CVE-2024-37999

HighCVSS 7.8/10Last modified Jun 17, 2026

Description

A vulnerability has been identified in Medicalis Workflow Orchestrator (All versions). The affected application executes as a trusted account with high privileges and network access. This could allow an authenticated local attacker to escalate privileges.

Metrics

CVSS 3.1 7.8/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-282

Affected software

No affected versions have been published.

Timeline

Published
Jul 8, 2024
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2024

CVE-2024-38006.1Sites managed in S@M CMS (Concept Intermedia) might be vulnerable to Reflected XSS via including scripts in requested file names.  Only a paCVE-2024-380028.8The workflow component in Liferay Portal 7.3.2 through 7.4.3.111, and Liferay DXP 2023.Q4.0 through 2023.Q4.5, 2023.Q3.1 through 2023.Q3.8, CVE-2024-38016.1Sites managed in S@M CMS (Concept Intermedia) might be vulnerable to Reflected XSS via including scripts in one of GET header parameters.  OCVE-2024-380108.0Secure Boot Security Feature Bypass VulnerabilityCVE-2024-380118.0Secure Boot Security Feature Bypass VulnerabilityCVE-2024-380136.7Microsoft Windows Server Backup Elevation of Privilege VulnerabilityCVE-2024-380147.8Windows Installer Elevation of Privilege VulnerabilityCVE-2024-380157.5Windows Remote Desktop Gateway (RD Gateway) Denial of Service VulnerabilityCVE-2024-380167.8Microsoft Office Visio Remote Code Execution VulnerabilityCVE-2024-380175.5Microsoft Message Queuing Information Disclosure VulnerabilityCVE-2024-380188.8Microsoft SharePoint Server Remote Code Execution VulnerabilityCVE-2024-380197.2Microsoft Windows Performance Data Helper Library Remote Code Execution Vulnerability
CVE-2024-37999: High severity, CVSS 7.8 | Vulnix