Lucene search
HistoryMay 01, 2024 - 1:15 p.m.
CVE-2024-31412
cx-programmer
information disclosure
cx-one cxone-al[][]d-v4
vulnerability
project file
crash
CVSS3
7.8
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
AI Score
6.1
Confidence
Low
EPSS
0
Percentile
9.0%
Out-of-bounds read vulnerability exists in CX-Programmer included in CX-One CXONE-AL[][]D-V4 Ver. 9.81 or lower. Opening a specially crafted project file may lead to information disclosure and/or the product being crashed.
Related
cve
cve
CVE-2024-31412
2024-05-01 13:15:52
vulnrichment
vulnrichment
CVE-2024-31412
2024-05-01 12:52:13
cvelist
cvelist
CVE-2024-31412
2024-05-01 12:52:13
CVSS3
7.8
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
AI Score
6.1
Confidence
Low
EPSS
0
Percentile
9.0%
Related for NVD:CVE-2024-31412