PatchTheCVEplextrac vulnerabilities
Recent CVEs affecting plextrac products. 8 tracked.
plextrac has 8 tracked vulnerabilities, 5 critical. A fixed release or vendor patch exists for 8. Most recent: 2024-12-16. Highest priority: CVE-2024-12687 (score 52/100).
- CVE-2024-12687 CRITICAL 9.8 UPGRADE Deserialization of Untrusted Data vulnerability in PlexTrac (Runbooks modules) which allows Object Injection a
- CVE-2024-11839 HIGH 7.5 UPGRADE Deserialization of Untrusted Data vulnerability in PlexTrac (Runbooks modules) which allows Object Injection a
- CVE-2024-11838 CRITICAL 9.8 UPGRADE External Control of File Name or Path vulnerability in PlexTrac allows Local Code Inclusion through use of an
- CVE-2024-11837 CRITICAL 9.8 UPGRADE Improper Neutralization of Special Elements used in an N1QL Command ('N1QL Injection') vulnerability in PlexTr
- CVE-2024-11836 HIGH 7.5 UPGRADE Server-Side Request Forgery (SSRF) vulnerability in PlexTrac allowing requests to internal system resources.Th
- CVE-2024-11835 HIGH 7.5 UPGRADE Uncontrolled Resource Consumption vulnerability in PlexTrac allows WebSocket DoS.This issue affects PlexTrac:
- CVE-2024-11834 CRITICAL 9.1 UPGRADE Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in PlexTrac allow
- CVE-2024-11833 CRITICAL 9.1 UPGRADE Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in PlexTrac allow
FAQ
How do I fix plextrac vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is plextrac being exploited right now?
None of the tracked plextrac CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which plextrac CVE should I patch first?
CVE-2024-12687 currently ranks highest (52/100): Deserialization of Untrusted Data vulnerability in PlexTrac (Runbooks modules) which allows Object Injection a.