Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

4 records

Vendor: Cleo Component: Lexicom Clear all filters
TI-2024-36997 CVE-2024-55956 · GHSA-v87c-pw6c-99w6

In Cleo Harmony before 5.8.0.24, VLTrader before 5.8.0.24, and LexiCom before 5.8.0.24…

Priority CRITICAL 100KEV

In Cleo Harmony before 5.8.0.24, VLTrader before 5.8.0.24, and LexiCom before 5.8.0.24, an unauthenticated user can import and execute arbitrary Bash or PowerShell commands on the host system by leveraging the default se…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.93968 Published 2024-12-13 No fix listed CWE-77