CVE-2024-20345mediumexploração observadaCWE-26

CVE-2024-20345: falha de média gravidade em Cisco AppDynamics

Publicada em · Atualizada em

Seguir esta CVE+ Monitorar Cisco AppDynamics

Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.

35Vexday Risk Score

Priorize a correção. Ela exploração observada pelo VulnCheck.

ssvc Attendcvss 6.5epss 2.2%
da publicação à arma
Publicada no NVD6 de mar.
VulnCheck+65d
A vulnerability in the file upload functionality of Cisco AppDynamics Controller could allow an authenticated, remote attacker to conduct directory traversal attacks on an affected device. This vulnerability is due to insufficient validation of user-supplied input. An attacker could exploit this vulnerability by sending a crafted request to an affected device. A successful exploit could allow the attacker to access sensitive data on an affected device.
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Produtos afetados
Cisco · Cisco AppDynamics
CVEs relacionadas — Cisco AppDynamics

No mesmo produto, das mais perigosas para as menos.

CVE-2022-20736MEDIUMCisco AppDynamics Controller Authorization Bypass VulnerabilityEPSS 1.1%CVE-2024-20346MEDIUMCVE-2024-20346EPSS 0.4%CVE-2023-20274MEDIUMCVE-2023-20274EPSS 0.2%CVE-2024-20394MEDIUMCVE-2024-20394EPSS 0.1%