Plextrac
8 CVEs across 1 Plextrac products. Browse Plextrac vulnerabilities, severities, and proof-of-concept exploits.
Plextrac products with known CVEs
Plextrac CVEs — newest first| CVE | Severity | Score | Published | Summary |
|---|
CVE-2024-12687 | Critical | 9.8 | 2024-12-16 | Deserialization of Untrusted Data vulnerability in PlexTrac (Runbooks modules) which allows Object Injection and arbitrary file writes.
This issue affects Ple… |
CVE-2024-11839 | High | 7.5 | 2024-12-13 | Deserialization of Untrusted Data vulnerability in PlexTrac (Runbooks modules) which allows Object Injection and arbitrary file writes.This issue affects PlexT… |
CVE-2024-11838 | Critical | 9.8 | 2024-12-13 | External Control of File Name or Path vulnerability in PlexTrac allows Local Code Inclusion through use of an undocumented API endpoint.This issue affects Plex… |
CVE-2024-11837 | Critical | 9.8 | 2024-12-13 | Improper Neutralization of Special Elements used in an N1QL Command ('N1QL Injection') vulnerability in PlexTrac allows N1QL Injection.This issue affects Plex… |
CVE-2024-11836 | High | 7.5 | 2024-12-13 | Server-Side Request Forgery (SSRF) vulnerability in PlexTrac allowing requests to internal system resources.This issue affects PlexTrac: from 1.61.3 before 2.8… |
CVE-2024-11835 | High | 7.5 | 2024-12-13 | Uncontrolled Resource Consumption vulnerability in PlexTrac allows WebSocket DoS.This issue affects PlexTrac: from 1.61.3 before 2.8.1. |
CVE-2024-11834 | Critical | 9.1 | 2024-12-13 | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in PlexTrac allows arbitrary file writes.This issue affects PlexTr… |
CVE-2024-11833 | Critical | 9.1 | 2024-12-13 | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in PlexTrac allows arbitrary file writes.This issue affects PlexTr… |
CVE-2022-37146 | Medium | 5.3 | 2022-09-08 | The PlexTrac platform prior to version 1.28.0 allows for username enumeration via HTTP response times on invalid login attempts for users configured to use the… |
CVE-2022-37145 | High | 7.5 | 2022-09-08 | The PlexTrac platform prior to version 1.17.0 does not restrict excessive authentication attempts for accounts configured to use the PlexTrac authentication pr… |
CVE-2022-37144 | High | 8.8 | 2022-09-08 | The PlexTrac platform prior to API version 1.17.0 does not restrict excessive MFA TOTP submission attempts. An unauthenticated remote attacker in possession of… |