VULNERABILITY INTELLIGENCE

CVE-2024-2448

CVSS score8.4 HIGH
EPSS probability55.42%
CISA KEVNot currently listed
Published2024-03-22
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:A/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H

Description

An OS command injection vulnerability has been identified in LoadMaster.  An authenticated UI user with any permission settings may be able to inject commands into a UI component using a shell command resulting in OS command injection.

Weakness classification

  • security@progress.com: CWE-78
  • nvd@nist.gov: CWE-78

Primary references