upkeeper records

7 published records for vendor upkeeper.

Researcher profile

Records by year

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

Attack profile

7 records

CVE records
Action	CVE	Vulnerability	Severity	KEV	EPSS	Published
40Plan	CVE-2024-42462No exploit	Bypass multifactor authenticationupkeeper · upkeeper manager · CWE-306 Pre-auth Auth bypass	Critical10.0	—	0.5%	Aug 16, 2024
38Monitor	CVE-2024-42466No exploit	Lack of resources and rate limiting - loginupkeeper · upkeeper manager · CWE-307 Pre-auth	Critical9.5	—	0.7%	Aug 16, 2024
36Monitor	CVE-2024-42465No exploit	Lack of resources and rate limiting - two factor authenticationupkeeper · upkeeper manager · CWE-307	Critical9.0	—	0.5%	Aug 16, 2024
35Monitor	CVE-2025-8663No exploit	Insertion of Sensitive Information into Log File vulnerability in upKeeper Solutions upKeeper Manager allows Use of Known Domain Credentialsupkeeper · upkeeper manager · CWE-532 Info leak	High8.8	—	0.3%	Sep 3, 2025
34Monitor	CVE-2024-42463No exploit	Leak of organizations messagesupkeeper · upkeeper manager · CWE-639 Broken access control (IDOR)	High8.6	—	0.4%	Aug 16, 2024
30Monitor	CVE-2024-42464No exploit	Leak of user informationupkeeper · upkeeper manager · CWE-639 Broken access control (IDOR)	High7.6	—	0.3%	Aug 16, 2024
29Monitor	CVE-2025-11446No exploit	Insertion of Sensitive Information into Log File vulnerability in upKeeper Solutions upKeeper Manager allows Use of Known Domain Credentialsupkeeper · upkeeper manager · CWE-532 Info leak	High7.3	—	0.2%	Nov 19, 2025

CVE-2024-42462
40Plan
Bypass multifactor authentication
CriticalCVSS 10.0No exploitEPSS 1%
- Pre-auth
- Auth bypass
upkeeper · upkeeper managerAug 16, 2024
CVE-2024-42466
38Monitor
Lack of resources and rate limiting - login
CriticalCVSS 9.5No exploitEPSS 1%
- Pre-auth
upkeeper · upkeeper managerAug 16, 2024
CVE-2024-42465
36Monitor
Lack of resources and rate limiting - two factor authentication
CriticalCVSS 9.0No exploitEPSS 0%
upkeeper · upkeeper managerAug 16, 2024
CVE-2025-8663
35Monitor
Insertion of Sensitive Information into Log File vulnerability in upKeeper Solutions upKeeper Manager allows Use of Known Domain Credentials
HighCVSS 8.8No exploitEPSS 0%
- Info leak
upkeeper · upkeeper managerSep 3, 2025
CVE-2024-42463
34Monitor
Leak of organizations messages
HighCVSS 8.6No exploitEPSS 0%
- Broken access control (IDOR)
upkeeper · upkeeper managerAug 16, 2024
CVE-2024-42464
30Monitor
Leak of user information
HighCVSS 7.6No exploitEPSS 0%
- Broken access control (IDOR)
upkeeper · upkeeper managerAug 16, 2024
CVE-2025-11446
29Monitor
Insertion of Sensitive Information into Log File vulnerability in upKeeper Solutions upKeeper Manager allows Use of Known Domain Credentials
HighCVSS 7.3No exploitEPSS 0%
- Info leak
upkeeper · upkeeper managerNov 19, 2025