CVE-2024-46624: Infodom Performa 365

High severity, CVSS 8.8. EPSS: 0.4% chance of exploitation in the next 30 days.

An issue in InfoDom Performa 365 v4.0.1 allows authenticated attackers to elevate their privileges to Administrator via a crafted payload sent to /api/users.

Affected products

• Infodom Performa 365: version 4.0.1 only

Published 2024-12-03. Last modified 2026-06-17.