Exploited Vulnerabilities DailyCVE-2024-34102: Adobe Commerce and Magento Open Source
EPSS99.9%No. 48 of 1739 in KEV
CVE year2024listed the same year
Same vendor in KEV82
Same product2
| Field | Value |
|---|---|
| Vendor | Adobe |
| Product | Commerce and Magento Open Source |
| Name | Adobe Commerce and Magento Open Source Improper Restriction of XML External Entity Reference (XXE) Vulnerability |
| Added to KEV | 2024-07-17 |
| US federal due date | 2024-08-07 |
| Ransomware use | Unknown |
| CWE | CWE-611 |
CISA description
Adobe Commerce and Magento Open Source contain an improper restriction of XML external entity reference (XXE) vulnerability that allows for remote code execution.
Other entries for this product
| CVE | Vendor / product | Added | EPSS | Ransomware |
|---|---|---|---|---|
| CVE-2022-24086 | Adobe Commerce and Magento Open Source | 2022-02-15 | 99.1% | Unknown |
Data from CISA's Known Exploited Vulnerabilities (KEV) catalog. EPSS is FIRST's estimated probability of exploitation activity in the next 30 days, refreshed weekly. Always follow the vendor's official guidance.
About this page
A Adobe Commerce and Magento Open Source vulnerability added to CISA's Known Exploited Vulnerabilities catalog on 2024-07-17.