Lucene search

CVE-2024-6784 SSRF Server Side Request Forgery

🗓️ 05 Dec 2024 12:28:25Reported by ABBType

SSRF vulnerabilities found in ABB ASPECT, NEXUS and MATRIX potentially expose unauthorized resources.

Reporter	Title	Published	Views	Family All 4
Cvelist	CVE-2024-6784 SSRF Server Side Request Forgery	5 Dec 202412:25	–	cvelist
Zero Science Lab	ABB Cylon Aspect 3.08.02 (API/Servlets) Server-Side Request Forgery (SSRF)	11 Dec 202400:00	–	zeroscience
NVD	CVE-2024-6784	5 Dec 202413:15	–	nvd
CVE	CVE-2024-6784	5 Dec 202413:15	–	cve

[
  {
    "cpes": [
      "cpe:2.3:a:abb:aspect_enterprise:*:*:*:*:*:*:*:*"
    ],
    "vendor": "abb",
    "product": "aspect_enterprise",
    "versions": [
      {
        "status": "affected",
        "version": "0",
        "versionType": "custom",
        "lessThanOrEqual": "3.08.01"
      }
    ],
    "defaultStatus": "unknown"
  },
  {
    "cpes": [
      "cpe:2.3:a:abb:nexus_series:*:*:*:*:*:*:*:*"
    ],
    "vendor": "abb",
    "product": "nexus_series",
    "versions": [
      {
        "status": "affected",
        "version": "0",
        "versionType": "custom",
        "lessThanOrEqual": "3.08.01"
      }
    ],
    "defaultStatus": "unknown"
  },
  {
    "cpes": [
      "cpe:2.3:a:abb:matrix_series:*:*:*:*:*:*:*:*"
    ],
    "vendor": "abb",
    "product": "matrix_series",
    "versions": [
      {
        "status": "affected",
        "version": "0",
        "versionType": "custom",
        "lessThanOrEqual": "3.08.01"
      }
    ],
    "defaultStatus": "unknown"
  }
]

Source	Link
search	www.search.abb.com/library/Download.aspx

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

05 Dec 2024 12:25Current

7High risk

Vulners AI Score7

CVSS39.9

CVSS48.7

EPSS0.0004

SSVC

CWE-918