Idera

10 CVEs across 3 Idera products. Browse Idera vulnerabilities, severities, and proof-of-concept exploits.

Idera products with known CVEs

ProductCVEs
Uptime Infrastructure Monitor8
Up.time Monitoring Station1
Yellowfin Business Intelligence1
Idera CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2025-341212025-07-16An unauthenticated arbitrary file upload vulnerability exists in Idera Up.Time Monitoring Station versions up to and including 7.2. The `wizards/post2file.php`…
CVE-2020-19587Medium5.42022-09-14Cross Site Scripting (XSS) vulnerability in configMap parameters in Yellowfin Business Intelligence 7.3 allows remote attackers to run arbitrary code via MIAdm…
CVE-2015-9263Critical9.82018-08-27An issue was discovered in post2file.php in Up.Time Monitoring Station 7.5.0 (build 16) and 7.4.0 (build 13). It allows an attacker to upload an arbitrary file…
CVE-2017-11471Critical9.82017-07-20IDERA Uptime Monitor 7.8 has SQL injection in /gadgets/definitions/uptime.CapacityWhatIfGadget/getmetrics.php via the element parameter.
CVE-2017-11470Critical9.82017-07-20IDERA Uptime Monitor 7.8 has SQL injection in /gadgets/definitions/uptime.CapacityWhatifGadget/getxenmetrics.php via the element parameter.
CVE-2017-11469High7.52017-07-20get2post.php in IDERA Uptime Monitor 7.8 has directory traversal in the file_name parameter.
CVE-2015-8268High7.52016-06-10The up.time agent in Idera Uptime Infrastructure Monitor 7.5 and 7.6 on Linux allows remote attackers to read arbitrary files via unspecified vectors.
CVE-2015-2896Medium5.32015-12-31The up.time client in Idera Uptime Infrastructure Monitor through 7.6 allows remote attackers to obtain potentially sensitive version, OS, process, and event-l…
CVE-2015-2895High7.32015-12-31Buffer overflow in the up.time client in Idera Uptime Infrastructure Monitor 7.4 might allow remote attackers to execute arbitrary code via long command input.
CVE-2015-2894Medium5.32015-12-31Format string vulnerability in the up.time client in Idera Uptime Infrastructure Monitor 6.0 and 7.2 allows remote attackers to cause a denial of service (appl…