CVE-2024-6060

9.3 criticalEPSS 0.2%

Critical (9.3). EPSS 0.2% chance of exploitation in the next 30 days.

An information disclosure vulnerability in Phloc Webscopes 7.0.0 allows local attackers with access to the log files to view logged HTTP requests that contain user passwords or other sensitive information.

Severity

CVSS 4.0

9.3 critical

CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:L/SC:H/SI:H/SA:L/AU:N/R:U/V:C/RE:M/U:Red

EPSS: 0.2% chance of exploitation in the next 30 days; higher than 7% of CVEs (scores of 2026-10-31)
CWE: CWE-532
Published: 2024-06-25
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

References

https://www.sonatype.com/security-advisories/cve-2024-6060
https://sites.google.com/sonatype.com/vulnerabilities/cve-2024-6060

Check your stack JSON