Advisories · Technology
runZero Platform.
Every CVE that names runZero Platform among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 6.5 Medium
runZero search SQL injection
- runZero Platform
- SQL injection
- CVSS 3.5 Low
runZero MCP 'Findings summaries' Data Leak
- runZero Platform
- Broken access control
- CVSS 5.0 Medium
runZero Platform dashboard configuration exposure
- runZero Platform
- Privilege escalation
- CVSS 5.8 Medium
runZero Platform incorrect credential scope
- runZero Platform
- Broken access control
- CVSS 3.0 Low
runZero Platform MCP endpoint information leak
- runZero Platform
- Broken access control
- CVSS 2.2 Low
runZero Platform task information leak
- runZero Platform
- Broken access control
- CVSS 5.3 Medium
runZero Platform cleartext secret exposure
- runZero Platform
- Broken access control
- CVSS 3.0 Low
runZero Platform MCP certification information leak
- runZero Platform
- Broken access control
- CVSS 5.8 Medium
runZero Platform user creation leak
- runZero Platform
- Broken access control
- CVSS 5.9 Medium
runZero Platform session timeout failure
- runZero Platform
- Authentication bypass
- CVSS 2.7 Low
runZero Platform API credential information leak
- runZero Platform
- Information disclosure
- CVSS 5.8 Medium
runZero Platform MCP information leak
- runZero Platform
- Broken access control
- CVSS 8.1 High
runZero Platform superuser privilege escalation
- runZero Platform
- Privilege escalation
- CVSS 6.4 Medium
runZero Platform SQL injection in saved queries
- runZero Platform
- SQL injection