CVE-2024-38447: Ncia Advisor Network

High severity, CVSS 8.1. EPSS: 0.4% chance of exploitation in the next 30 days.

NATO NCI ANET 3.4.1 allows Insecure Direct Object Reference via a modified ID field in a request for a private draft report (that belongs to an arbitrary user).

Affected products

• Ncia Advisor Network: version 3.4.1 only

Published 2024-07-17. Last modified 2026-06-17.