Predictive Vulnerability Intelligence.

Product

  • Product
  • Pricing
  • Documentation

Company

  • About
  • Partnerships
  • Blog
  • Support

Legal

  • Terms
  • Privacy
  • Data Licensing

© 2026 FAUCET Technologies LLC. All rights reserved.

Alltena

First CVE: Nov 22, 2024Active for: 2 yearsTotal CVEs: 21
47.6
VTI Score
High

Alltena's vulnerability footprint centers on Allegra, a modestly represented product within a narrow portfolio that occupies a position of prominence in its specialized domain. Vulnerabilities affecting this vendor skew toward serious outcomes, with a meaningful share reaching critical severity, reflecting the nature of the flaws that recur in the product's design. The exposure concentrates around weaknesses in access control, template handling, deserialization logic, and path traversal protections, characteristic issues that arise when user input or configuration data flows through security-sensitive code paths without proper validation or containment. Defenders should prioritize Allegra instances for patching and configuration hardening, particularly where the product handles untrusted input or processes external data. Current exploitation activity and exposure counts are shown alongside this summary.

FAUCET AI Generated
21
Total CVEs
More Total CVEs than 96% of tracked vendors
10.5
Avg CVEs / Product / Year
More Avg CVEs / Product / Year than 99% of tracked vendors
7.0
Avg CVSS Score
Higher Avg CVSS Score than 49% of tracked vendors
0.0%
In CISA KEV
Bottom 1%

Trends Over Time

The number and severity of CVEs published that impact products developed by Alltena over time

Volume of CVEsAvg CVSS Base Score
First CVE
Nov 22, 2024
19 months ago
Most Recent CVE
Jun 21, 2025
398 days ago

Products(1 total)

Top CVEs

Signals from CVEs in this vendor scope (21 CVEs).

21 CVEs · Highest risk first

CVEPublishedCVSSRiskKEVExploit
CVE-2025-6216CRITICAL
Allegra calculateTokenExpDate Password Recovery Authentication Bypass Vulnerability. This vulnerability allows remote attackers to bypass authentication on affected installations o
Jun 21, 20259.854NOYES
CVE-2023-51639CRITICAL
Allegra downloadExportedChart Directory Traversal Authentication Bypass Vulnerability. This vulnerability allows remote attackers to bypass authentication on affected installations
Nov 22, 20249.827NONO
CVE-2023-51638CRITICAL
Allegra Hard-coded Credentials Authentication Bypass Vulnerability. This vulnerability allows remote attackers to bypass authentication on affected installations of Allegra. Authen
Nov 22, 20249.827NONO
CVE-2025-3485HIGH
Allegra extractFileFromZip Directory Traversal Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations o
Jun 6, 20258.826NONO
CVE-2025-3486HIGH
Allegra isZipEntryValide Directory Traversal Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of
May 22, 20258.824NONO
CVE-2023-51644HIGH
Allegra SiteConfigAction Improper Access Control Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations
Nov 22, 20247.324NONO
CVE-2024-5581HIGH
Allegra unzipFile Directory Traversal Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Allegra
Nov 22, 20247.220NONO
CVE-2024-5580HIGH
Allegra loadFieldMatch Deserialization of Untrusted Data Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected insta
Nov 22, 20247.220NONO
CVE-2024-5579HIGH
Allegra renderFieldMatch Deserialization of Untrusted Data Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected ins
Nov 22, 20247.220NONO
CVE-2024-30372MEDIUM
Allegra getLinkText Server-Side Template Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installatio
Nov 22, 20246.320NONO
View all 21 CVEs →

CVE Severity & Scoring

Severity distribution of CVEs that affect this vendor's products21 CVEs
48%
38%
14%
Severity distribution among all CVEs352,231 CVEs
45%
40%
11%
MediumHighCritical
Attack Vector
Local0 (0.0%)
Network21 (100.0%)
Unknown0 (0.0%)
Physical0 (0.0%)
Adjacent Network0 (0.0%)
Attack Complexity
Low21 (100.0%)
High0 (0.0%)
Unknown0 (0.0%)
User Interaction
None21 (100.0%)
Unknown0 (0.0%)
Required0 (0.0%)
Privileges Required
Low7 (33.3%)
High8 (38.1%)
None6 (28.6%)
Unknown0 (0.0%)

Exploit Exposure

Signals from CVEs in this vendor scope (21 CVEs).

CISA KEV
0 CVEs
0.0% of CVEs· Bottom 1%
Metasploit
0 CVEs
0.0% of CVEs· Bottom 1%
Nuclei
1 CVE
4.8% of CVEs· 96th percentile
ExploitDB
0 CVEs
0.0% of CVEs· Bottom 1%

Social Chatter

An overview of all social media posts that mention a CVE ID that affects a product developed by Alltena.

Media Mentions

Media articles that mention a CVE ID that affects a product developed by Alltena — matched by CVE ID, not by vendor name.

Top CNAs Publishing CVEs For Alltena's Products

View all 1 CNAs →

Top CWEs