Skip to content
Noroxi

Cleo records

4 published records for vendor cleo.

Researcher profile

Entered KEV
2 · 50%
Weaponized
2 · 50%
Pre-auth RCE
2
With a fix record
0%
Median publish → KEV
26 days

Records by year

  1. 21
  2. 24

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

CWE

Attack profile

All records

4 records
  • CVE-2024-50623
    99Now

    In Cleo Harmony before 5.8.0.21, VLTrader before 5.8.0.21, and LexiCom before 5.8.0.21, there is an unrestricted file upload and download th

    CriticalCVSS 9.8KEVWeaponizedEPSS 99%

    cleo · harmonyOct 27, 2024

  • CVE-2024-55956
    97Now

    In Cleo Harmony before 5.8.0.24, VLTrader before 5.8.0.24, and LexiCom before 5.8.0.24, an unauthenticated user can import and execute arbit

    CriticalCVSS 9.8KEVWeaponizedEPSS 94%

    cleo · harmonyDec 13, 2024

  • CVE-2021-33576
    39Monitor

    An issue was discovered in Cleo LexiCom 5.5.0.0.

    CriticalCVSS 9.8No exploitEPSS 2%

    cleo · lexicomJun 18, 2021

  • CVE-2021-33577
    21Monitor

    An issue was discovered in Cleo LexiCom 5.5.0.0.

    MediumCVSS 5.3No exploitEPSS 1%

    cleo · lexicomJun 18, 2021