Security Digest
Cleo: known exploited vulnerabilities
2 Cleo CVEs CISA has confirmed as exploited in the wild since October 2023. If you run these products, check each one.
| Added | CVE | Product and flaw | CISA due |
|---|---|---|---|
| 2024-12-17 | CVE-2024-55956 | Cleo Multiple Products Cleo Multiple Products Unauthenticated File Upload Vulnerability Ransomware | 2025-01-07 |
| 2024-12-13 | CVE-2024-50623 | Cleo Multiple Products Cleo Multiple Products Unrestricted File Upload Vulnerability Ransomware | 2025-01-03 |