Critical severity9.8NVD Advisory· Published Dec 9, 2024· Updated Apr 15, 2026

CVE-2024-48956

Description

Serviceware Processes 6.0 through 7.3 before 7.4 allows attackers without valid authentication to send a specially crafted HTTP request to a service endpoint resulting in remote code execution.

Patches

No patches discovered yet.

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

security.serviceware-se.com/CVE-2024-48956/nvd
serviceware-se.com/platform/serviceware-processesnvd

News mentions

No linked articles in our index yet.

cvss	0.637
epss	0.009
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000