Vulnerabilidades do Cleo Harmony
🔔 Criar alerta RSS Verificador de versão
CVEs publicadas que afetam Cleo Harmony: 2 registro(s), com versões afetadas e correções.cpe:2.3:a:cleo:harmony
CVE-2024-55956
Crítica · 9.8
KEV Urgente · 86 Exploit público Ransomware CWE-77 13/12/2024
Cleo Multiple Products Unauthenticated File Upload Vulnerability
In Cleo Harmony before 5.8.0.24, VLTrader before 5.8.0.24, and LexiCom before 5.8.0.24, an unauthenticated user can import and execute arbitrary Bash or PowerShell commands on the host system by leveraging the default settings of the Autorun directory.
CVE-2024-50623
Crítica · 9.8
KEV Urgente · 80 Exploit público Ransomware CWE-434 27/10/2024
Cleo Multiple Products Unrestricted File Upload Vulnerability
In Cleo Harmony before 5.8.0.21, VLTrader before 5.8.0.21, and LexiCom before 5.8.0.21, there is an unrestricted file upload and download that could lead to remote code execution.