cleo vulnerabilities

3 published CVEs name cleo among the affected products.

All 3 in the list Atom feed of new CVEs

Published CVEs: 3
Last 12 months: 2
Critical: 0
Known exploited: 0

Critical 0High 0Medium 3Low 0Not scored 0

CVEs per yearBy the year they were published

20221
20262

Newest CVEs

CVE-2026-84115
Cleo Harmony JWT Refresh Token connections privileges management
Cleo · Harmony
Medium6.9
CVE-2026-84114
Cleo Harmony SAML Authentication LocalUserUtil.getNativeUserByAssertions improper authentication
Cleo · Harmony
Medium5.3
CVE-2022-42966
Exponential ReDoS in cleo leads to denial of service
cleo · cleo
Medium5.9

Products with the most CVEs

Most common weaknesses