Alerta Project

Records2All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical1CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

Alerta Project records in CISA KEV

No Alerta Project vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Alerta 2 records HIGH

Records

2 records in Alerta · all components

TI-2020-16035 CVE-2020-26214 · GHSA-5hmm-x8q8-w5jh

LDAP authentication bypass in Alerta

HIGH 78

In Alerta before version 8.1.0, users may be able to bypass LDAP authentication if they provide an empty password when Alerta server is configure to use LDAP as the authorization provider.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.65933 Published 2020-11-06 Fixed in 8.1.0, 7.5.7 CWE-287

TI-2026-26686 CVE-2026-34400 · GHSA-8prr-286p-4w7j

alerta-server has potential SQL Injection vulnerability in Query String Syntax (q=) API

LOW 39

Alerta is a monitoring tool.

CVSS 4.0MEDIUM 6.9 Network No auth No interaction EPSS 0.00525 Published 2026-03-31 Fixed in 9.1.0 CWE-89

Open these records in search →

Critical	1
High	0
Medium	1
Low	0
No CVSS	0