Skip to content
Pagerduty vulnerabilities
Newest
-
pagerduty runbook automation
PagerDuty Runbook through 2025-06-12 exposes stored secrets directly in the webpage DOM at the...
CVE-2025-52493
6.5 Medium
-
pagerduty rundeck
Authenticated users can view or delete jobs they do not have authorization for in Rundeck
CVE-2023-48222
Fix available
8.1 High
-
pagerduty rundeck
Authenticated users can view job names and groups they do not have authorization to view in Rundeck
CVE-2023-47112
Fix available
4.3 Medium
-
pagerduty rundeck
Plaintext Storage of Keys and Passwords in Rundeck and PagerDuty Process Automation
CVE-2022-31044
Fix available
7.5 High
-
pagerduty rundeck
Use of Hard-coded Cryptographic Key in rundeck/rundeck, rundeckpro/enterprise
CVE-2022-29186
9.1 Critical
-
pagerduty rundeck
Missing Authorization in Rundeck
CVE-2021-41112
8.1 High
-
pagerduty rundeck
Authorization Bypass Through User-Controlled Key in Rundeck
CVE-2021-41111
6.4 Medium
-
pagerduty rundeck
Cross-Site Request Forgery (CSRF) can run untrusted code on Rundeck server
CVE-2021-39133
Fix available
7.2 High
-
pagerduty rundeck
YAML deserialization can run untrusted code
CVE-2021-39132
Fix available
8.8 High
-
pagerduty rundeck
IDOR can reveal execution data and logs to unauthorized user in Rundeck
CVE-2020-11009
Fix available
6.5 Medium
-
cloud foundry cf cli, anynines elasticsearch, logme +45 more +47 more
CF CLI writes the client id and secret to config file
CVE-2019-3800
6.3 Medium
-
pagerduty rundeck
Rundeck Community Edition vulnerable to Cross-site Scripting
CVE-2019-6804
Public exploitFix available
6.1 Medium