netVigilance Vulnerability intelligence since 2004

Cleo

2 Cleo vulnerabilities with confirmed exploitation in the wild, as published by CISA; 2 past the federal remediation deadline. This is a static slice of the catalog — open the full catalog for search and filters.

Known exploited vulnerabilities for Cleo
Vulnerability Status
overdue 611d2025-01-07 CVE-2024-55956 Cleo / Multiple Products Cleo Multiple Products Unauthenticated File Upload Vulnerability 2024-12-17 9.8 past dueransomware
overdue 615d2025-01-03 CVE-2024-50623 Cleo / Multiple Products Cleo Multiple Products Unrestricted File Upload Vulnerability 2024-12-13 9.8 past dueransomware