TI-2026-57837 CVE-2026-84115 · GHSA-jg45-wrwh-x4rp
Cleo Harmony JWT Refresh Token connections privileges management
Priority HIGH 70
A vulnerability was found in Cleo Harmony up to 5.8.1.10.
Vulnerabilities
7 records
TI-2026-57836 CVE-2026-84114 · GHSA-q66c-gqf3-vf5c
Cleo Harmony SAML Authentication LocalUserUtil.getNativeUserByAssertions improper authentication
Priority LOW 24
A vulnerability has been found in Cleo Harmony up to 5.8.1.10.
TI-2024-36997 CVE-2024-55956 · GHSA-v87c-pw6c-99w6
In Cleo Harmony before 5.8.0.24, VLTrader before 5.8.0.24, and LexiCom before 5.8.0.24…
Priority CRITICAL 100KEV
In Cleo Harmony before 5.8.0.24, VLTrader before 5.8.0.24, and LexiCom before 5.8.0.24, an unauthenticated user can import and execute arbitrary Bash or PowerShell commands on the host system by leveraging the default se…
TI-2024-34043 CVE-2024-50623 · GHSA-8j74-v9cr-x39h
In Cleo Harmony before 5.8.0.21, VLTrader before 5.8.0.21, and LexiCom before 5.8.0.21…
Priority CRITICAL 100KEV
In Cleo Harmony before 5.8.0.21, VLTrader before 5.8.0.21, and LexiCom before 5.8.0.21, there is an unrestricted file upload and download that could lead to remote code execution.
TI-2022-20946 CVE-2022-42966 · GHSA-2p9h-ccw7-33gf
Exponential ReDoS in cleo leads to denial of service
Priority HIGH 66
An exponential ReDoS (Regular Expression Denial of Service) can be triggered in the cleo PyPI package, when an attacker is able to supply arbitrary input to the Table.set_rows method
TI-2021-12964 CVE-2021-33577 · GHSA-2c7q-mc2r-gx7m
An issue was discovered in Cleo LexiCom 5.5.0.0.
Priority LOW 25
An issue was discovered in Cleo LexiCom 5.5.0.0.
TI-2021-12963 CVE-2021-33576 · GHSA-83pw-wxhw-r33r
An issue was discovered in Cleo LexiCom 5.5.0.0.
Priority MEDIUM 45
An issue was discovered in Cleo LexiCom 5.5.0.0.