What’s Vulnerable › Vulnerabilities

CVE-2024-13804

• Severity: critical (CVSS 9.8 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.5% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2025-03-30 · updated 2026-06-17
• Weakness: CWE-287

Description

Unauthenticated RCE in HPE Insight Cluster Management Utility

Affected products

• Hewlett Packard Enterprise HPE Insight Cluster Management Utility (CMU): 8.2

References

• https://red.0xbad53c.com/vulnerability-research/rce-in-hpe-insight-cluster-management-utility-cve-2024-13804
• https://red.0xbad53c.com/vulnerability-research/rce-in-hpe-insight-cluster-management-utility-cve-2024-13804

Get alerted when CVE-2024-13804 or the next vulnerability affects your stack