Predictive Vulnerability Intelligence.

Product

  • Product
  • Pricing
  • Documentation

Company

  • About
  • Partnerships
  • Blog
  • Support

Legal

  • Terms
  • Privacy
  • Data Licensing

© 2026 FAUCET Technologies LLC. All rights reserved.

Pagerduty

First CVE: Jan 25, 2019Active for: 7 yearsTotal CVEs: 12
32.9
VTI Score
Medium

PagerDuty's vulnerability footprint centers on incident-management and automation platform products that sit within operational technology stacks and DevOps pipelines, where privileged access and event data handling create a sensitive security perimeter. Its disclosures cluster around access-control and credential-handling weaknesses—including missing authorization, authorization bypass, insufficiently protected credentials, and cross-site request forgery—that are characteristic of web-based platforms integrating with external services and managing sensitive operational context. The vendor's vulnerabilities skew toward moderate severity outcomes and demonstrate a moderate tendency toward public exploit availability; live severity, exploitation, and exposure counts are shown alongside this summary.

FAUCET AI Generated
12
Total CVEs
More Total CVEs than 93% of tracked vendors
0.7
Avg CVEs / Product / Year
More Avg CVEs / Product / Year than 10% of tracked vendors
6.9
Avg CVSS Score
Higher Avg CVSS Score than 49% of tracked vendors
0.0%
In CISA KEV
Bottom 1%

Trends Over Time

The number and severity of CVEs published that impact products developed by Pagerduty over time

Volume of CVEsAvg CVSS Base Score
First CVE
Jan 25, 2019
7 years ago
Most Recent CVE
Dec 10, 2025
226 days ago

Products(3 total)

Top CVEs

Signals from CVEs in this vendor scope (12 CVEs).

12 CVEs · Highest risk first

CVEPublishedCVSSRiskKEVExploit
CVE-2019-6804MEDIUM
An XSS issue was discovered on the Job Edit page in Rundeck Community Edition before 3.0.13, related to assets/javascripts/workflowStepEditorKO.js and views/execution/_wfitemEdit.g
Jan 25, 20196.133NOYES
CVE-2022-29186CRITICAL
Rundeck is an open source automation service with a web console, command line tools and a WebAPI. Rundeck community and rundeck-enterprise docker images contained a pre-generated S
May 20, 20229.830NONO
CVE-2021-39132HIGH
Rundeck is an open source automation service with a web console, command line tools and a WebAPI. Prior to version 3.3.14 and version 3.4.3, an authorized user can upload a zip-for
Aug 30, 20218.827NONO
CVE-2019-3800HIGH
CF CLI version prior to v6.45.0 (bosh release version 1.16.0) writes the client id and secret to its config file when the user authenticates with --client-credentials flag. A local
Aug 5, 20197.826NONO
CVE-2022-31044HIGH
Rundeck is an open source automation service with a web console, command line tools and a WebAPI. The Key Storage converter plugin mechanism was not enabled correctly in Rundeck 4.
Jun 15, 20227.525NONO
CVE-2021-41112HIGH
Rundeck is an open source automation service with a web console, command line tools and a WebAPI. In versions prior to 3.4.5, authenticated users could craft a request to modify or
Feb 28, 20228.125NONO
CVE-2025-52493MEDIUM
PagerDuty Runbook through 2025-06-12 exposes stored secrets directly in the webpage DOM at the configuration page. Although these secrets appear masked as password fields, the actu
Dec 10, 20256.523NONO
CVE-2021-39133MEDIUM
Rundeck is an open source automation service with a web console, command line tools and a WebAPI. Prior to version 3.3.14 and version 3.4.3, a user with `admin` access to the `syst
Aug 30, 20216.823NONO
CVE-2021-41111MEDIUM
Rundeck is an open source automation service with a web console, command line tools and a WebAPI. Prior to versions 3.4.5 and 3.3.15, an authenticated user with authorization to re
Feb 28, 20225.420NONO
CVE-2023-48222MEDIUM
Rundeck is an open source automation service with a web console, command line tools and a WebAPI. In affected versions access to two URLs used in both Rundeck Open Source and Proce
Nov 16, 20235.419NONO
View all 12 CVEs →

CVE Severity & Scoring

Severity distribution of CVEs that affect this vendor's products12 CVEs
58%
33%
8%
Severity distribution among all CVEs352,294 CVEs
45%
40%
11%
MediumHighCritical
Attack Vector
Local1 (8.3%)
Network11 (91.7%)
Unknown0 (0.0%)
Physical0 (0.0%)
Adjacent Network0 (0.0%)
Attack Complexity
Low12 (100.0%)
High0 (0.0%)
Unknown0 (0.0%)
User Interaction
None10 (83.3%)
Unknown0 (0.0%)
Required2 (16.7%)
Privileges Required
Low8 (66.7%)
High1 (8.3%)
None3 (25.0%)
Unknown0 (0.0%)

Exploit Exposure

Signals from CVEs in this vendor scope (12 CVEs).

CISA KEV
0 CVEs
0.0% of CVEs· Bottom 1%
Metasploit
0 CVEs
0.0% of CVEs· Bottom 1%
Nuclei
0 CVEs
0.0% of CVEs· Bottom 1%
ExploitDB
1 CVE
8.3% of CVEs· 76th percentile

Social Chatter

An overview of all social media posts that mention a CVE ID that affects a product developed by Pagerduty.

Media Mentions

Media articles that mention a CVE ID that affects a product developed by Pagerduty — matched by CVE ID, not by vendor name.

Top CNAs Publishing CVEs For Pagerduty's Products

View all 3 CNAs →

Top CWEs