CVE-2024-51162

8.8 highEPSS 0.6%

High (8.8). EPSS 0.6% chance of exploitation in the next 30 days.

An issue in Audimex EE versions 15.1.20 and earlier allowing a remote attacker to escalate privileges. Analyzing the offline client code, it was identified that it is possible for any user (with any privilege) of Audimex to dump the whole Audimex database. This gives visibility upon password hashes of any user, ongoing audit data and more.

Severity

CVSS 3.1

8.8 high

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

EPSS: 0.6% chance of exploitation in the next 30 days; higher than 48% of CVEs (scores of 2026-10-31)
CWE: CWE-276
Published: 2024-11-20
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

References

https://en.web-audimex.com/ee-auditmanagement
https://github.com/Cameleon037/CVEs/blob/main/CVE-2024-51162/README.md
https://github.com/Henkel-CyberVM/CVEs/tree/main/CVE-2024-51162

Check your stack JSON