Product by Pagerduty
Rundeck
10 known vulnerabilities in Rundeck (Pagerduty), 0 of them actively exploited (CISA KEV).
Key figures
10
Vulnerabilities
0
Actively exploited (KEV)
0
Used by ransomware
1
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.
| Medium | CVE-2019-6804 | Pagerduty Rundeck: Cross-Site Scripting (XSS) | 6.1 | |
| High | CVE-2021-39132 | YAML deserialization can run untrusted code | 8.8 | |
| Critical | CVE-2022-29186 | Use of Hard-coded Cryptographic Key in rundeck/rundeck, rundeckpro/enterprise | 9.1 | |
| Medium | CVE-2020-11009 | IDOR can reveal execution data and logs to unauthorized user in Rundeck | 6.5 | |
| High | CVE-2021-41112 | Missing Authorization in Rundeck | 8.1 | |
| High | CVE-2022-31044 | Plaintext Storage of Keys and Passwords in Rundeck and PagerDuty Process Automation | 7.5 | |
| High | CVE-2023-48222 | Authenticated users can view or delete jobs they do not have authorization for in Rundeck | 8.1 | |
| Medium | CVE-2021-41111 | Authorization Bypass Through User-Controlled Key in Rundeck | 6.4 | |
| High | CVE-2021-39133 | Cross-Site Request Forgery (CSRF) can run untrusted code on Rundeck server | 7.2 | |
| Medium | CVE-2023-47112 | Authenticated users can view job names and groups they do not have authorization to view in Rundeck | 4.3 |