CVE-2019-17444: JFrog Artifactory

Critical severity, CVSS 9.8. EPSS: 69.4% chance of exploitation in the next 30 days.

Jfrog Artifactory uses default passwords (such as "password") for administrative accounts and does not require users to change them. This may allow unauthorized network-based attackers to completely compromise of Jfrog Artifactory. This issue affects Jfrog Artifactory versions prior to 6.17.0.

Affected products

• JFrog Artifactory: before 6.17.0 (fixed in 6.17.0)

Published 2020-10-12. Last modified 2026-06-17.