{"metadata": {"vulnerability": "CVE-2024-7396", "count": 19, "kinds": {"milestone": 4, "sighting": 6, "kev": 0, "other": 9}}, "data": [{"timestamp": "2024-08-01T21:46:35.555Z", "date_only": false, "value": "2024-08-01T21:46:35.555Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2024-7396", "field": "cveMetadata.dateReserved"}, {"timestamp": "2024-08-05T13:20:57.997Z", "date_only": false, "value": "2024-08-05T13:20:57.997Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2024-7396", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2024-08-05T13:20:57.997Z", "date_only": false, "value": "2024-08-05T13:20:57.997Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CyberDanube", "record": "CVE-2024-7396", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2024-08-05T14:15:35Z", "date_only": false, "value": "2024-08-05T14:15:35Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-JJHP-92WF-MGRG", "record": "GHSA-JJHP-92WF-MGRG", "field": "database_specific.nvd_published_at", "linked_record": true}, {"timestamp": "2024-08-05T14:15:35.603Z", "date_only": false, "value": "2024-08-05T14:15:35.603", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2024-7396", "record": "FKIE_CVE-2024-7396", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2024-08-05T15:30:52Z", "date_only": false, "value": "2024-08-05T15:30:52Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-JJHP-92WF-MGRG", "record": "GHSA-JJHP-92WF-MGRG", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2024-08-05T17:15:07Z", "date_only": false, "value": "2024-08-05T17:15:07.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/cvedetector/2449", "record": "CVE-2024-7396", "field": "creation_timestamp", "uuid": "52b08c5a-4f20-42b7-a98a-6e50e7aef54e", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-7396 - Korenix JetPort 5601v3 Sensitive Data Eavesdropping\", \n  \"Content\": \"CVE ID : CVE-2024-7396 \nPublished : Aug. 5, 2024, 2:15 p.m. | 42\u00a0minutes ago \nDescription : Missing encryption of sensitive data in Korenix JetPort 5601v3 allows Eavesdropping.This issue affects JetPort 5601v3: through 1.2. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"05 Aug 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "url": "https://t.me/cvedetector/2449"}, {"timestamp": "2024-08-07T05:34:10Z", "date_only": false, "value": "2024-08-07T05:34:10.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/HackerArsenal/123", "record": "CVE-2024-7396", "field": "creation_timestamp", "uuid": "214d8343-2b90-40a3-b7c0-4ab729b66d11", "content": "#exploit\n1. CVE-2024-39877:\nApache Airflow Arbitrary Code Execution\nhttps://blog.securelayer7.net/arbitrary-code-execution-in-apache-airflow\n\n2. CVE-2024-7395,\nCVE-2024-7396,\nCVE-2024-7397:\nInsufficient Authentication, Plaintext Communication, Unauthenticated CI\u00a0in Korenix JetPort\nhttps://cyberdanube.com/en/en-multiple-vulnerabilities-in-korenix-jetport/index.html\n\n3. CVE-2024-38094,\nCVE-2024-38023,\nCVE-2024-38024:\nMS SharePoint RCEs\nhttps://github.com/testanull/MS-SharePoint-July-Patch-RCE-PoC", "url": "https://t.me/HackerArsenal/123", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2024-08-07T05:34:27Z", "date_only": false, "value": "2024-08-07T05:34:27.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/Kelvinseccommunity/706", "record": "CVE-2024-7396", "field": "creation_timestamp", "uuid": "edac0123-81b3-4a88-918e-83ecc99ac579", "content": "#exploit\n1. CVE-2024-39877:\nApache Airflow Arbitrary Code Execution\nhttps://blog.securelayer7.net/arbitrary-code-execution-in-apache-airflow\n\n2. CVE-2024-7395,\nCVE-2024-7396,\nCVE-2024-7397:\nInsufficient Authentication, Plaintext Communication, Unauthenticated CI\u00a0in Korenix JetPort\nhttps://cyberdanube.com/en/en-multiple-vulnerabilities-in-korenix-jetport/index.html\n\n3. CVE-2024-38094,\nCVE-2024-38023,\nCVE-2024-38024:\nMS SharePoint RCEs\nhttps://github.com/testanull/MS-SharePoint-July-Patch-RCE-PoC", "url": "https://t.me/Kelvinseccommunity/706", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2024-08-16T11:23:44Z", "date_only": false, "value": "2024-08-16T11:23:44.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/Rootsec_2/3733", "record": "CVE-2024-7396", "field": "creation_timestamp", "uuid": "1ac9aecd-ad32-4c15-b2f5-0798ccd9b64d", "content": "#exploit\n1. CVE-2024-39877:\nApache Airflow Arbitrary Code Execution\nhttps://blog.securelayer7.net/arbitrary-code-execution-in-apache-airflow\n\n2. CVE-2024-7395,\nCVE-2024-7396,\nCVE-2024-7397:\nInsufficient Authentication, Plaintext Communication, Unauthenticated CI\u00a0in Korenix JetPort\nhttps://cyberdanube.com/en/en-multiple-vulnerabilities-in-korenix-jetport/index.html\n\n3. CVE-2024-38094,\nCVE-2024-38023,\nCVE-2024-38024:\nMS SharePoint RCEs\nhttps://github.com/testanull/MS-SharePoint-July-Patch-RCE-PoC", "url": "https://t.me/Rootsec_2/3733", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2024-09-03T15:32:31.559Z", "date_only": false, "value": "2024-09-03T15:32:31.559672Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2024-7396", "field": "containers.adp.0.metrics.0.other.content.timestamp"}, {"timestamp": "2024-09-03T15:32:31.559Z", "date_only": false, "value": "2024-09-03T15:32:31.559672Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2024-7396", "record": "FKIE_CVE-2024-7396", "field": "metrics.ssvcV203.0.ssvcData.timestamp", "linked_record": true}, {"timestamp": "2024-09-03T15:36:02.184Z", "date_only": false, "value": "2024-09-03T15:36:02.184Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2024-7396", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2024-09-08T07:41:49Z", "date_only": false, "value": "2024-09-08T07:41:49.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/DOvVBYl81gcQnEx0SnDYShnK_l00AQ-j6ykpGr0q_-DsSYc", "record": "CVE-2024-7396", "field": "creation_timestamp", "uuid": "3526b111-7fe7-4f74-9047-a3edfb5cb19f", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2024-10-24T19:21:02Z", "date_only": false, "value": "2024-10-24T19:21:02.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/CyberSecurityTechnologies/10944", "record": "CVE-2024-7396", "field": "creation_timestamp", "uuid": "729727d6-508b-4403-b872-b1b19bd9a5d8", "content": "#exploit\n1. CVE-2024-39877:\nApache Airflow Arbitrary Code Execution\nhttps://blog.securelayer7.net/arbitrary-code-execution-in-apache-airflow\n\n2. CVE-2024-7395,\nCVE-2024-7396,\nCVE-2024-7397:\nInsufficient Authentication, Plaintext Communication, Unauthenticated CI\u00a0in Korenix JetPort\nhttps://cyberdanube.com/en/en-multiple-vulnerabilities-in-korenix-jetport/index.html", "url": "https://t.me/CyberSecurityTechnologies/10944"}, {"timestamp": "2025-11-04T16:15:54.405Z", "date_only": false, "value": "2025-11-04T16:15:54.405Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2024-7396", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2025-11-04T16:15:54.405Z", "date_only": false, "value": "2025-11-04T16:15:54.405Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CVE", "record": "CVE-2024-7396", "field": "containers.adp.1.providerMetadata.dateUpdated"}, {"timestamp": "2025-11-04T18:31:16Z", "date_only": false, "value": "2025-11-04T18:31:16Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-JJHP-92WF-MGRG", "record": "GHSA-JJHP-92WF-MGRG", "field": "modified", "linked_record": true}, {"timestamp": "2026-06-17T08:20:00.807Z", "date_only": false, "value": "2026-06-17T08:20:00.807", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2024-7396", "record": "FKIE_CVE-2024-7396", "field": "lastModified", "linked_record": true}], "metrics": {"as_of": "2026-11-08T19:30:49.449Z", "anchors": {"origin": {"timestamp": "2024-08-05T13:20:57.997Z", "date_only": false, "value": "2024-08-05T13:20:57.997Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2024-7396", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "discovery": null, "report": null, "acknowledgement": null, "disclosure": {"timestamp": "2024-08-05T13:20:57.997Z", "date_only": false, "value": "2024-08-05T13:20:57.997Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2024-7396", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "exploit_publication": {"timestamp": "2024-08-07T05:34:10Z", "date_only": false, "value": "2024-08-07T05:34:10.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/HackerArsenal/123", "record": "CVE-2024-7396", "field": "creation_timestamp", "uuid": "214d8343-2b90-40a3-b7c0-4ab729b66d11", "content": "#exploit\n1. CVE-2024-39877:\nApache Airflow Arbitrary Code Execution\nhttps://blog.securelayer7.net/arbitrary-code-execution-in-apache-airflow\n\n2. CVE-2024-7395,\nCVE-2024-7396,\nCVE-2024-7397:\nInsufficient Authentication, Plaintext Communication, Unauthenticated CI\u00a0in Korenix JetPort\nhttps://cyberdanube.com/en/en-multiple-vulnerabilities-in-korenix-jetport/index.html\n\n3. CVE-2024-38094,\nCVE-2024-38023,\nCVE-2024-38024:\nMS SharePoint RCEs\nhttps://github.com/testanull/MS-SharePoint-July-Patch-RCE-PoC", "url": "https://t.me/HackerArsenal/123", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, "exploitation": null, "patch": null}, "vendor_response_time": {"available": false, "missing": ["start", "end"]}, "time_to_exploit": {"available": false, "missing": ["end"]}, "disclosure_to_exploit": {"available": false, "missing": ["end"]}, "disclosure_to_exploit_publication": {"available": true, "seconds": 144792.003, "hours": 40.22000083333333, "days": 1.6758333680555555, "min_seconds": 144792.003, "max_seconds": 144792.003, "approximate": false, "ongoing": false, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2024-08-05T13:20:57.997Z", "date_only": false, "value": "2024-08-05T13:20:57.997Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2024-7396", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "end": {"timestamp": "2024-08-07T05:34:10Z", "date_only": false, "value": "2024-08-07T05:34:10.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/HackerArsenal/123", "record": "CVE-2024-7396", "field": "creation_timestamp", "uuid": "214d8343-2b90-40a3-b7c0-4ab729b66d11", "content": "#exploit\n1. CVE-2024-39877:\nApache Airflow Arbitrary Code Execution\nhttps://blog.securelayer7.net/arbitrary-code-execution-in-apache-airflow\n\n2. CVE-2024-7395,\nCVE-2024-7396,\nCVE-2024-7397:\nInsufficient Authentication, Plaintext Communication, Unauthenticated CI\u00a0in Korenix JetPort\nhttps://cyberdanube.com/en/en-multiple-vulnerabilities-in-korenix-jetport/index.html\n\n3. CVE-2024-38094,\nCVE-2024-38023,\nCVE-2024-38024:\nMS SharePoint RCEs\nhttps://github.com/testanull/MS-SharePoint-July-Patch-RCE-PoC", "url": "https://t.me/HackerArsenal/123", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}}, "time_to_patch": {"available": false, "missing": ["start", "end"]}, "total_time_to_patch": {"available": false, "missing": ["start", "end"]}, "disclosure_to_patch": {"available": false, "missing": ["end"]}, "time_unpatched": {"available": true, "seconds": 71302191.452947, "hours": 19806.16429248528, "days": 825.2568455202199, "min_seconds": 71302191.452947, "max_seconds": 71302191.452947, "approximate": false, "ongoing": true, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2024-08-05T13:20:57.997Z", "date_only": false, "value": "2024-08-05T13:20:57.997Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2024-7396", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "end": {"timestamp": "2026-11-08T19:30:49.449Z", "date_only": false, "label": "As of", "source": "Calculation clock"}}, "exploitation_to_patch": {"available": false, "missing": ["start"]}, "exploit_publication_to_patch": {"available": true, "seconds": 71157399.449947, "hours": 19765.944291651944, "days": 823.5810121521644, "min_seconds": 71157399.449947, "max_seconds": 71157399.449947, "approximate": false, "ongoing": true, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2024-08-07T05:34:10Z", "date_only": false, "value": "2024-08-07T05:34:10.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/HackerArsenal/123", "record": "CVE-2024-7396", "field": "creation_timestamp", "uuid": "214d8343-2b90-40a3-b7c0-4ab729b66d11", "content": "#exploit\n1. CVE-2024-39877:\nApache Airflow Arbitrary Code Execution\nhttps://blog.securelayer7.net/arbitrary-code-execution-in-apache-airflow\n\n2. CVE-2024-7395,\nCVE-2024-7396,\nCVE-2024-7397:\nInsufficient Authentication, Plaintext Communication, Unauthenticated CI\u00a0in Korenix JetPort\nhttps://cyberdanube.com/en/en-multiple-vulnerabilities-in-korenix-jetport/index.html\n\n3. CVE-2024-38094,\nCVE-2024-38023,\nCVE-2024-38024:\nMS SharePoint RCEs\nhttps://github.com/testanull/MS-SharePoint-July-Patch-RCE-PoC", "url": "https://t.me/HackerArsenal/123", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, "end": {"timestamp": "2026-11-08T19:30:49.449Z", "date_only": false, "label": "As of", "source": "Calculation clock"}}}}