[ Vendor · 2 CVEs ]
Cleo
CVEs affecting Cleo published in the last 30 days, plus any Cleo CVE on CISA's exploited list.
| CVE | Published | Severity | Vulnerability | Signals |
|---|---|---|---|---|
| CVE-2024-55956 | 13 Dec 2024 | CVSS 9.8 | Cleo Multiple Products Unauthenticated File UploadIn Cleo Harmony before 5.8.0.24, VLTrader before 5.8.0.24, and LexiCom before 5.8.0.24, an unauthenticated user can import and execute arbitrary Bash… | Exploited |
| CVE-2024-50623 | 28 Oct 2024 | CVSS 9.8 | Cleo Multiple Products Unrestricted File UploadIn Cleo Harmony before 5.8.0.21, VLTrader before 5.8.0.21, and LexiCom before 5.8.0.21, there is an unrestricted file upload and download that could… | Exploited |