Vulnerabilities

TI-2025-40282 CVE-2025-65176 · GHSA-vmjp-286j-ggm2

An issue was discovered in Dynatrace OneAgent before 1.325.47.

LOW 39

An issue was discovered in Dynatrace OneAgent before 1.325.47.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00427 Published 2025-12-15 No fix listed CWE-284

TI-2025-37974 CVE-2025-61304 · GHSA-7c9g-mrww-7986

OS command injection vulnerability in Dynatrace ActiveGate ping extension up to 1.016 via crafted ip address.

HIGH 82

OS command injection vulnerability in Dynatrace ActiveGate ping extension up to 1.016 via crafted ip address.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01917 Published 2025-11-05 No fix listed CWE-78

TI-2019-02812 CVE-2019-3800 · GHSA-2wpx-p7qg-954w

CF CLI writes the client id and secret to config file

LOW 38

CF CLI version prior to v6.45.0 (bosh release version 1.16.0) writes the client id and secret to its config file when the user authenticates with --client-credentials flag.

CVSS 3.0HIGH 7.8 Local Low privileges No interaction EPSS 0.02088 Published 2019-08-05 Fixed in v1.16.0, v6.45.0 CWE-522

Vulnerabilities

Filters

An issue was discovered in Dynatrace OneAgent before 1.325.47.

OS command injection vulnerability in Dynatrace ActiveGate ping extension up to 1.016 via crafted ip address.

CF CLI writes the client id and secret to config file