Exploited Vulnerabilities DailyCVE-2022-24086: Adobe Commerce and Magento Open Source
EPSS99.1%No. 212 of 1739 in KEV
CVE year2022listed the same year
Same vendor in KEV82
Same product2
| Field | Value |
|---|---|
| Vendor | Adobe |
| Product | Commerce and Magento Open Source |
| Name | Adobe Commerce and Magento Open Source Improper Input Validation Vulnerability |
| Added to KEV | 2022-02-15 |
| US federal due date | 2022-03-01 |
| Ransomware use | Unknown |
| CWE | CWE-20 |
CISA description
Adobe Commerce and Magento Open Source contain an improper input validation vulnerability which can allow for arbitrary code execution.
Other entries for this product
| CVE | Vendor / product | Added | EPSS | Ransomware |
|---|---|---|---|---|
| CVE-2024-34102 | Adobe Commerce and Magento Open Source | 2024-07-17 | 99.9% | Unknown |
Data from CISA's Known Exploited Vulnerabilities (KEV) catalog. EPSS is FIRST's estimated probability of exploitation activity in the next 30 days, refreshed weekly. Always follow the vendor's official guidance.
About this page
A Adobe Commerce and Magento Open Source vulnerability added to CISA's Known Exploited Vulnerabilities catalog on 2022-02-15.