Lucene search

INCDCVELIST:CVE-2024-36396

HistoryJun 13, 2024 - 12:33 p.m.

CVE-2024-36396 Verint - CWE-434: Unrestricted Upload of File with Dangerous Type

2024-06-1312:33:41

CWE-434

INCD

www.cve.org

verint

security vulnerability

cwe-434

unrestricted file upload

dangerous file type

CVSS3

8.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

EPSS

0.001

Percentile

19.9%

JSON

Verint - CWE-434: Unrestricted Upload of File with Dangerous Type

CNA Affected

[
  {
    "defaultStatus": "unaffected",
    "product": "WFO",
    "vendor": "Verint",
    "versions": [
      {
        "lessThan": "Upgrade to version 15.2.1030 or greater.",
        "status": "affected",
        "version": "All versions",
        "versionType": "custom"
      }
    ]
  }
]

References

www.gov.il/en/Departments/faq/cve_advisories

CVSS3

8.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

EPSS

0.001

Percentile

19.9%

JSON

Related for CVELIST:CVE-2024-36396