Product by Octopus Deploy

Octopus Server

66 known vulnerabilities in Octopus Server (Octopus Deploy), 0 of them actively exploited (CISA KEV).

Vulnerabilities

Actively exploited (KEV)

Used by ransomware

Critical

Vulnerabilities

Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.

Vulnerabilities in Octopus Server (Octopus Deploy)

High	CVE-2018-18850	Octopus Server: security vulnerability	8.8	31.10.2018
Critical	CVE-2018-11320	Octopus Server: security vulnerability	9.8	21.05.2018
Critical	CVE-2022-2572	Octopus Server: security vulnerability also in 1 other product	9.8	01.11.2022
Critical	CVE-2022-2778	Octopus Server: security vulnerability also in 1 other product	9.8	30.09.2022
Medium	CVE-2019-8944	Octopus Octopus Deploy: Information Disclosure also in 1 other product	6.5	20.02.2019
High	CVE-2019-11632	Octopus Octopus Deploy: security vulnerability also in 1 other product	8.1	01.05.2019
High	CVE-2022-2883	Octopus Server: Denial of Service also in 1 other product	7.5	22.02.2023
High	CVE-2026-14163	Octopus Server: security vulnerability also in 2 other products	7.5	20.08.2026
High	CVE-2022-4009	Octopus Server: security vulnerability also in 1 other product	8.8	16.03.2023
Medium	CVE-2019-14525	Octopus Octopus Deploy: security vulnerability also in 1 other product	4.9	05.08.2019
Critical	CVE-2026-0704	Octopus Server: security vulnerability also in 1 other product	9.1	25.02.2026
Critical	CVE-2022-2782	Octopus Server: security vulnerability also in 1 other product	9.1	26.10.2022
Critical	CVE-2024-9194	SQL Injection in the Octopus Server REST API	9.8	30.09.2024
High	CVE-2018-12089	Octopus Server: security vulnerability	7.5	11.06.2018
High	CVE-2022-2074	Octopus Server: Denial of Service also in 1 other product	7.5	19.08.2022
Medium	CVE-2017-11348	Octopus Octopus Deploy: Path Traversal also in 1 other product	5.7	17.07.2017
High	CVE-2022-1670	Octopus Server: security vulnerability also in 1 other product	7.5	19.05.2022
High	CVE-2022-2075	Octopus Server: Denial of Service also in 1 other product	7.5	19.08.2022
High	CVE-2022-2049	Octopus Server: Denial of Service also in 1 other product	7.5	19.08.2022
High	CVE-2022-2780	Octopus Server: security vulnerability also in 1 other product	8.1	14.10.2022
High	CVE-2025-0539	Octopus Server: security vulnerability also in 1 other product	8.8	10.04.2025
High	CVE-2022-2721	Octopus Server: security vulnerability also in 1 other product	7.5	25.11.2022
High	CVE-2024-2975	Octopus Server: Race Condition also in 1 other product	8.8	09.04.2024
High	CVE-2022-3460	Octopus Server: security vulnerability also in 1 other product	7.5	02.01.2023
High	CVE-2021-31820	Octopus Server: security vulnerability also in 1 other product	7.5	18.08.2021

All vulnerabilities in search

All products by Octopus Deploy

Key figures

Vulnerabilities