.4	0.72% (53rd)	—	2018.4.7	2018-05-01	3.4.0 → 2018.4.7
CVE-2019-19084US	medium4.3	0.69% (52nd)	—	no fix	2019-11-18	3.3.0 → 2019.10.4
CVE-2017-15610US	medium6.5	0.60% (48th)	—	no fix	2017-10-19	≤ 3.17.6
CVE-2022-23184US	medium6.1	0.56% (46th)	—	no fix	2022-02-07	2 versions
CVE-2023-2247US	medium5.3	0.45% (38th)	—	2022.4.8319	2023-05-02	2 versions
CVE-2019-19375US	medium5.3	0.42% (35th)	—	2019.10.7	2019-11-28	3 versions
CVE-2021-26556US	high7.8	0.26% (17th)	—	2020.4.229	2021-10-07	0.9 → 2020.4.229

weaknesses (8)

The flaw types (CWEs) most of these CVEs share.

CWE-269Improper Privilege Management6 CVEs
CWE-200Exposure of Sensitive Information to an Unauthorized Actor5 CVEs
CWE-532Insertion of Sensitive Information into Log File4 CVEs
CWE-266Incorrect Privilege Assignment2 CVEs
CWE-601URL Redirection to Untrusted Site ('Open Redirect')2 CVEs
CWE-79Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')2 CVEs
CWE-862Missing Authorization2 CVEs
CWE-20Improper Input Validation1 CVEs

sources (1)

Which sources assert this record, and when.

USNVD / CVE31 CVEs

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.

Free scan