Get a demo
100% Signal 0% Noise Invicti Logo - The Largest Dynamic Application Security Solutions Provider In The World Get a demo
Web Application Vulnerabilities Runtime SCA Findings
Looking for the vulnerability index of Invicti's legacy products?
Invicti Enterprise Acunetix Standard & Premium
Cleo Harmony/VLTrader/LexiCom RCE (CVE-2024-50623, CVE-2024-55956) - Vulnerability Database

Cleo Harmony/VLTrader/LexiCom RCE (CVE-2024-50623, CVE-2024-55956)

Description

Cleo Harmony, VLTrader, and LexiCom contain arbitrary file read/write vulnerabilities that leads to remote code execution. Successful exploitation of the vulnerability can result in takeover of the server.

Remediation

Upgrade to the latest version of Cleo software

References

Cleo Product Security Update - CVE-2024-55956
Cleo Product Security Advisory - CVE-2024-50623
Cleo Harmony, VLTrader, and LexiCom - RCE via Arbitrary File Write (CVE-2024-50623)
Technical Analysis CVE-2024-55956

Related Vulnerabilities

Vite Arbitrary File Read (CVE-2025-30208, CVE-2025-31125) High
Common tags: Arbitrary File Read Known Vulnerabilities
Sitecore Arbitrary File Read (CVE-2024-46938) High
Common tags: Arbitrary File Read Known Vulnerabilities
Jboss EAP Uncontrolled Resource Consumption Vulnerability (CVE-2020-14340) Medium
Common tags: Known Vulnerabilities
Atlassian Jira Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2020-14181) Medium
Common tags: Known Vulnerabilities
Atlassian Jira Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2020-14184) Medium
Common tags: Known Vulnerabilities

Severity

Critical

Classification

CVE-2024-50623
CVE-2024-55956
CWE-434
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:L/SI:L/SA:L

Tags

Arbitrary File Read
Arbitrary File Write
Known Vulnerabilities