CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2021-45721

JFrog Artifactory prior to version 7.29.8 and 6.23.38 is vulnerable to Reflected Cross-Site Scripting (XSS) through one of the XHR parameters in Users REST API endpoint. This issue affects: JFrog JFrog Artifactory JFrog Artifactory versions before 7.36.1 versions prior to 7.29.8; JFrog Artifactory versions before 6.23.41 versions prior to 6.23.38.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.002

EPSS Ranking 47.5%

CVSS Severity

CVSS v3 Score 6.1

CVSS v2 Score 4.3

References

Products affected by CVE-2021-45721

Jfrog » Artifactory » Version: 6.0.0

cpe:2.3:a:jfrog:artifactory:6.0.0
Jfrog » Artifactory » Version: 6.0.1

cpe:2.3:a:jfrog:artifactory:6.0.1
Jfrog » Artifactory » Version: 6.0.2

cpe:2.3:a:jfrog:artifactory:6.0.2
Jfrog » Artifactory » Version: 6.0.3

cpe:2.3:a:jfrog:artifactory:6.0.3
Jfrog » Artifactory » Version: 6.0.4

cpe:2.3:a:jfrog:artifactory:6.0.4
Jfrog » Artifactory » Version: 6.0.5

cpe:2.3:a:jfrog:artifactory:6.0.5
Jfrog » Artifactory » Version: 6.1.0

cpe:2.3:a:jfrog:artifactory:6.1.0
Jfrog » Artifactory » Version: 6.1.4

cpe:2.3:a:jfrog:artifactory:6.1.4
Jfrog » Artifactory » Version: 6.1.5

cpe:2.3:a:jfrog:artifactory:6.1.5
Jfrog » Artifactory » Version: 6.1.6

cpe:2.3:a:jfrog:artifactory:6.1.6
Jfrog » Artifactory » Version: 6.16.1

cpe:2.3:a:jfrog:artifactory:6.16.1
Jfrog » Artifactory » Version: 6.16.2

cpe:2.3:a:jfrog:artifactory:6.16.2
Jfrog » Artifactory » Version: 6.17.0

cpe:2.3:a:jfrog:artifactory:6.17.0
Jfrog » Artifactory » Version: 6.17.1

cpe:2.3:a:jfrog:artifactory:6.17.1
Jfrog » Artifactory » Version: 6.17.2

cpe:2.3:a:jfrog:artifactory:6.17.2
Jfrog » Artifactory » Version: 6.18

cpe:2.3:a:jfrog:artifactory:6.18
Jfrog » Artifactory » Version: 6.18.1

cpe:2.3:a:jfrog:artifactory:6.18.1
Jfrog » Artifactory » Version: 6.18.5

cpe:2.3:a:jfrog:artifactory:6.18.5
Jfrog » Artifactory » Version: 6.19.1

cpe:2.3:a:jfrog:artifactory:6.19.1
Jfrog » Artifactory » Version: 6.19.3

cpe:2.3:a:jfrog:artifactory:6.19.3
Jfrog » Artifactory » Version: 6.2.0

cpe:2.3:a:jfrog:artifactory:6.2.0
Jfrog » Artifactory » Version: 6.2.1

cpe:2.3:a:jfrog:artifactory:6.2.1
Jfrog » Artifactory » Version: 6.2.2

cpe:2.3:a:jfrog:artifactory:6.2.2
Jfrog » Artifactory » Version: 6.20.1

cpe:2.3:a:jfrog:artifactory:6.20.1
Jfrog » Artifactory » Version: 6.20.4

cpe:2.3:a:jfrog:artifactory:6.20.4
Jfrog » Artifactory » Version: 6.22.2

cpe:2.3:a:jfrog:artifactory:6.22.2
Jfrog » Artifactory » Version: 6.23.1

cpe:2.3:a:jfrog:artifactory:6.23.1
Jfrog » Artifactory » Version: 6.23.13

cpe:2.3:a:jfrog:artifactory:6.23.13
Jfrog » Artifactory » Version: 6.23.15

cpe:2.3:a:jfrog:artifactory:6.23.15
Jfrog » Artifactory » Version: 6.23.16

cpe:2.3:a:jfrog:artifactory:6.23.16
Jfrog » Artifactory » Version: 6.23.18

cpe:2.3:a:jfrog:artifactory:6.23.18
Jfrog » Artifactory » Version: 6.23.19

cpe:2.3:a:jfrog:artifactory:6.23.19
Jfrog » Artifactory » Version: 6.23.21

cpe:2.3:a:jfrog:artifactory:6.23.21
Jfrog » Artifactory » Version: 6.23.23

cpe:2.3:a:jfrog:artifactory:6.23.23
Jfrog » Artifactory » Version: 6.23.25

cpe:2.3:a:jfrog:artifactory:6.23.25
Jfrog » Artifactory » Version: 6.23.28

cpe:2.3:a:jfrog:artifactory:6.23.28
Jfrog » Artifactory » Version: 6.23.3

cpe:2.3:a:jfrog:artifactory:6.23.3
Jfrog » Artifactory » Version: 6.23.31

cpe:2.3:a:jfrog:artifactory:6.23.31
Jfrog » Artifactory » Version: 6.23.33

cpe:2.3:a:jfrog:artifactory:6.23.33
Jfrog » Artifactory » Version: 6.23.36

cpe:2.3:a:jfrog:artifactory:6.23.36
Jfrog » Artifactory » Version: 6.23.37

cpe:2.3:a:jfrog:artifactory:6.23.37
Jfrog » Artifactory » Version: 6.23.7

cpe:2.3:a:jfrog:artifactory:6.23.7
Jfrog » Artifactory » Version: 6.3.0

cpe:2.3:a:jfrog:artifactory:6.3.0
Jfrog » Artifactory » Version: 6.3.2

cpe:2.3:a:jfrog:artifactory:6.3.2
Jfrog » Artifactory » Version: 6.3.3

cpe:2.3:a:jfrog:artifactory:6.3.3
Jfrog » Artifactory » Version: 6.3.4

cpe:2.3:a:jfrog:artifactory:6.3.4
Jfrog » Artifactory » Version: 6.3.6

cpe:2.3:a:jfrog:artifactory:6.3.6
Jfrog » Artifactory » Version: 6.3.7

cpe:2.3:a:jfrog:artifactory:6.3.7
Jfrog » Artifactory » Version: 6.3.8

cpe:2.3:a:jfrog:artifactory:6.3.8
Jfrog » Artifactory » Version: 6.3.9

cpe:2.3:a:jfrog:artifactory:6.3.9
Jfrog » Artifactory » Version: 6.4.0

cpe:2.3:a:jfrog:artifactory:6.4.0
Jfrog » Artifactory » Version: 6.4.1

cpe:2.3:a:jfrog:artifactory:6.4.1
Jfrog » Artifactory » Version: 6.4.2

cpe:2.3:a:jfrog:artifactory:6.4.2
Jfrog » Artifactory » Version: 6.4.3

cpe:2.3:a:jfrog:artifactory:6.4.3
Jfrog » Artifactory » Version: 6.5.0

cpe:2.3:a:jfrog:artifactory:6.5.0
Jfrog » Artifactory » Version: 6.5.1

cpe:2.3:a:jfrog:artifactory:6.5.1
Jfrog » Artifactory » Version: 6.5.13

cpe:2.3:a:jfrog:artifactory:6.5.13
Jfrog » Artifactory » Version: 6.5.15

cpe:2.3:a:jfrog:artifactory:6.5.15
Jfrog » Artifactory » Version: 6.5.17

cpe:2.3:a:jfrog:artifactory:6.5.17
Jfrog » Artifactory » Version: 6.5.18

cpe:2.3:a:jfrog:artifactory:6.5.18
Jfrog » Artifactory » Version: 6.5.2

cpe:2.3:a:jfrog:artifactory:6.5.2
Jfrog » Artifactory » Version: 6.5.3

cpe:2.3:a:jfrog:artifactory:6.5.3
Jfrog » Artifactory » Version: 6.5.6

cpe:2.3:a:jfrog:artifactory:6.5.6
Jfrog » Artifactory » Version: 6.5.8

cpe:2.3:a:jfrog:artifactory:6.5.8
Jfrog » Artifactory » Version: 6.5.9

cpe:2.3:a:jfrog:artifactory:6.5.9
Jfrog » Artifactory » Version: 6.6.0

cpe:2.3:a:jfrog:artifactory:6.6.0
Jfrog » Artifactory » Version: 6.6.1

cpe:2.3:a:jfrog:artifactory:6.6.1
Jfrog » Artifactory » Version: 6.6.10

cpe:2.3:a:jfrog:artifactory:6.6.10
Jfrog » Artifactory » Version: 6.6.3

cpe:2.3:a:jfrog:artifactory:6.6.3
Jfrog » Artifactory » Version: 6.6.5

cpe:2.3:a:jfrog:artifactory:6.6.5
Jfrog » Artifactory » Version: 6.6.8

cpe:2.3:a:jfrog:artifactory:6.6.8
Jfrog » Artifactory » Version: 6.7.0

cpe:2.3:a:jfrog:artifactory:6.7.0
Jfrog » Artifactory » Version: 6.7.1

cpe:2.3:a:jfrog:artifactory:6.7.1
Jfrog » Artifactory » Version: 6.7.2

cpe:2.3:a:jfrog:artifactory:6.7.2
Jfrog » Artifactory » Version: 6.7.3

cpe:2.3:a:jfrog:artifactory:6.7.3
Jfrog » Artifactory » Version: 6.7.5

cpe:2.3:a:jfrog:artifactory:6.7.5
Jfrog » Artifactory » Version: 6.7.7

cpe:2.3:a:jfrog:artifactory:6.7.7
Jfrog » Artifactory » Version: 6.7.8

cpe:2.3:a:jfrog:artifactory:6.7.8
Jfrog » Artifactory » Version: 7.0.0

cpe:2.3:a:jfrog:artifactory:7.0.0
Jfrog » Artifactory » Version: 7.0.1

cpe:2.3:a:jfrog:artifactory:7.0.1
Jfrog » Artifactory » Version: 7.0.2

cpe:2.3:a:jfrog:artifactory:7.0.2
Jfrog » Artifactory » Version: 7.1.0

cpe:2.3:a:jfrog:artifactory:7.1.0
Jfrog » Artifactory » Version: 7.10.1

cpe:2.3:a:jfrog:artifactory:7.10.1
Jfrog » Artifactory » Version: 7.10.2

cpe:2.3:a:jfrog:artifactory:7.10.2
Jfrog » Artifactory » Version: 7.10.5

cpe:2.3:a:jfrog:artifactory:7.10.5
Jfrog » Artifactory » Version: 7.10.6

cpe:2.3:a:jfrog:artifactory:7.10.6
Jfrog » Artifactory » Version: 7.11.1

cpe:2.3:a:jfrog:artifactory:7.11.1
Jfrog » Artifactory » Version: 7.11.2

cpe:2.3:a:jfrog:artifactory:7.11.2
Jfrog » Artifactory » Version: 7.11.5

cpe:2.3:a:jfrog:artifactory:7.11.5
Jfrog » Artifactory » Version: 7.11.7

cpe:2.3:a:jfrog:artifactory:7.11.7
Jfrog » Artifactory » Version: 7.11.8

cpe:2.3:a:jfrog:artifactory:7.11.8
Jfrog » Artifactory » Version: 7.12.10

cpe:2.3:a:jfrog:artifactory:7.12.10
Jfrog » Artifactory » Version: 7.12.3

cpe:2.3:a:jfrog:artifactory:7.12.3
Jfrog » Artifactory » Version: 7.12.6

cpe:2.3:a:jfrog:artifactory:7.12.6
Jfrog » Artifactory » Version: 7.12.8

cpe:2.3:a:jfrog:artifactory:7.12.8
Jfrog » Artifactory » Version: 7.12.9

cpe:2.3:a:jfrog:artifactory:7.12.9
Jfrog » Artifactory » Version: 7.15.3

cpe:2.3:a:jfrog:artifactory:7.15.3
Jfrog » Artifactory » Version: 7.15.4

cpe:2.3:a:jfrog:artifactory:7.15.4
Jfrog » Artifactory » Version: 7.15.5

cpe:2.3:a:jfrog:artifactory:7.15.5
Jfrog » Artifactory » Version: 7.16.3

cpe:2.3:a:jfrog:artifactory:7.16.3
Jfrog » Artifactory » Version: 7.16.6

cpe:2.3:a:jfrog:artifactory:7.16.6
Jfrog » Artifactory » Version: 7.17.11

cpe:2.3:a:jfrog:artifactory:7.17.11
Jfrog » Artifactory » Version: 7.17.12

cpe:2.3:a:jfrog:artifactory:7.17.12
Jfrog » Artifactory » Version: 7.17.13

cpe:2.3:a:jfrog:artifactory:7.17.13
Jfrog » Artifactory » Version: 7.17.14

cpe:2.3:a:jfrog:artifactory:7.17.14
Jfrog » Artifactory » Version: 7.17.4

cpe:2.3:a:jfrog:artifactory:7.17.4
Jfrog » Artifactory » Version: 7.17.5

cpe:2.3:a:jfrog:artifactory:7.17.5
Jfrog » Artifactory » Version: 7.17.9

cpe:2.3:a:jfrog:artifactory:7.17.9
Jfrog » Artifactory » Version: 7.18.11

cpe:2.3:a:jfrog:artifactory:7.18.11
Jfrog » Artifactory » Version: 7.18.3

cpe:2.3:a:jfrog:artifactory:7.18.3
Jfrog » Artifactory » Version: 7.18.5

cpe:2.3:a:jfrog:artifactory:7.18.5
Jfrog » Artifactory » Version: 7.18.6

cpe:2.3:a:jfrog:artifactory:7.18.6
Jfrog » Artifactory » Version: 7.18.7

cpe:2.3:a:jfrog:artifactory:7.18.7
Jfrog » Artifactory » Version: 7.18.9

cpe:2.3:a:jfrog:artifactory:7.18.9
Jfrog » Artifactory » Version: 7.19.10

cpe:2.3:a:jfrog:artifactory:7.19.10
Jfrog » Artifactory » Version: 7.19.12

cpe:2.3:a:jfrog:artifactory:7.19.12
Jfrog » Artifactory » Version: 7.19.4

cpe:2.3:a:jfrog:artifactory:7.19.4
Jfrog » Artifactory » Version: 7.19.6

cpe:2.3:a:jfrog:artifactory:7.19.6
Jfrog » Artifactory » Version: 7.19.8

cpe:2.3:a:jfrog:artifactory:7.19.8
Jfrog » Artifactory » Version: 7.19.9

cpe:2.3:a:jfrog:artifactory:7.19.9
Jfrog » Artifactory » Version: 7.2.0

cpe:2.3:a:jfrog:artifactory:7.2.0
Jfrog » Artifactory » Version: 7.2.1

cpe:2.3:a:jfrog:artifactory:7.2.1
Jfrog » Artifactory » Version: 7.21.12

cpe:2.3:a:jfrog:artifactory:7.21.12
Jfrog » Artifactory » Version: 7.21.13

cpe:2.3:a:jfrog:artifactory:7.21.13
Jfrog » Artifactory » Version: 7.21.20

cpe:2.3:a:jfrog:artifactory:7.21.20
Jfrog » Artifactory » Version: 7.21.3

cpe:2.3:a:jfrog:artifactory:7.21.3
Jfrog » Artifactory » Version: 7.21.5

cpe:2.3:a:jfrog:artifactory:7.21.5
Jfrog » Artifactory » Version: 7.21.7

cpe:2.3:a:jfrog:artifactory:7.21.7
Jfrog » Artifactory » Version: 7.21.8

cpe:2.3:a:jfrog:artifactory:7.21.8
Jfrog » Artifactory » Version: 7.23.3

cpe:2.3:a:jfrog:artifactory:7.23.3
Jfrog » Artifactory » Version: 7.23.4

cpe:2.3:a:jfrog:artifactory:7.23.4
Jfrog » Artifactory » Version: 7.23.5

cpe:2.3:a:jfrog:artifactory:7.23.5
Jfrog » Artifactory » Version: 7.23.7

cpe:2.3:a:jfrog:artifactory:7.23.7
Jfrog » Artifactory » Version: 7.23.8

cpe:2.3:a:jfrog:artifactory:7.23.8
Jfrog » Artifactory » Version: 7.24.1

cpe:2.3:a:jfrog:artifactory:7.24.1
Jfrog » Artifactory » Version: 7.24.3

cpe:2.3:a:jfrog:artifactory:7.24.3
Jfrog » Artifactory » Version: 7.24.4

cpe:2.3:a:jfrog:artifactory:7.24.4
Jfrog » Artifactory » Version: 7.24.6

cpe:2.3:a:jfrog:artifactory:7.24.6
Jfrog » Artifactory » Version: 7.24.7

cpe:2.3:a:jfrog:artifactory:7.24.7
Jfrog » Artifactory » Version: 7.25.4

cpe:2.3:a:jfrog:artifactory:7.25.4
Jfrog » Artifactory » Version: 7.25.5

cpe:2.3:a:jfrog:artifactory:7.25.5
Jfrog » Artifactory » Version: 7.25.6

cpe:2.3:a:jfrog:artifactory:7.25.6
Jfrog » Artifactory » Version: 7.25.7

cpe:2.3:a:jfrog:artifactory:7.25.7
Jfrog » Artifactory » Version: 7.26.3

cpe:2.3:a:jfrog:artifactory:7.26.3
Jfrog » Artifactory » Version: 7.27.10

cpe:2.3:a:jfrog:artifactory:7.27.10
Jfrog » Artifactory » Version: 7.27.3

cpe:2.3:a:jfrog:artifactory:7.27.3
Jfrog » Artifactory » Version: 7.27.6

cpe:2.3:a:jfrog:artifactory:7.27.6
Jfrog » Artifactory » Version: 7.27.7

cpe:2.3:a:jfrog:artifactory:7.27.7
Jfrog » Artifactory » Version: 7.27.9

cpe:2.3:a:jfrog:artifactory:7.27.9
Jfrog » Artifactory » Version: 7.28.9

cpe:2.3:a:jfrog:artifactory:7.28.9
Jfrog » Artifactory » Version: 7.29.3

cpe:2.3:a:jfrog:artifactory:7.29.3
Jfrog » Artifactory » Version: 7.29.7

cpe:2.3:a:jfrog:artifactory:7.29.7
Jfrog » Artifactory » Version: 7.3.0

cpe:2.3:a:jfrog:artifactory:7.3.0
Jfrog » Artifactory » Version: 7.3.1

cpe:2.3:a:jfrog:artifactory:7.3.1
Jfrog » Artifactory » Version: 7.3.2

cpe:2.3:a:jfrog:artifactory:7.3.2
Jfrog » Artifactory » Version: 7.4.0

cpe:2.3:a:jfrog:artifactory:7.4.0
Jfrog » Artifactory » Version: 7.4.1

cpe:2.3:a:jfrog:artifactory:7.4.1
Jfrog » Artifactory » Version: 7.4.3

cpe:2.3:a:jfrog:artifactory:7.4.3
Jfrog » Artifactory » Version: 7.5.0

cpe:2.3:a:jfrog:artifactory:7.5.0
Jfrog » Artifactory » Version: 7.5.5

cpe:2.3:a:jfrog:artifactory:7.5.5
Jfrog » Artifactory » Version: 7.6.0

cpe:2.3:a:jfrog:artifactory:7.6.0
Jfrog » Artifactory » Version: 7.6.1

cpe:2.3:a:jfrog:artifactory:7.6.1
Jfrog » Artifactory » Version: 7.6.2

cpe:2.3:a:jfrog:artifactory:7.6.2
Jfrog » Artifactory » Version: 7.6.3

cpe:2.3:a:jfrog:artifactory:7.6.3
Jfrog » Artifactory » Version: 7.7.0

cpe:2.3:a:jfrog:artifactory:7.7.0
Jfrog » Artifactory » Version: 7.7.3

cpe:2.3:a:jfrog:artifactory:7.7.3
Jfrog » Artifactory » Version: 7.7.6

cpe:2.3:a:jfrog:artifactory:7.7.6
Jfrog » Artifactory » Version: 7.7.8

cpe:2.3:a:jfrog:artifactory:7.7.8
Jfrog » Artifactory » Version: 7.8.1

cpe:2.3:a:jfrog:artifactory:7.8.1
Jfrog » Artifactory » Version: 7.9.0

cpe:2.3:a:jfrog:artifactory:7.9.0
Jfrog » Artifactory » Version: 7.9.1

cpe:2.3:a:jfrog:artifactory:7.9.1
Jfrog » Artifactory » Version: 7.9.2

cpe:2.3:a:jfrog:artifactory:7.9.2

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2021-45721

Products

Pricing

Contact Us