---
title: "Cleo: known exploited vulnerabilities"
url: https://erroneo.us/security/vendor/cleo/
description: "Every Cleo vulnerability in CISA's Known Exploited Vulnerabilities catalog since October 2023 (2), newest first, with due dates and fixes."
type: vendor
section: "Security Digest"
date_modified: 2024-12-17
publisher: erroneo.us
author: erroneo.us Security Desk
license: All rights reserved. Quote with attribution and a link.
---

# Cleo: known exploited vulnerabilities

- 2024-12-17 [CVE-2024-55956](https://erroneo.us/security/cve/CVE-2024-55956/index.md) Cleo Multiple Products: Cleo Multiple Products Unauthenticated File Upload Vulnerability (due 2025-01-07; ransomware: Known)
- 2024-12-13 [CVE-2024-50623](https://erroneo.us/security/cve/CVE-2024-50623/index.md) Cleo Multiple Products: Cleo Multiple Products Unrestricted File Upload Vulnerability (due 2025-01-03; ransomware: Known)

---
Source page: https://erroneo.us/security/vendor/cleo/ · Security Digest: https://erroneo.us/security/ · More: https://erroneo.us/llms.txt