Network, Email and IPS

CVE-2024-5731: A vulnerability in the IPS Manager, Central Manager, and Local Manager communication workflow allows an att…

A vulnerability in the IPS Manager, Central Manager, and Local Manager communication workflow allows an attacker to control the destination of a request by manipulating the parameter, thereby leveraging sensitive information.

Published

ExploitedNot in CISA KEV
Ransomware useNot reportedPer CISA
SeverityMEDIUMCVSS 3.1 6.8
EPSS0.27%Chance of exploitation in 30 days
Public exploitNot tracked
FixSee advisory

Automatic summary from the vendor's CVE record. We haven't written a full analysis of this vulnerability yet.

Affected and fixed versions

Product / branchFixed in
Intrusion Prevention System (IPS) Manager Prior to 11.1See the advisory

Always confirm against the vendor advisory, which lists every fixed hotfix.

What it is

A vulnerability in the IPS Manager, Central Manager, and Local Manager communication workflow allows an attacker to control the destination of a request by manipulating the parameter, thereby leveraging sensitive information.

Sources

KEV status, EPSS score and vendor data refreshed automatically, last on 13 Oct 2026.

Get alerts

A notification when we publish a new analysis or a covered vendor gets a new actively exploited CVE. No account, no email.