Approved changes feed: RSS · Atom

cpe:2.3:a:plextrac:plextrac:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorPlextrac (8ab88d75-a8a1-593b-9576-de6006f5806f)
ProductPlextrac (ba968b1c-85e9-51b3-b951-9545e79ffdc7)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2024-12687 vulnerable 2026-06-08 06:25:35.906394 Insecure YAML Deserialization
Deserialization of Untrusted Data vulnerability in PlexTrac (Runbooks modules) which allows Object Injection and arbitrary file writes. This issue affects PlexTrac: from 1.61.3 before 2.8.1.
Published: 2024-12-16T19:09:08.481Z
Updated: 2024-12-17T14:31:34.017Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-11839 vulnerable 2026-06-08 06:23:50.501073 Insecure Deserialization via Runbooks Imports
Deserialization of Untrusted Data vulnerability in PlexTrac (Runbooks modules) which allows Object Injection and arbitrary file writes.This issue affects PlexTrac: from 1.61.3 before 2.8.1.
Published: 2024-12-13T05:51:24.351Z
Updated: 2024-12-23T21:26:24.736Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-11838 vulnerable 2026-06-08 06:23:50.500256 Local File Inclusion
External Control of File Name or Path vulnerability in PlexTrac allows Local Code Inclusion through use of an undocumented API endpoint.This issue affects PlexTrac: from 1.61.3 before 2.8.1.
Published: 2024-12-13T05:51:12.475Z
Updated: 2024-12-16T19:01:29.660Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-11837 vulnerable 2026-06-08 06:23:50.499914 N1QL Injection
Improper Neutralization of Special Elements used in an N1QL Command ('N1QL Injection') vulnerability in PlexTrac  allows N1QL Injection.This issue affects PlexTrac: from 1.61.3 before 2.8.1.
Published: 2024-12-13T05:50:55.791Z
Updated: 2024-12-16T19:02:59.324Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-11836 vulnerable 2026-06-08 06:23:50.499546 Server-side Request Forgery
Server-Side Request Forgery (SSRF) vulnerability in PlexTrac allowing requests to internal system resources.This issue affects PlexTrac: from 1.61.3 before 2.8.1.
Published: 2024-12-13T05:50:35.088Z
Updated: 2024-12-16T19:04:58.999Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-11835 vulnerable 2026-06-08 06:23:50.498903 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-11834 vulnerable 2026-06-08 06:23:50.498397 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-11833 vulnerable 2026-06-08 06:23:50.497899 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-37146 vulnerable 2026-06-08 05:46:08.666992 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-37145 vulnerable 2026-06-08 05:46:08.666386 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-37144 vulnerable 2026-06-08 05:46:08.665747 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.