VULNERABILITY INTELLIGENCE

CVE-2024-57968

CVSS score9.9 CRITICAL

EPSS probability32.28%

CISA KEVKnown exploited vulnerability

Published2025-02-03

Last modified2026-06-17

CVSS vectorCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

Known Exploited Vulnerability

Advantive VeraCore Unrestricted File Upload Vulnerability

Vendor / product: Advantive / VeraCore

Description

Advantive VeraCore before 2024.4.2.1 allows remote authenticated users to upload files to unintended folders (e.g., ones that are accessible during web browsing by other users). upload.aspx can be used for this.

Weakness classification

cve@mitre.org: CWE-434
nvd@nist.gov: CWE-434

Primary references

cve@mitre.org — Permissions Required, Product, Release Notes
cve@mitre.org — Exploit, Technical Description, Third Party Advisory
cve@mitre.org — Exploit, Technical Description, Third Party Advisory
134c704f-9b21-4f2e-91b3-4a467353bcc0 — US Government Resource