AUGUST 4, 2026
Live Feed
Back to database
Case File

CVE-2024-12700

HIGH · CVSS 8.8 EPSS 0.57%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2024-12-19 · Last synced 2026-08-04

CyberRota Analysis

This is a high severity vulnerability with a CVSS score of 8.8. Exploitation may require the attacker to be authenticated.

CVE
CVE-2024-12700
Severity
HIGH
CVSS
8.8
EPSS
0.57%

Original NVD Description

There is an unrestricted file upload vulnerability where it is possible for an authenticated user (low privileged) to upload an jsp shell and execute code with the privileges of user running the web server.