CVE-2019-19937: JFrog Artifactory

High severity, CVSS 7.2. EPSS: 1.5% chance of exploitation in the next 30 days.

In JFrog Artifactory before 6.18, it is not possible to restrict either system or repository imports by any admin user in the enterprise, which can lead to "undesirable results."

Affected products

• JFrog Artifactory: before 6.18 (fixed in 6.18)

Published 2020-03-16. Last modified 2026-06-17.