Read the docs

upKeeper Solutions

Records15All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical6CVSS 9.0–10.0
CVSS high9CVSS 7.0–8.9

Exploited now

upKeeper Solutions records in CISA KEV

No upKeeper Solutions vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Upkeeper Manager 7 records MEDIUM

Records

7 records in Upkeeper Manager · all components

TI-2024-28430 CVE-2024-42462 · GHSA-mqj4-jxhw-766g

Bypass multifactor authentication

Priority MEDIUM 50

Improper Authentication vulnerability in upKeeper Solutions product upKeeper Manager allows Authentication Bypass.This issue affects upKeeper Manager: through 5.1.9.

CVSS 4.0CRITICAL 10.0 Network No auth No interaction EPSS 0.00549 Published 2024-08-16 No fix listed CWE-306
TI-2024-28434 CVE-2024-42466 · GHSA-p8f2-24c3-9gc6

Lack of resources and rate limiting - login

Priority MEDIUM 44

Improper Restriction of Excessive Authentication Attempts vulnerability in upKeeper Solutions product upKeeper Manager allows Authentication Abuse.This issue affects upKeeper Manager: through 5.1.9.

CVSS 4.0CRITICAL 9.5 Network No auth No interaction EPSS 0.00652 Published 2024-08-16 No fix listed CWE-307
TI-2024-28433 CVE-2024-42465 · GHSA-52g6-2pfv-hfcq

Lack of resources and rate limiting - two factor authentication

Priority MEDIUM 41

Improper Restriction of Excessive Authentication Attempts vulnerability in upKeeper Solutions product upKeeper Manager allows Authentication Abuse.This issue affects upKeeper Manager: through 5.1.9.

CVSS 4.0CRITICAL 9.0 Network Low privileges No interaction EPSS 0.0047 Published 2024-08-16 No fix listed CWE-307
TI-2025-07930 CVE-2025-8663 · GHSA-fpqq-xvp5-hhmq

Sensitive information in log files in upKeeper Manager

Priority MEDIUM 40

Insertion of Sensitive Information into Log File vulnerability in upKeeper Solutions upKeeper Manager allows Use of Known Domain Credentials.This issue affects upKeeper Manager: from 5.0.0 before 5.2.12.

CVSS 4.0HIGH 8.8 Network Low privileges User interaction EPSS 0.00291 Published 2025-09-03 Fixed in 5.2.12 CWE-532
TI-2024-28431 CVE-2024-42463 · GHSA-fhxh-jfcp-fmv9

Leak of organizations messages

Priority LOW 39

Authorization Bypass Through User-Controlled Key vulnerability in upKeeper Solutions product upKeeper Manager allows Utilizing REST's Trust in the System Resource to Obtain Sensitive Data.This issue affects upKeeper Mana…

CVSS 4.0HIGH 8.6 Network Low privileges No interaction EPSS 0.00369 Published 2024-08-16 No fix listed CWE-639
TI-2025-10486 CVE-2025-11446 · GHSA-m385-j8ww-m9fh

Sensitive information in log files in upKeeper Manager

Priority LOW 34

Insertion of Sensitive Information into Log File vulnerability in upKeeper Solutions upKeeper Manager allows Use of Known Domain Credentials.This issue affects upKeeper Manager: from 5.2.0 before 5.2.12.

CVSS 4.0HIGH 7.3 Local High privileges User interaction EPSS 0.00243 Published 2025-11-19 Fixed in 5.2.12 CWE-532
TI-2024-28432 CVE-2024-42464 · GHSA-75q5-8jhm-6829

Leak of user information

Priority LOW 33

Authorization Bypass Through User-Controlled Key vulnerability in upKeeper Solutions product upKeeper Manager allows Utilizing REST's Trust in the System Resource to Obtain Sensitive Data.This issue affects upKeeper Mana…

CVSS 4.0HIGH 7.6 Network Low privileges No interaction EPSS 0.00312 Published 2024-08-16 No fix listed CWE-639
Open these records in search →