CVE-2024-45523

CriticalCVSS 9.1/10Last modified Jun 17, 2026

Description

An issue was discovered in Bravura Security Fabric versions 12.3.x before 12.3.5.32784, 12.4.x before 12.4.3.35110, 12.5.x before 12.5.2.35950, 12.6.x before 12.6.2.37183, and 12.7.x before 12.7.1.38241. An unauthenticated attacker can cause a resource leak by issuing multiple failed login attempts through API SOAP.

Metrics

CVSS 3.1 9.1/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H

Weakness enumeration

CWE-307

Affected software

No affected versions have been published.

Timeline

Published: Sep 18, 2024
Last modified: Jun 17, 2026
NVD status: Deferred

Related CVEs from 2024

CVE-2024-455265.3An issue was discovered in OPC Foundation OPCFoundation/UA-.NETStandard through 1.5.374.78. A remote attacker can send requests with invalid CVE-2024-455276.1REDCap 14.7.0 allows HTML injection via the project title of a New Project action. This can lead to resultant logout CSRF via index.php?logo CVE-2024-455285.4CodeAstro MembershipM-PHP (aka Membership Management System in PHP) 1.0 allows add_members.php fullname stored XSS.CVE-2024-45535.4The WP Shortcodes Plugin — Shortcodes Ultimate plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'su_member CVE-2024-455376.5Apache Druid allows users with certain permissions to read data from other database systems using JDBC. This functionality allows trusted us CVE-2024-455389.6Cross-Site Request Forgery (CSRF) vulnerability in WebAPI Framework in Synology DiskStation Manager (DSM) before 7.2.1-69057-2 and 7.2.2-728 CVE-2024-455397.5Out-of-bounds write vulnerability in cgi components in Synology DiskStation Manager (DSM) before 7.2.1-69057-2 and 7.2.2-72806 and Synology CVE-2024-45545.4Improper Input Validation vulnerability in OpenText NetIQ Access Manager leads to Cross-Site Scripting (XSS) attack. This issue affects Acce CVE-2024-455406.6Memory corruption while invoking IOCTL map buffer request from userspace.CVE-2024-455417.8Memory corruption when IOCTL call is invoked from user-space to read board data.CVE-2024-455427.8Memory corruption when IOCTL call is invoked from user-space to write board data to WLAN driver.CVE-2024-455436.6Memory corruption while accessing MSM channel map and mixer functions.