Cleo Lexicom — known CVE vulnerabilities

Every CVE whose affected-product data names Cleo Lexicom, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (4)

• CVE-2021-33576 — CVSS 9.8 (critical): An issue was discovered in Cleo LexiCom 5.5.0.0. Within the AS2 message, the sender can specify a filename. This filename can include…
• CVE-2024-50623 — CVSS 9.8 (critical) — actively exploited: In Cleo Harmony before 5.8.0.21, VLTrader before 5.8.0.21, and LexiCom before 5.8.0.21, there is an unrestricted file upload and download…
• CVE-2024-55956 — CVSS 9.8 (critical) — actively exploited: In Cleo Harmony before 5.8.0.24, VLTrader before 5.8.0.24, and LexiCom before 5.8.0.24, an unauthenticated user can import and execute…
• CVE-2021-33577 — CVSS 5.3 (medium): An issue was discovered in Cleo LexiCom 5.5.0.0. The requirement for the sender of an AS2 message to identify themselves (via encryption…