First day on Intigriti: our agent harness found and proved a remote code execution bug in Odoo's program.

CVE-2024-43469

HighCVSS 8.8/10Last modified Aug 10, 2026

Description

Azure CycleCloud Remote Code Execution Vulnerability

Metrics

CVSS 3.1 8.8/10CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

Affected software

Vendor	Product	Versions
Microsoft	Azure CycleCloud	>= 8.6.0, < 8.6.4
Microsoft	Azure CycleCloud	>= 8.6.3, < 8.6.4
Microsoft	Azure CycleCloud 8.0.0	>= 8.0.0, < 8.6.4
Microsoft	Azure CycleCloud 8.0.1	>= 8.0.0, < 8.6.4
Microsoft	Azure CycleCloud 8.0.2	>= 8.0.0, < 8.6.4
Microsoft	Azure CycleCloud 8.1.0	>= 8.1.0, < 8.6.4
Microsoft	Azure CycleCloud 8.1.1	>= 8.1.0, < 8.6.4
Microsoft	Azure CycleCloud 8.2.0	>= 8.2.0, < 8.6.4
Microsoft	Azure CycleCloud 8.2.1	>= 8.2.0, < 8.6.4
Microsoft	Azure CycleCloud 8.2.2	>= 8.2.0, < 8.6.4
Microsoft	Azure CycleCloud 8.3.0	>= 8.3.0, < 8.6.4
Microsoft	Azure CycleCloud 8.4.0	>= 8.4.0, < 8.6.4
Microsoft	Azure CycleCloud 8.4.1	>= 8.4.0, < 8.6.4
Microsoft	Azure CycleCloud 8.4.2	>= 8.4.0, < 8.6.4
Microsoft	Azure CycleCloud 8.5.0	>= 8.5.0, < 8.6.4
Microsoft	Azure CycleCloud 8.6.0	>= 8.6.0, < 8.6.4

References

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-43469Patch, Vendor Advisory

Timeline

Published: Sep 10, 2024
Last modified: Aug 10, 2026
NVD status: Analyzed

Related CVEs from 2024

CVE-2024-43477.2The WP Fastest Cache plugin for WordPress is vulnerable to Directory Traversal in all versions up to, and including, 1.2.6 via the specificD CVE-2024-434707.3Azure Network Watcher VM Agent Elevation of Privilege Vulnerability CVE-2024-434728.3Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability CVE-2024-434747.5Microsoft SQL Server Information Disclosure Vulnerability CVE-2024-434757.3Microsoft Windows Admin Center Information Disclosure Vulnerability CVE-2024-434765.4Microsoft Dynamics 365 (on-premises) Cross-site Scripting Vulnerability CVE-2024-434777.5Improper access control in Decentralized Identity Services resulted in a vulnerability that allows an unauthenticated attacker to disable Ve CVE-2024-434798.5Microsoft Power Automate Desktop Remote Code Execution Vulnerability CVE-2024-43484.3A vulnerability, which was classified as problematic, was found in osCommerce 4. Affected is an unknown function of the file /catalog/all-pr CVE-2024-434806.6Azure Service Fabric for Linux Remote Code Execution Vulnerability CVE-2024-434818.8Power BI Report Server Spoofing Vulnerability CVE-2024-434826.5Microsoft Outlook for iOS Information Disclosure Vulnerability

CVE-2024-43469: High severity, CVSS 8.8 | Vulnix