Plextrac
Vendor:
First CVE: Sep 8, 2022 · Active for 3 years
11
Total CVEs
More Total CVEs than 90% of tracked products
5.5
Avg CVEs / Year
Higher CVE frequency than 91% of tracked products
8.3
Avg CVSS
Higher Avg CVSS than 76% of tracked products
0.0%
KEV Rate
Bottom 1%
Trends Over Time
The number and severity of CVEs published that impact Plextrac over time
Volume of CVEsAvg CVSS Base Score
First CVE
Sep 8, 2022
3 years ago
Most Recent CVE
Dec 16, 2024
588 days ago
CVE Severity & Scoring
Plextrac11 CVEs
9%
45%
45%
All CVEs352,785 CVEs
45%
40%
11%
MediumHighCritical
Attack Vector
Local0 (0.0%)
Network11 (100.0%)
Unknown0 (0.0%)
Physical0 (0.0%)
Adjacent Network0 (0.0%)
Attack Complexity
Low11 (100.0%)
High0 (0.0%)
Unknown0 (0.0%)
User Interaction
None11 (100.0%)
Unknown0 (0.0%)
Required0 (0.0%)
Privileges Required
Low1 (9.1%)
High0 (0.0%)
None10 (90.9%)
Unknown0 (0.0%)
Top CVEs
Signals from CVEs in this product scope (11 CVEs).
11 CVEs · Highest risk first
| CVE | Published | CVSS | Risk | KEV | Exploit |
|---|---|---|---|---|---|
CVE-2022-37144HIGH The PlexTrac platform prior to API version 1.17.0 does not restrict excessive MFA TOTP submission attempts. An unauthenticated remote attacker in possession of a valid username and | Sep 8, 2022 | 8.8 | 30 | NO | NO |
CVE-2024-11838CRITICAL External Control of File Name or Path vulnerability in PlexTrac allows Local Code Inclusion through use of an undocumented API endpoint.This issue affects PlexTrac: from 1.61.3 bef | Dec 13, 2024 | 9.8 | 27 | NO | NO |
CVE-2024-11837CRITICAL Improper Neutralization of Special Elements used in an N1QL Command ('N1QL Injection') vulnerability in PlexTrac allows N1QL Injection.This issue affects PlexTrac: from 1.61.3 bef | Dec 13, 2024 | 9.8 | 27 | NO | NO |
CVE-2024-12687CRITICAL Deserialization of Untrusted Data vulnerability in PlexTrac (Runbooks modules) which allows Object Injection and arbitrary file writes.
This issue affects PlexTrac: from 1.61.3 be | Dec 16, 2024 | 9.8 | 26 | NO | NO |
CVE-2024-11834CRITICAL Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in PlexTrac allows arbitrary file writes.This issue affects PlexTrac: from 1.61.3 befor | Dec 13, 2024 | 9.1 | 25 | NO | NO |
CVE-2024-11833CRITICAL Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in PlexTrac allows arbitrary file writes.This issue affects PlexTrac: from 1.61.3 befor | Dec 13, 2024 | 9.1 | 25 | NO | NO |
CVE-2024-11836HIGH Server-Side Request Forgery (SSRF) vulnerability in PlexTrac allowing requests to internal system resources.This issue affects PlexTrac: from 1.61.3 before 2.8.1. | Dec 13, 2024 | 7.5 | 22 | NO | NO |
CVE-2024-11835HIGH Uncontrolled Resource Consumption vulnerability in PlexTrac allows WebSocket DoS.This issue affects PlexTrac: from 1.61.3 before 2.8.1. | Dec 13, 2024 | 7.5 | 21 | NO | NO |
CVE-2022-37146MEDIUM The PlexTrac platform prior to version 1.28.0 allows for username enumeration via HTTP response times on invalid login attempts for users configured to use the PlexTrac authenticat | Sep 8, 2022 | 5.3 | 21 | NO | NO |
CVE-2022-37145HIGH The PlexTrac platform prior to version 1.17.0 does not restrict excessive authentication attempts for accounts configured to use the PlexTrac authentication provider. An unauthenti | Sep 8, 2022 | 7.5 | 21 | NO | NO |
Exploit Exposure
Signals from CVEs in this product scope (11 CVEs).
CISA KEV
0 CVEs
0.0% of CVEs· Bottom 1%
Metasploit
0 CVEs
0.0% of CVEs· Bottom 1%
Nuclei
0 CVEs
0.0% of CVEs· Bottom 1%
ExploitDB
0 CVEs
0.0% of CVEs· Bottom 1%
Social Chatter
Signals from CVEs in this product scope (11 CVEs).
Media Mentions
Signals from CVEs in this product scope (11 CVEs).
Top CNAs Publishing CVEs For Plextrac
Top CWEs
Versions
No cataloged versions.