Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
osvGoogleOSV:CVE-2024-34580
HistoryJun 26, 2024 - 5:15 a.m.

CVE-2024-34580

2024-06-2605:15:00
Google
osv.dev
10
apache xml security
xml signature syntax
ssrf payload

CVSS3

8.2

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N

AI Score

7.2

Confidence

Low

EPSS

0.936

Percentile

99.2%

JSON

Apache XML Security for C++ through 2.0.4 implements the XML Signature Syntax and Processing (XMLDsig) specification without protection against an SSRF payload in a KeyInfo element. NOTE: the supplier disputes this CVE Record on the grounds that they are implementing the specification “correctly” and are not “at fault.”

Related

ubuntucve 1
cve 3
vulnrichment 3
debiancve 1
nvd 3
cvelist 3
hackread 1
nessus 6
cisa_kev 1
prion 1
hivepro 3
githubexploit 3
talosblog 1
nuclei 1
thn 10
malwarebytes 1
wizblog 1
zdt 1
metasploit 1
ics 1
attackerkb 1
rapid7blog 2
packetstorm 1
qualysblog 1
avleonov 1
ubuntucve
ubuntucve
CVE-2024-34580
2024-06-26 00:00:00
cve
cve
CVE-2024-34580
2024-06-26 05:15:51
CVE-2024-21893
2024-01-31 18:15:47
CVE-2024-34581
2024-06-26 05:15:51
vulnrichment
vulnrichment
CVE-2024-34580
2024-06-26 00:00:00
CVE-2024-21893
2024-01-31 17:51:35
CVE-2024-34581
2024-06-26 00:00:00
debiancve
debiancve
CVE-2024-34580
2024-06-26 05:15:51
nvd
nvd
CVE-2024-34580
2024-06-26 05:15:51
CVE-2024-21893
2024-01-31 18:15:47
CVE-2024-34581
2024-06-26 05:15:51
cvelist
cvelist
CVE-2024-34580
2024-06-26 00:00:00
CVE-2024-21893
2024-01-31 17:51:35
CVE-2024-34581
2024-06-26 00:00:00
hackread
hackread
Chained Exploits, Stolen VPN Access: Hackers Target Ivanti Users Despite Patches
2024-02-06 18:15:07
nessus
nessus
Ivanti Policy Secure 9.x / 22.x SSRF-RCE Chain (CVE-2024-21893)
2024-02-06 00:00:00
Ivanti Connect Secure 9.x / 22.x SSRF-RCE Chain (CVE-2024-21893)
2024-02-06 00:00:00
Ivanti Connect Secure 9.x / 22.x SSRF (CVE-2024-21893)
2024-02-06 00:00:00
cisa_kev
cisa_kev
Ivanti Connect Secure, Policy Secure, and Neurons Server-Side Request Forgery (SSRF) Vulnerability
2024-01-31 00:00:00
prion
prion
Server side request forgery (ssrf)
2024-01-31 18:15:00
hivepro
hivepro
Attacks, Vulnerabilities and Actors 29 January to 4 February 2024
2024-02-06 08:18:54
Ivanti Addresses Zero-Day Vulnerability Exploited in Attacks
2024-02-02 15:18:18
Ivanti Gateways Under Attack by Cybercriminals Patch Now
2024-03-01 15:08:13
githubexploit
githubexploit
Exploit for Server-Side Request Forgery in Ivanti Connect Secure
2024-02-02 22:59:21
Exploit for Command Injection in Ivanti Connect Secure
2024-02-03 11:33:40
Exploit for Improper Authentication in Ivanti Connect Secure
2024-01-19 02:12:11
talosblog
talosblog
Spyware isn’t going anywhere, and neither are its tactics
2024-02-08 19:00:53
nuclei
nuclei
Ivanti SAML - Server Side Request Forgery (SSRF)
2024-02-03 08:20:02
thn
thn
Chinese Hackers Exploiting Ivanti VPN Flaws to Deploy New Malware
2024-02-29 05:49:00
Researchers Identify Multiple China Hacker Groups Exploiting Ivanti Security Flaws
2024-04-05 07:15:00
Ivanti Vulnerability Exploited to Install 'DSLog' Backdoor on 670+ IT Infrastructures
2024-02-13 07:03:00
malwarebytes
malwarebytes
CISA: Disconnect vulnerable Ivanti products TODAY
2024-02-02 14:18:43
wizblog
wizblog
Critical Vulnerabilities in Ivanti Exploited in-the-Wild: everything you need to know
2024-02-06 16:06:48
zdt
zdt
Ivanti Connect Secure Unauthenticated Remote Code Execution Exploit
2024-02-21 00:00:00
metasploit
metasploit
Ivanti Connect Secure Unauthenticated Remote Code Execution
2024-02-06 11:49:04
ics
ics
Threat Actors Exploit Multiple Vulnerabilities in Ivanti Connect Secure and Policy Secure Gateways
2024-02-29 12:00:00
attackerkb
attackerkb
CVE-2024-21893
2024-01-31 00:00:00
rapid7blog
rapid7blog
Zero-Day Exploitation of Ivanti Connect Secure and Policy Secure Gateways
2024-01-11 13:00:40
Metasploit Weekly Wrap-Up 02/23/2024
2024-02-23 17:50:39
packetstorm
packetstorm
Ivanti Connect Secure Unauthenticated Remote Code Execution
2024-02-21 00:00:00
qualysblog
qualysblog
2024 Midyear Threat Landscape Review
2024-08-06 13:00:00
avleonov
avleonov
February 2024: Vulremi, Vuldetta, PT VM Course relaunch, PT TrendVulns digests, Ivanti, Fortinet, MSPT, Linux PW
2024-03-05 18:43:32

CVSS3

8.2

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N

AI Score

7.2

Confidence

Low

EPSS

0.936

Percentile

99.2%

JSON
Related for OSV:CVE-2024-34580
ubuntucve1cve3vulnrichment3debiancve1nvd3cvelist3hackread1nessus6cisa_kev1prion1hivepro3githubexploit3talosblog1nuclei1thn10malwarebytes1wizblog1zdt1metasploit1ics1attackerkb1rapid7blog2packetstorm1qualysblog1avleonov1