CVE-2024-9984

9.8 criticalEPSS 0.6%

Enterprise Cloud Database from Ragic does not authenticate access to specific functionality, allowing unauthenticated remote attackers to use this functionality to obtain any user's session cookie.

Severity

CVSS 3.1

9.8 critical

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS: 0.6% chance of exploitation in the next 30 days; higher than 47% of CVEs (scores of 2026-10-31)
CWE: CWE-306
Published: 2024-10-15
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

ragic:enterprise_cloud_database

References

https://www.twcert.org.tw/en/cp-139-8151-1a4b5-2.html
https://www.twcert.org.tw/tw/cp-132-8150-c955a-1.html

Check your stack JSON