Skip to content
OpenAdvisories
High ICSA-24-319-13 1 CVE

Rockwell Automation Verve Reporting (Update A)

Published Nov 14, 2024 · Updated Nov 18, 2024 · Revision 2

Vendor: Rockwell Automation Product: Verve Reporting

Summary

Successful exploitation of this vulnerability could lead to arbitrary code execution.

Vulnerabilities 1

  • Critical 9.1
    CVE-2024-37287

    Kibana arbitrary code execution via prototype pollution

    A flaw allowing arbitrary code execution was discovered in Kibana. An attacker with access to ML and Alerting connector features, as well as write access to internal ML indices can trigger a prototype pollution vulnerability, ultimately leading to arbitrary c…

    Elastic Kibana

Revision history

  1. #2

    Update A - Corrected affected product name and version range

  2. #1

    Initial Publication

References