CVE-2024-8689

6.0 mediumEPSS 0.2%

Medium (6.0). EPSS 0.2% chance of exploitation in the next 30 days.

A problem with the ActiveMQ integration for both Cortex XSOAR and Cortex XSIAM can result in the cleartext exposure of the configured ActiveMQ credentials in log bundles.

Severity

CVSS 4.0

6.0 medium

CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:P/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/AU:N/R:A/V:D/RE:M/U:Amber

EPSS: 0.2% chance of exploitation in the next 30 days; higher than 12% of CVEs (scores of 2026-10-31)
CWE: CWE-312
Published: 2024-09-11
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

References

https://security.paloaltonetworks.com/CVE-2024-8689

Check your stack JSON