PlexTrac: CVE Program partner

CVEs, 365 days08 all time, 0 rejected

Quality-median 99%

CVSS by the CNA-share of records

CWE-share of records

Affected versions-not n/a or unspecified

CVSS added by CISA-lower is better

Organisation	PlexTrac, Inc.
Role	CNA
Type	Vendor
Reports to	mitre
Scope	Vulnerabilities within PlexTrac’s products.
Advisories	https://docs.plextrac.com/plextrac-documentation/master/security-advisories

CVE-2024-12687 2024-12-16 · CVSS 8.6
Deserialization of Untrusted Data vulnerability in PlexTrac (Runbooks modules) which allows Object Injection and arbitrary file writes. This issue affects Plex
CVE-2024-11839 2024-12-13 · CVSS 8.6
Deserialization of Untrusted Data vulnerability in PlexTrac (Runbooks modules) which allows Object Injection and arbitrary file writes.This issue affects PlexTr
CVE-2024-11838 2024-12-13 · CVSS 8.6
External Control of File Name or Path vulnerability in PlexTrac allows Local Code Inclusion through use of an undocumented API endpoint.This issue affects PlexT
CVE-2024-11837 2024-12-13 · CVSS 8.6
Improper Neutralization of Special Elements used in an N1QL Command ('N1QL Injection') vulnerability in PlexTrac allows N1QL Injection.This issue affects PlexT
CVE-2024-11836 2024-12-13 · CVSS 8.6
Server-Side Request Forgery (SSRF) vulnerability in PlexTrac allowing requests to internal system resources.This issue affects PlexTrac: from 1.61.3 before 2.8.
CVE-2024-11835 2024-12-13 · CVSS 7.0
Uncontrolled Resource Consumption vulnerability in PlexTrac allows WebSocket DoS.This issue affects PlexTrac: from 1.61.3 before 2.8.1.
CVE-2024-11834 2024-12-13 · CVSS 8.9
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in PlexTrac allows arbitrary file writes.This issue affects PlexTra
CVE-2024-11833 2024-12-13 · CVSS 8.9
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in PlexTrac allows arbitrary file writes.This issue affects PlexTra

All CVE Program partners

PlexTrac

Latest CVEs · RSS