CVE-2024-7654

MediumCVSS 6.1/10Last modified Jun 17, 2026

Description

An ActiveMQ Discovery service was reachable by default from an OpenEdge Management installation when an OEE/OEM auto-discovery feature was activated.  Unauthorized access to the discovery service's UDP port allowed content injection into parts of the OEM web interface making it possible for other types of attack that could spoof or deceive web interface users.   Unauthorized use of the OEE/OEM discovery service was remediated by deactivating the discovery service by default.

Metrics

CVSS 3.1 6.1/10CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Weakness enumeration

CWE-79

Affected software

No affected versions have been published.

Timeline

Published
Sep 3, 2024
Last modified
Jun 17, 2026
NVD status
Analyzed

Related CVEs from 2024

CVE-2024-76554.8The Community by PeepSo – Social Network, Membership, Registration, User Profiles plugin for WordPress is vulnerable to Stored Cross-Site ScCVE-2024-76568.8The Image Hotspot by DevVN plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 1.2.5 via deseriCVE-2024-76575.4A vulnerability classified as problematic was found in Gila CMS 1.10.9. This vulnerability affects unknown code of the file /cm/update_rows/CVE-2024-76585.3A vulnerability, which was classified as problematic, has been found in projectsend up to r1605. This issue affects the function get_previewCVE-2024-76597.5A vulnerability, which was classified as problematic, was found in projectsend up to r1605. Affected is the function generate_random_string CVE-2024-76606.1A vulnerability has been found in SourceCodester File Manager App 1.0 and classified as problematic. Affected by this vulnerability is an unCVE-2024-76618.8A vulnerability was found in SourceCodester Car Driving School Management System 1.0. It has been classified as problematic. This affects thCVE-2024-76626.5A vulnerability was found in SourceCodester Car Driving School Management System 1.0. It has been declared as problematic. This vulnerabilitCVE-2024-76635.3A vulnerability was found in SourceCodester Car Driving School Management System 1.0. It has been rated as critical. This issue affects someCVE-2024-76644.3A vulnerability classified as critical has been found in SourceCodester Car Driving School Management System 1.0. Affected is an unknown funCVE-2024-76654.3A vulnerability classified as critical was found in SourceCodester Car Driving School Management System 1.0. Affected by this vulnerability CVE-2024-76665.3A vulnerability, which was classified as critical, has been found in SourceCodester Car Driving School Management System 1.0. Affected by th