CVE-2024-34320

CVSS: 9.8v3.1CriticalReceived

Published 2026-10-13Last modified 2026-10-14

Open JSON

Vulnerability summary

Overall risk

70/100

0100

High · default modelHow is this calculated?

CVSS score

9.8/10

010

Critical · v3.1 (cve.org)

EPSS score

0.15%

0%100%

Low · Change unavailable

KEVNot listed0 of 3 catalogs

RansomwareNone recordedNo known use recorded

Public exploits0No public exploits recorded

Timeline

2026-10-13
PublishedVulnerability first disclosed.
2026-10-14
Last modifiedVulnerability information updated.

Description

ProPhoenix Law RMS v2022.2403.3.101 was discovered to contain an incorrect access control issue in sensitive API endpoints.

CVSS metrics

2 scores · 2 sources · 1 version

v3.19.8

EPSS trend

Probability

0.15%

Chance of exploitation in the next 30 days

Percentile

Versus all other CVEs

30-day change

Change unavailable

2026-10-142026-10-14

EPSS score

0.15%

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

0 found

No public exploits indexed.

Weaknesses

CWE · root cause

CWE-284Improper Access ControlThe product does not restrict or incorrectly restricts access to a resource from an unauthorized actor.

Affected systems

No affected systems are recorded for this record.

References

2 links