Plextrac

11 CVEs across 1 Plextrac products. Browse Plextrac vulnerabilities, severities, and proof-of-concept exploits.

Plextrac products with known CVEs

ProductCVEs
Plextrac11
Plextrac CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2024-12687Critical9.82024-12-16Deserialization of Untrusted Data vulnerability in PlexTrac (Runbooks modules) which allows Object Injection and arbitrary file writes. This issue affects Ple…
CVE-2024-11839High7.52024-12-13Deserialization of Untrusted Data vulnerability in PlexTrac (Runbooks modules) which allows Object Injection and arbitrary file writes.This issue affects PlexT…
CVE-2024-11838Critical9.82024-12-13External Control of File Name or Path vulnerability in PlexTrac allows Local Code Inclusion through use of an undocumented API endpoint.This issue affects Plex…
CVE-2024-11837Critical9.82024-12-13Improper Neutralization of Special Elements used in an N1QL Command ('N1QL Injection') vulnerability in PlexTrac  allows N1QL Injection.This issue affects Plex…
CVE-2024-11836High7.52024-12-13Server-Side Request Forgery (SSRF) vulnerability in PlexTrac allowing requests to internal system resources.This issue affects PlexTrac: from 1.61.3 before 2.8…
CVE-2024-11835High7.52024-12-13Uncontrolled Resource Consumption vulnerability in PlexTrac allows WebSocket DoS.This issue affects PlexTrac: from 1.61.3 before 2.8.1.
CVE-2024-11834Critical9.12024-12-13Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in PlexTrac allows arbitrary file writes.This issue affects PlexTr…
CVE-2024-11833Critical9.12024-12-13Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in PlexTrac allows arbitrary file writes.This issue affects PlexTr…
CVE-2022-37146Medium5.32022-09-08The PlexTrac platform prior to version 1.28.0 allows for username enumeration via HTTP response times on invalid login attempts for users configured to use the…
CVE-2022-37145High7.52022-09-08The PlexTrac platform prior to version 1.17.0 does not restrict excessive authentication attempts for accounts configured to use the PlexTrac authentication pr…
CVE-2022-37144High8.82022-09-08The PlexTrac platform prior to API version 1.17.0 does not restrict excessive MFA TOTP submission attempts. An unauthenticated remote attacker in possession of…