Vulnerabilidades do Cleo Lexicom
🔔 Criar alerta RSS Verificador de versão
CVEs publicadas que afetam Cleo Lexicom: 2 registro(s), com versões afetadas e correções.cpe:2.3:a:cleo:lexicom
CVE-2024-55956
Crítica · 9.8
KEV Urgente · 86 Exploit público Ransomware CWE-77 13/12/2024
Cleo Multiple Products Unauthenticated File Upload Vulnerability
In Cleo Harmony before 5.8.0.24, VLTrader before 5.8.0.24, and LexiCom before 5.8.0.24, an unauthenticated user can import and execute arbitrary Bash or PowerShell commands on the host system by leveraging the default settings of the Autorun directory.
CVE-2024-50623
Crítica · 9.8
KEV Urgente · 80 Exploit público Ransomware CWE-434 27/10/2024
Cleo Multiple Products Unrestricted File Upload Vulnerability
In Cleo Harmony before 5.8.0.21, VLTrader before 5.8.0.21, and LexiCom before 5.8.0.21, there is an unrestricted file upload and download that could lead to remote code execution.