CISA Adds NAKIVO Vulnerability to KEV Catalog Amid Active Exploitation

🗓️ 20 Mar 2025 09:43:00Reported by The Hacker NewsType

thn🔗 thehackernews.com👁 31 Views

CISA includes NAKIVO vulnerability CVE-2024-48248 in KEV catalog due to active exploitation risks.

Reporter	Title	Published	Views	Family All 52
Gitee	Exploit for Unrestricted Upload of File with Dangerous Type in Apache Tomcat	16 May 202116:14	–	gitee
Gitee	Exploit for Unrestricted Upload of File with Dangerous Type in Apache Tomcat	27 Apr 202114:33	–	gitee
Gitee	Exploit for Unrestricted Upload of File with Dangerous Type in Apache Tomcat	22 Oct 202115:45	–	gitee
ATTACKERKB	CVE-2025-1316	5 Mar 202500:00	–	attackerkb
ATTACKERKB	CVE-2024-48248	4 Mar 202500:00	–	attackerkb
ATTACKERKB	CVE-2017-12637	7 Aug 201700:00	–	attackerkb
BDU FSTEC	The vulnerability of the web interface of NAKIVO Backup and Replication systems for virtual machines allows a perpetrator to disclose protected information.	5 Mar 202500:00	–	bdu_fstec
BDU FSTEC	The vulnerability of Edimax IC-7100 IP cameras’ microprogramming software lies in the lack of measures to neutralize special elements used in the operating system’s command set. This allows intruders to execute arbitrary code.	10 Mar 202500:00	–	bdu_fstec
GithubExploit	Exploit for Absolute Path Traversal in Nakivo Backup_\&_Replication_Director	28 Jan 202504:46	–	githubexploit
Circl	CVE-2017-12637	19 Mar 202518:15	–	circl

26 Mar 2025 08:35Current

8.8High risk

Vulners AI Score8.8

CVSS 3.19.8

CVSS 49.3

EPSS0.95111

cisa nakivo vulnerability exploitation kev catalog absolute path traversal cve-2024-48248