PlexTrac, Inc.
First CVE: Dec 13, 2024Active for: 2 years
8
CVEs Published
More CVEs Published than 22% of tracked CNAs
8.0
Avg CVEs / Year
More Avg CVEs / Year than 47% of tracked CNAs
8.8
Avg CVSS Score
Higher Avg CVSS Score than 96% of tracked CNAs
0.0%
In CISA KEV
Bottom 1%
Self-Reporting Analysis
Of all the CVEs published by PlexTrac, Inc. as a CNA, 100.0% affect products that PlexTrac, Inc. develops as a vendor.
100.0%
Self-reported: 8Third-party: 0
Of all the CVEs published that affect products developed by PlexTrac, Inc., 72.7% are self-published by PlexTrac, Inc. as a CNA.
72.7%
27.3%
Self-published: 8Published by other CNAs: 3
Trends Over Time
The number and severity of CVEs published by PlexTrac, Inc. over time
Volume of CVEsAvg CVSS Base Score
First CVE
Dec 13, 2024
19 months ago
Most Recent CVE
Dec 16, 2024
586 days ago
Top CVEs
All CVEs published by PlexTrac, Inc. as a CNA, regardless of affected vendor or product.
8 CVEs · Highest risk first
| CVE | Published | CVSS | Risk | KEV | Exploit |
|---|---|---|---|---|---|
CVE-2024-11838CRITICAL External Control of File Name or Path vulnerability in PlexTrac allows Local Code Inclusion through use of an undocumented API endpoint.This issue affects PlexTrac: from 1.61.3 bef | Dec 13, 2024 | 9.8 | 27 | NO | NO |
CVE-2024-11837CRITICAL Improper Neutralization of Special Elements used in an N1QL Command ('N1QL Injection') vulnerability in PlexTrac allows N1QL Injection.This issue affects PlexTrac: from 1.61.3 bef | Dec 13, 2024 | 9.8 | 27 | NO | NO |
CVE-2024-12687CRITICAL Deserialization of Untrusted Data vulnerability in PlexTrac (Runbooks modules) which allows Object Injection and arbitrary file writes.
This issue affects PlexTrac: from 1.61.3 be | Dec 16, 2024 | 9.8 | 26 | NO | NO |
CVE-2024-11834CRITICAL Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in PlexTrac allows arbitrary file writes.This issue affects PlexTrac: from 1.61.3 befor | Dec 13, 2024 | 9.1 | 25 | NO | NO |
CVE-2024-11833CRITICAL Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in PlexTrac allows arbitrary file writes.This issue affects PlexTrac: from 1.61.3 befor | Dec 13, 2024 | 9.1 | 25 | NO | NO |
CVE-2024-11836HIGH Server-Side Request Forgery (SSRF) vulnerability in PlexTrac allowing requests to internal system resources.This issue affects PlexTrac: from 1.61.3 before 2.8.1. | Dec 13, 2024 | 7.5 | 22 | NO | NO |
CVE-2024-11835HIGH Uncontrolled Resource Consumption vulnerability in PlexTrac allows WebSocket DoS.This issue affects PlexTrac: from 1.61.3 before 2.8.1. | Dec 13, 2024 | 7.5 | 21 | NO | NO |
CVE-2024-11839HIGH Deserialization of Untrusted Data vulnerability in PlexTrac (Runbooks modules) which allows Object Injection and arbitrary file writes.This issue affects PlexTrac: from 1.61.3 befo | Dec 13, 2024 | 7.5 | 19 | NO | NO |
CVE Severity & Scoring
Severity distribution of CVEs published by this CNA8 CVEs
38%
63%
Severity distribution among all CVEs352,427 CVEs
45%
40%
11%
HighCritical
Attack Vector
Local0 (0.0%)
Network8 (100.0%)
Unknown0 (0.0%)
Physical0 (0.0%)
Adjacent Network0 (0.0%)
Attack Complexity
Low8 (100.0%)
High0 (0.0%)
Unknown0 (0.0%)
User Interaction
None8 (100.0%)
Unknown0 (0.0%)
Required0 (0.0%)
Privileges Required
Low0 (0.0%)
High0 (0.0%)
None8 (100.0%)
Unknown0 (0.0%)
Exploit Exposure
Signals from CVEs in this cna scope (8 CVEs).
CISA KEV
0 CVEs
0.0% of CVEs· Bottom 1%
Metasploit
0 CVEs
0.0% of CVEs· Bottom 1%
Nuclei
0 CVEs
0.0% of CVEs· Bottom 1%
ExploitDB
0 CVEs
0.0% of CVEs· Bottom 1%
Social Chatter
An overview of all social media posts that mention a CVE ID published by PlexTrac, Inc. as a CNA.
Media Mentions
Media articles that mention a CVE ID published by PlexTrac, Inc. as a CNA — matched by CVE ID, not by organization name.