Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

7 records

Vendor: upKeeper Solutions Component: Upkeeper Manager Clear all filters
TI-2025-10486 CVE-2025-11446 · GHSA-m385-j8ww-m9fh

Sensitive information in log files in upKeeper Manager

Priority LOW 34

Insertion of Sensitive Information into Log File vulnerability in upKeeper Solutions upKeeper Manager allows Use of Known Domain Credentials.This issue affects upKeeper Manager: from 5.2.0 before 5.2.12.

CVSS 4.0HIGH 7.3 Local High privileges User interaction EPSS 0.00243 Published 2025-11-19 Fixed in 5.2.12 CWE-532
TI-2025-07930 CVE-2025-8663 · GHSA-fpqq-xvp5-hhmq

Sensitive information in log files in upKeeper Manager

Priority MEDIUM 40

Insertion of Sensitive Information into Log File vulnerability in upKeeper Solutions upKeeper Manager allows Use of Known Domain Credentials.This issue affects upKeeper Manager: from 5.0.0 before 5.2.12.

CVSS 4.0HIGH 8.8 Network Low privileges User interaction EPSS 0.00291 Published 2025-09-03 Fixed in 5.2.12 CWE-532
TI-2024-28434 CVE-2024-42466 · GHSA-p8f2-24c3-9gc6

Lack of resources and rate limiting - login

Priority MEDIUM 44

Improper Restriction of Excessive Authentication Attempts vulnerability in upKeeper Solutions product upKeeper Manager allows Authentication Abuse.This issue affects upKeeper Manager: through 5.1.9.

CVSS 4.0CRITICAL 9.5 Network No auth No interaction EPSS 0.00652 Published 2024-08-16 No fix listed CWE-307
TI-2024-28433 CVE-2024-42465 · GHSA-52g6-2pfv-hfcq

Lack of resources and rate limiting - two factor authentication

Priority MEDIUM 41

Improper Restriction of Excessive Authentication Attempts vulnerability in upKeeper Solutions product upKeeper Manager allows Authentication Abuse.This issue affects upKeeper Manager: through 5.1.9.

CVSS 4.0CRITICAL 9.0 Network Low privileges No interaction EPSS 0.0047 Published 2024-08-16 No fix listed CWE-307
TI-2024-28432 CVE-2024-42464 · GHSA-75q5-8jhm-6829

Leak of user information

Priority LOW 33

Authorization Bypass Through User-Controlled Key vulnerability in upKeeper Solutions product upKeeper Manager allows Utilizing REST's Trust in the System Resource to Obtain Sensitive Data.This issue affects upKeeper Mana…

CVSS 4.0HIGH 7.6 Network Low privileges No interaction EPSS 0.00312 Published 2024-08-16 No fix listed CWE-639
TI-2024-28431 CVE-2024-42463 · GHSA-fhxh-jfcp-fmv9

Leak of organizations messages

Priority LOW 39

Authorization Bypass Through User-Controlled Key vulnerability in upKeeper Solutions product upKeeper Manager allows Utilizing REST's Trust in the System Resource to Obtain Sensitive Data.This issue affects upKeeper Mana…

CVSS 4.0HIGH 8.6 Network Low privileges No interaction EPSS 0.00369 Published 2024-08-16 No fix listed CWE-639
TI-2024-28430 CVE-2024-42462 · GHSA-mqj4-jxhw-766g

Bypass multifactor authentication

Priority MEDIUM 50

Improper Authentication vulnerability in upKeeper Solutions product upKeeper Manager allows Authentication Bypass.This issue affects upKeeper Manager: through 5.1.9.

CVSS 4.0CRITICAL 10.0 Network No auth No interaction EPSS 0.00549 Published 2024-08-16 No fix listed CWE-306