VulnRadar

Data against noise.

Page generated: 09 Nov 2026, 09:51 UTC

CVE-2024-57968

PetitPotam

Advantive VeraCore before 2024.4.2.1 allows remote authenticated users to upload files to unintended folders (e.g., ones that are accessible during web browsing by other users). upload.aspx can be used for this.

CVSS 9.9 (CRITICAL) KEV: KNOWN CATALOG

Attention and evidence

HYPE SCORE

0.0/10

REALITY · THREAT PRIORITY

8.6/10

General review priority; not probability

Evidence confidence: Exploitation recorded

Why this priority?

Recorded exploitation baseline: +7.00
Technical severity: CVSS 9.9: +1.49
Fresh EPSS: 32.28%: +0.16

General review priority, not probability, victim count or asset-specific risk. A range covers missing CVSS/EPSS inputs within the current evidence state.

Sources: 29 documents and public datasets.

Hype components

Headline sample (25%)

0/100

Press, 30 days (60%)

0/100

Grounded branding (15%)

0/100

HYPE TOTAL0/100

Sources and documents

The Hacker News

Press · 11 Mar 2025, 07:00 · CISA Adds Five Actively Exploited Vulnerabilities in Advantive VeraCore and Ivanti EPM to KEV List - The Hacker News

Cybersecurity Dive

Press · 11 Feb 2025, 08:00 · VeraCore zero-day vulnerabilities exploited in supply chain attacks - Cybersecurity Dive

The Hacker News

Press · 10 Feb 2025, 08:00 · XE Hacker Group Exploits VeraCore Zero-Day to Deploy Persistent Web Shells - The Hacker News

Help Net Security

Press · 05 Feb 2025, 08:00 · Cybercrime gang exploited VeraCore zero-day vulnerabilities for years (CVE-2025-25181, CVE-2024-57968) - Help Net Security

SOC Prime

Press · 24 Oct 2024, 07:00 · “Rogue RDP” Attack Detection: UAC-0215 Leverages RDP Configuration Files to Gain Remote Access to Ukrainian Public Sector Computers - SOC Prime

See all 29 source documents

Artnet

Press · 15 Jun 2024, 08:12 · Christine Chagnoux - Artnet

SOC Prime

Press · 08 Feb 2024, 08:00 · SOC Prime Platform Now Supports the MITRE ATT&CK® Framework v14.1 - SOC Prime

SOC Prime

Press · 12 Jul 2023, 07:00 · Storm-0978 Attacks Detection: russia-linked Hackers Exploit CVE-2023-36884 to Spread a Backdoor Targeting Defense and Public Sector Organizations - SOC Prime

Arctic Wolf

Press · 23 Jul 2022, 01:19 · Windows Local Security Authority (LSA) Spoofing Vulnerability "PetitPotam" - Arctic Wolf

BleepingComputer

Press · 10 May 2022, 07:00 · Microsoft fixes new NTLM relay zero-day in all Windows versions - BleepingComputer

SOC Prime

Press · 08 Apr 2022, 07:00 · Detect Mars Stealer Cryptojacking Malware - SOC Prime

Rapid7

Press · 11 Feb 2022, 08:00 · Metasploit Wrap-Up: Feb. 11, 2022 - Rapid7

SOC Prime

Press · 27 Jan 2022, 08:00 · Detect CVE-2021-4034: A Notorious PwnKit Vulnerability Affecting All Major Linux Distros - SOC Prime

csoonline.com

Press · 09 Sep 2021, 07:00 · NTLM relay attacks explained, and why PetitPotam is the most dangerous - csoonline.com

Sophos

Press · 25 Aug 2021, 07:00 · How PetitPotam hijacks the Windows API, and what you can do about it - Sophos

SECURITY.COM

Press · 20 Aug 2021, 07:00 · LockFile: Ransomware Uses PetitPotam Exploit to Compromise Windows Domain Controllers - SECURITY.COM

BleepingComputer

Press · 20 Aug 2021, 07:00 · LockFile ransomware uses PetitPotam attack to hijack Windows domains - BleepingComputer

BleepingComputer

Press · 19 Aug 2021, 07:00 · New unofficial Windows patch fixes more PetitPotam attack vectors - BleepingComputer

Redmondmag.com

Press · 18 Aug 2021, 07:00 · PetitPotam NTLM Relay Attacks Flagged by Microsoft Defender for Identity - Redmondmag.com

BleepingComputer

Press · 10 Aug 2021, 07:00 · Windows security update blocks PetitPotam NTLM relay attacks - BleepingComputer

MSSP Alert

Press · 04 Aug 2021, 07:00 · Microsoft Workaround Mitigates PetitPotam NTLM Relay Attacks - - MSSP Alert

BornCity

Press · 03 Aug 2021, 07:00 · PetitPotam attacks on Windows blocked by RPC filters - BornCity

Rapid7

Press · 03 Aug 2021, 07:00 · PetitPotam Attack Chain Can Compromise Windows Domains Running AD CS - Rapid7

BleepingComputer

Press · 02 Aug 2021, 07:00 · Windows PetitPotam attacks can be blocked using new method - BleepingComputer

Malwarebytes

Press · 29 Jul 2021, 07:00 · Microsoft provides more mitigation instructions for the PetitPotam attack - Malwarebytes

SOC Prime

Press · 28 Jul 2021, 07:00 · PetitPotam NTLM Relay Attack Detection - SOC Prime

BleepingComputer

Press · 24 Jul 2021, 07:00 · Microsoft shares mitigations for new PetitPotam NTLM relay attack - BleepingComputer

SOC Prime

Press · 23 Jul 2020, 07:00 · CVE-2020-3452: Unauthenticated File Read in Cisco ASA & Cisco Firepower Detection - SOC Prime

SOC Prime

Press · 02 Jul 2020, 07:00 · Detection Content: Ransom X Behavior - SOC Prime

Score evolution

● Hype ● Reality

Earlier evidence-support scores are retained in history; this chart shows only the current priority definition.

First record: hype 0.0 · reality 8.6 (2026-11-02 15:13). The curve appears once the score changes.

Public exploit evidence

Public exploit entries / repo candidates

Evidence context and dated references

Reality is general threat/review priority, combining observed exploitation, CVSS severity and fresh EPSS. Evidence confidence is separate. This is not calibrated risk, a victim count or an asset-specific assessment. A range reflects missing numeric inputs.

Evidence in context

Confidence in exploitation evidence: Exploitation recorded
Priority basis: Recorded exploitation; CVSS 9.9; EPSS 32.3%
Attention, last 30 days: 0 distinct story titles; 0 press documents; 0 publisher domains.
Technical potential: network access, low privileges, no user interaction.
Observed activity: Exploitation recorded in CISA KEV.
Known scale: Not quantified.
Evidence confidence basis: Trusted exploitation confirmation

Score evaluated: 2026-11-05 13:59:23.191610+00:00 · EPSS snapshot: 2026-11-05T12:03:04Z

Source event timeline

First press mention

02 Jul 2020, 07:00

Published

03 Feb 2025, 00:00

Added to the CISA KEV catalog

10 Mar 2025, 00:00

Latest press mention

11 Mar 2025, 07:00

Score calculated

05 Nov 2026, 13:59

Name

PetitPotam