Lucene search
+L

Arbitrary File Overwrite

🗓️ 28 Mar 2025 02:36:07Reported by Veracode Vulnerability DatabaseType 
veracode
 veracode
🔗 sca.analysiscenter.veracode.com👁 36 Views

H2O software has a vulnerability allowing Arbitrary File Overwrite due to inadequate export restrictions.

Related
Detection
Refs
ReporterTitlePublishedViews
Family
cnnvd
CNNVD
H2O security vulnerabilities
20 Mar 202500:00
–cnnvd
cve
CVE
CVE-2024-6854
20 Mar 202510:09
–cve
cvelist
Cvelist
CVE-2024-6854 Arbitrary File Overwrite in h2oai/h2o-3
20 Mar 202510:09
–cvelist
euvd
EUVD
EUVD-2025-6978
3 Oct 202520:07
–euvd
github
Github Security Blog
H2O Vulnerable to Arbitrary File Overwrite via File Export
20 Mar 202512:32
–github
gitlab
GitLab Advisory Database
H2O Vulnerable to Arbitrary File Overwrite via File Export
20 Mar 202500:00
–gitlab
nessus
Tenable Nessus
H2O-3 Arbitrary File Overwrite (CVE-2024-6854)
16 Dec 202400:00
–nessus
mend
Mend
CVE-2024-6854
20 Mar 202510:09
–mend
nvd
NVD
CVE-2024-6854
20 Mar 202510:15
–nvd
osv_cve
osv_cve
CVE-2024-6854
20 Mar 202510:15
–osv_cve
Rows per page
Vulners
Node
OR
h2o-coreh2o-coreRange3.32.1.1–3.46.0.6java
h2o-coreh2o-coreMatch3.32.1.1java
h2o-coreh2o-coreMatch3.32.1.2java
h2o-coreh2o-coreMatch3.32.1.3java
h2o-coreh2o-coreMatch3.32.1.4java
h2o-coreh2o-coreMatch3.32.1.5java
h2o-coreh2o-coreMatch3.32.1.6java
h2o-coreh2o-coreMatch3.32.1.7java
h2o-coreh2o-coreMatch3.34.0.1java
h2o-coreh2o-coreMatch3.34.0.3java
h2o-coreh2o-coreMatch3.34.0.4java
h2o-coreh2o-coreMatch3.34.0.5java
h2o-coreh2o-coreMatch3.34.0.6java
h2o-coreh2o-coreMatch3.34.0.7java
h2o-coreh2o-coreMatch3.34.0.8java
h2o-coreh2o-coreMatch3.35.0.2java
h2o-coreh2o-coreMatch3.36.0.1java
h2o-coreh2o-coreMatch3.36.0.2java
h2o-coreh2o-coreMatch3.36.0.3java
h2o-coreh2o-coreMatch3.36.0.4java
h2o-coreh2o-coreMatch3.36.1.1java
h2o-coreh2o-coreMatch3.36.1.2java
h2o-coreh2o-coreMatch3.36.1.3java
h2o-coreh2o-coreMatch3.36.1.4java
h2o-coreh2o-coreMatch3.36.1.5java
h2o-coreh2o-coreMatch3.38.0.1java
h2o-coreh2o-coreMatch3.38.0.2java
h2o-coreh2o-coreMatch3.38.0.3java
h2o-coreh2o-coreMatch3.38.0.4java
h2o-coreh2o-coreMatch3.40.0.1java
h2o-coreh2o-coreMatch3.40.0.2java
h2o-coreh2o-coreMatch3.40.0.3java
h2o-coreh2o-coreMatch3.40.0.4java
h2o-coreh2o-coreMatch3.42.0.1java
h2o-coreh2o-coreMatch3.42.0.2java
h2o-coreh2o-coreMatch3.42.0.3java
h2o-coreh2o-coreMatch3.42.0.4java
h2o-coreh2o-coreMatch3.44.0.1java
h2o-coreh2o-coreMatch3.44.0.2java
h2o-coreh2o-coreMatch3.44.0.3java
h2oh2oRange3.32.1.1–3.46.0.7java
h2oh2oMatch3.32.1.1java
h2oh2oMatch3.32.1.2java
h2oh2oMatch3.32.1.3java
h2oh2oMatch3.32.1.4java
h2oh2oMatch3.32.1.5java
h2oh2oMatch3.32.1.6java
h2oh2oMatch3.32.1.7java
h2oh2oMatch3.34.0.3java
h2oh2oMatch3.34.0.7java
h2oh2oMatch3.34.0.8java
h2oh2oMatch3.36.0.2java
h2oh2oMatch3.36.0.3java
h2oh2oMatch3.36.0.4java
h2oh2oMatch3.36.1.1java
h2oh2oMatch3.36.1.2java
h2oh2oMatch3.36.1.3java
h2oh2oMatch3.36.1.4java
h2oh2oMatch3.36.1.5java
h2oh2oMatch3.38.0.1java
h2oh2oMatch3.38.0.2java
h2oh2oMatch3.38.0.3java
h2oh2oMatch3.38.0.4java
h2oh2oMatch3.40.0.1java
h2oh2oMatch3.40.0.2java
h2oh2oMatch3.40.0.3java
h2oh2oMatch3.40.0.4java
h2oh2oMatch3.42.0.1java
h2oh2oMatch3.42.0.2java
h2oh2oMatch3.42.0.3java
h2oh2oMatch3.42.0.4java
h2oh2oMatch3.44.0.1java
h2oh2oMatch3.44.0.2java
h2oh2oMatch3.44.0.3java

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

13 Dec 2025 07:20Current
7.1High risk
Vulners AI Score7.1
CVSS 37.1
EPSS0.00776
SSVC
36