CVE-2024-6911

Files on the Windows system are accessible without authentication to external parties due to a local file inclusion in PerkinElmer ProcessPlus.This issue affects ProcessPlus: through 1.11.6507.0.

Scoring

Severity

HIGH

CVSS base score

8.7

CVSS vector

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N

EPSS probability

4.94%

CWE

CWE-552

Published

2024-07-22

Last modified

2026-03-13

Affected products

• PerkinElmer ProcessPlus

Weakness type

• CWE-552

Related vulnerabilities

• CVE-2023-50164 — Apache Struts: File upload component had a directory traversal vulnerability
• CVE-2024-6209 — unauthorized file access
• CVE-2025-34110 — ColoradoFTP Server <= 1.3 Build 8 Path Traversal Information Disclosure
• CVE-2025-68109 — ChurchCRM vulnerable to RCE with database restore functionality
• CVE-2023-2766 — Weaver OA jx2_config.ini file access
• CVE-2009-10005 — ContentKeeper Web Appliance < 125.10 Arbitrary File Access via mimencode
• CVE-2023-48710 — iTop limit pages/exec.php script to PHP files
• CVE-2020-37082 — webERP 4.15.1 - Unauthenticated Backup File Access

Markdown version · Browse all CVEs