Read the docs

upKeeper Solutions

Records15All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical6CVSS 9.0–10.0
CVSS high9CVSS 7.0–8.9

Exploited now

upKeeper Solutions records in CISA KEV

No upKeeper Solutions vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Records

15 records

TI-2024-28430 CVE-2024-42462 · GHSA-mqj4-jxhw-766g

Bypass multifactor authentication

Priority MEDIUM 50

Improper Authentication vulnerability in upKeeper Solutions product upKeeper Manager allows Authentication Bypass.This issue affects upKeeper Manager: through 5.1.9.

CVSS 4.0CRITICAL 10.0 Network No auth No interaction EPSS 0.00549 Published 2024-08-16 No fix listed CWE-306
TI-2024-28434 CVE-2024-42466 · GHSA-p8f2-24c3-9gc6

Lack of resources and rate limiting - login

Priority MEDIUM 44

Improper Restriction of Excessive Authentication Attempts vulnerability in upKeeper Solutions product upKeeper Manager allows Authentication Abuse.This issue affects upKeeper Manager: through 5.1.9.

CVSS 4.0CRITICAL 9.5 Network No auth No interaction EPSS 0.00652 Published 2024-08-16 No fix listed CWE-307
Priority MEDIUM 41

Improper neutralization of argument delimiters in a command ('argument injection') vulnerability in upKeeper Solutions upKeeper Instant Privilege Access allows Hijacking a Privileged Thread of Execution.This issue affect…

CVSS 4.0CRITICAL 9.0 Network Low privileges No interaction EPSS 0.00329 Published 2026-04-14 No fix listed CWE-88
Priority MEDIUM 41

Improper Restriction of Excessive Authentication Attempts vulnerability in upKeeper Solutions product upKeeper Manager allows Authentication Abuse.This issue affects upKeeper Manager: through 5.1.9.

CVSS 4.0CRITICAL 9.0 Network Low privileges No interaction EPSS 0.0047 Published 2024-08-16 No fix listed CWE-307
Priority MEDIUM 40

Insertion of Sensitive Information into Log File vulnerability in upKeeper Solutions upKeeper Manager allows Use of Known Domain Credentials.This issue affects upKeeper Manager: from 5.0.0 before 5.2.12.

CVSS 4.0HIGH 8.8 Network Low privileges User interaction EPSS 0.00291 Published 2025-09-03 Fixed in 5.2.12 CWE-532
Priority LOW 39

Improper Privilege Management vulnerability in upKeeper Solutions upKeeper Instant Privilege Access allows Privilege Abuse.This issue affects upKeeper Instant Privilege Access: before 1.4.0.

CVSS 4.0HIGH 8.6 Local Low privileges User interaction EPSS 0.00199 Published 2025-06-10 Fixed in 1.4.0 CWE-269
Priority LOW 39

Improper Input Validation vulnerability in upKeeper Solutions upKeeper Instant Privilege Access allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects upKeeper Instant Privilege Access…

CVSS 4.0HIGH 8.6 Local Low privileges User interaction EPSS 0.00222 Published 2025-06-10 Fixed in 1.4.0 CWE-20
TI-2024-28431 CVE-2024-42463 · GHSA-fhxh-jfcp-fmv9

Leak of organizations messages

Priority LOW 39

Authorization Bypass Through User-Controlled Key vulnerability in upKeeper Solutions product upKeeper Manager allows Utilizing REST's Trust in the System Resource to Obtain Sensitive Data.This issue affects upKeeper Mana…

CVSS 4.0HIGH 8.6 Network Low privileges No interaction EPSS 0.00369 Published 2024-08-16 No fix listed CWE-639
Priority LOW 38

Improper handling of undefined values vulnerability in upKeeper Solutions upKeeper Instant Privilege Access allows Privilege Escalation.

CVSS 4.0HIGH 8.6 Local Low privileges User interaction EPSS 0.0014 Published 2026-10-13 No fix listed CWE-232
Priority LOW 34

Insertion of Sensitive Information into Log File vulnerability in upKeeper Solutions upKeeper Manager allows Use of Known Domain Credentials.This issue affects upKeeper Manager: from 5.2.0 before 5.2.12.

CVSS 4.0HIGH 7.3 Local High privileges User interaction EPSS 0.00243 Published 2025-11-19 Fixed in 5.2.12 CWE-532
TI-2024-28432 CVE-2024-42464 · GHSA-75q5-8jhm-6829

Leak of user information

Priority LOW 33

Authorization Bypass Through User-Controlled Key vulnerability in upKeeper Solutions product upKeeper Manager allows Utilizing REST's Trust in the System Resource to Obtain Sensitive Data.This issue affects upKeeper Mana…

CVSS 4.0HIGH 7.6 Network Low privileges No interaction EPSS 0.00312 Published 2024-08-16 No fix listed CWE-639
Priority LOW 32

.NET misconfiguration: use of impersonation vulnerability in upKeeper Solutions upKeeper Instant Privilege Access allows Hijacking a Privileged Thread of Execution.This issue affects upKeeper Instant Privilege Access: th…

CVSS 4.0HIGH 7.4 Network Low privileges No interaction EPSS 0.00271 Published 2026-04-14 No fix listed CWE-520
Open these records in search →