cleo
Security Risk Profile
99
/100
criticalSecurity Risk Score
Comprehensive risk assessment based on 8 vulnerabilities, EPSS scores, exploitation status, and remediation availability.
📅 Data spans from June 18, 2021 to present
8
Total CVEs
3
Critical+High
5
Exploited
3
Unpatched
Threat Assessment
Avg CVSS
8.7
Base severity
Avg EPSS
0%
Exploit probability
Unpatched
3
Critical/High
Risk Level
99/100
critical
⚠️ 5 Active Exploits⚡ 6 Zero-Days
Severity Distribution
Critical
3High
0Medium
1Low
0Exploit Likelihood
>50% chance
020-50%
05-20%
0<5%
0Age Distribution
Common Weaknesses (CWE)
1
Command Injection
1
2
Malicious File Upload
1
3
Path Traversal
1
Most Affected Products
1. Cleo Harmony4
2. Cleo LexiCom3
3. Cleo Multiple Products2
4. Cleo Lexicom2
5. Cleo Vltrader2
Recent Vulnerabilities
See more →https://www.bleepingcomputer.com/news/security/ascension-discloses-new-data-breach-after-third-party-hacking-incident/
unknown
Ascension discloses new data breach after third-party hacking incident
4/30/2025⚡ Zero-Day🔧 No Patch
https://www.bleepingcomputer.com/news/security/retail-giant-sams-club-investigates-clop-ransomware-breach-claims/
unknown
Retail giant Sam’s Club investigates Clop ransomware breach claims
3/28/2025⚠ Exploited⚡ Zero-Day🔧 No Patch
https://www.bleepingcomputer.com/news/security/western-alliance-bank-notifies-21-899-customers-of-data-breach/
unknown
Western Alliance Bank notifies 21,899 customers of data breach
3/18/2025⚠ Exploited⚡ Zero-Day🔧 No Patch
https://www.theregister.com/2025/02/28/cisa_kev_list_ransomware/
unknown
CISA's KEV list informs ransomware attacks, paper suggests
2/28/2025⚠ Exploited⚡ Zero-Day🔧 No Patch
CVE-2024-55956
CVSS 9.8critical
Cleo Multiple Products Unauthenticated File Upload Vulnerability
12/13/2024⚠ Exploited⚡ Zero-Day🔧 No Patch
CVE-2024-50623
CVSS 9.8critical
Cleo Multiple Products Unrestricted File Upload Vulnerability
10/27/2024⚠ Exploited⚡ Zero-Day🔧 No Patch
CVE-2021-33577
CVSS 5.3medium
6/18/2021🔧 No Patch
CVE-2021-33576
CVSS 9.8critical
6/18/2021🔧 No Patch
Monitor cleo in Real-Time
Get instant alerts when new vulnerabilities are discovered. Stay ahead of security threats with SecAlerts.