AUGUST 4, 2026
Live Feed
Back to database
Case File

CVE-2024-11071

HIGH · CVSS 8.8 EPSS 0.19%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2025-04-07 · Last synced 2026-08-04

CyberRota Analysis

This is a high severity vulnerability with a CVSS score of 8.8. It affects Java.

CVE
CVE-2024-11071
Severity
HIGH
CVSS
8.8
EPSS
0.19%
Java

Original NVD Description

Permissive Cross-domain Policy with Untrusted Domains vulnerability in local API server of DestinyECM solution(versions described below) which is developed and maintained by Cyberdigm may allow Cross-Site Request Forgery (CSRF) attack, which probabilistically enables JSON Hijacking (aka JavaScript Hijacking) via forgery web page.* Due to product customization, version information may differ from the following version description. For further inquiries, please contact the vendor.