Vulnerabilities > Plextrac
| DATE | CVE | VULNERABILITY TITLE | RISK |
|---|---|---|---|
| 2022-09-08 | CVE-2022-37144 | Improper Restriction of Excessive Authentication Attempts vulnerability in Plextrac The PlexTrac platform prior to API version 1.17.0 does not restrict excessive MFA TOTP submission attempts. | 8.8 |
| 2022-09-08 | CVE-2022-37145 | Improper Restriction of Excessive Authentication Attempts vulnerability in Plextrac The PlexTrac platform prior to version 1.17.0 does not restrict excessive authentication attempts for accounts configured to use the PlexTrac authentication provider. | 7.5 |
| 2022-09-08 | CVE-2022-37146 | Information Exposure Through Discrepancy vulnerability in Plextrac The PlexTrac platform prior to version 1.28.0 allows for username enumeration via HTTP response times on invalid login attempts for users configured to use the PlexTrac authentication provider. | 5.3 |