# Octopus Octopus Server


- [CVE-2022-2572](https://insights.sbomify.com/CVE-2022-2572/): Auth bypass in Octopus Server (critical 9.8)
- [CVE-2022-2778](https://insights.sbomify.com/CVE-2022-2778/): Security feature bypass in Octopus Server (critical 9.8)
- [CVE-2018-11320](https://insights.sbomify.com/CVE-2018-11320/): Information disclosure in n/a (critical 9.8)
- [CVE-2022-2782](https://insights.sbomify.com/CVE-2022-2782/): Auth bypass in Octopus Server (critical 9.1)
- [CVE-2024-2975](https://insights.sbomify.com/CVE-2024-2975/): Race condition in Octopus Server (high 8.8)
- [CVE-2022-4009](https://insights.sbomify.com/CVE-2022-4009/): Command injection in Octopus Server (high 8.8)
- [CVE-2018-18850](https://insights.sbomify.com/CVE-2018-18850/): Code injection in n/a (high 8.8)
- [CVE-2024-9194](https://insights.sbomify.com/CVE-2024-9194/): SQL Injection in the Octopus Server REST API (high 8.7)
- [CVE-2022-2780](https://insights.sbomify.com/CVE-2022-2780/): Server-side request forgery in Octopus Server (high 8.1)
- [CVE-2019-11632](https://insights.sbomify.com/CVE-2019-11632/): Missing authorization in n/a (high 8.1)
- [CVE-2021-26556](https://insights.sbomify.com/CVE-2021-26556/): Privilege escalation in Octopus Server (high 7.8)
- [CVE-2022-2883](https://insights.sbomify.com/CVE-2022-2883/): Denial of service in Octopus Server (high 7.5)

---
From sbomify Insights: https://insights.sbomify.com/products/octopus/octopus-server/