Known vulnerabilities in Allegra

Vendor: Steinbeis GmbH & Co. KG
Software: Allegra
Software CPE: cpe:2.3:a:trackplus:allegra:*:*:*:*:*:*:*:*
Website: https://www.trackplus.com/
Total vulnerabilities: 24
Public exploits: 1
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Allegra Allegra is affected by 24 known vulnerabilities: 4 high, 13 medium, 7 low Critical High Medium Low

Vulnerabilities (24)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU134689 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2026-11443		 CWE-79 Low
No
No
 9.0 17.06.2026 SB2026061719
#VU134683 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2026-11442		 CWE-22 Medium
No
No
 9.0 17.06.2026 SB2026061719
#VU116861 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2025-11466		 CWE-22 Low
No
No
 7.5.2.76, 8.1.6 09.10.2025 SB2025100923
#VU111542 - Improper Authentication
CVE-2025-6216		 CWE-287 High
No
No
 7.5.2.70, 8.1.4 20.06.2025 SB2025062017
#VU107969 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2025-3486		 CWE-22 Low
No
No
 8.1.2 28.04.2025 SB2025042811
#VU107967 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2025-3485		 CWE-22 Low
No
No
 8.1.2 28.04.2025 SB2025042811
#VU96472 - Deserialization of Untrusted Data
CVE-2024-5579		 CWE-502 Low
No
No
 7.5.2 23.08.2024 SB2024082308
#VU96469 - Deserialization of Untrusted Data
CVE-2024-5580		 CWE-502 Low
No
No
 7.5.2 23.08.2024 SB2024082308
#VU96468 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2024-5581		 CWE-22 Low
No
No
 7.5.2 23.08.2024 SB2024082308
#VU96467 - Improper Control of Generation of Code ('Code Injection')
CVE-2024-30372		 CWE-94 Medium
No
No
 7.5.2 23.08.2024 SB2024082308
#VU86365 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2024-22507		 CWE-22 Medium
No
No
 7.5.1 13.02.2024 SB2024021306
#VU86364 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2024-22504		 CWE-22 Medium
No
No
 7.5.1 13.02.2024 SB2024021306
#VU86363 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
 CWE-22 Medium
No
No
 7.5.1 13.02.2024 SB2024021306
#VU86362 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
 CWE-22 Medium
No
No
 7.5.1 13.02.2024 SB2024021306
#VU86357 - Deserialization of Untrusted Data
CVE-2024-22506		 CWE-502 Medium
No
No
 7.5.1 13.02.2024 SB2024021306
#VU86356 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2024-22510		 CWE-22 Medium
No
No
 7.5.1 13.02.2024 SB2024021306
#VU86354 - Improper Access Control
CVE-2024-22512		 CWE-284 High
No
No
 7.5.1 13.02.2024 SB2024021306
#VU86353 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2024-22513		 CWE-22 Medium
Available
No
 7.5.1 13.02.2024 SB2024021306
#VU86351 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2024-22532		 CWE-22 High
No
No
 7.5.1 13.02.2024 SB2024021306
#VU86350 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2024-22530		 CWE-22 Medium
No
No
 7.5.1 13.02.2024 SB2024021306


Showing elements 1 - 20 out of 24