{"schema_version":"1","data":[{"id":2879,"advisory_id":"b4092794-560d-44aa-9e4d-a3dfbbe879c9","revision":1,"source_id":"core-kev","source_url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2022-24086","source_published_at":"2022-02-15T00:00:00+00:00","published_at":"2026-10-24T21:26:02.986791+00:00","extraction_method":"structured","technologies":["commerce-and-magento-open-source","core-kev"],"cve_ids":["CVE-2022-24086"],"event_types":["advisory"],"payload":{"kind":"advisory","title":"Adobe Commerce and Magento Open Source Improper Input Validation Vulnerability","summary":"Adobe Commerce and Magento Open Source contain an improper input validation vulnerability which can allow for arbitrary code execution. CISA required action: Apply updates per vendor instructions.","evidence":"kev:CVE-2022-24086","products":[{"name":{"value":"Commerce and Magento Open Source","evidence":"/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2022-24086","aliases":["CVE-2022-24086"],"affected":[],"modified":"2022-02-15T00:00:00.000Z","provider":"kev","references":["https://www.cisa.gov/known-exploited-vulnerabilities-catalog"],"exploitation":{"cwes":["CWE-20"],"cveID":"CVE-2022-24086","notes":"https://nvd.nist.gov/vuln/detail/CVE-2022-24086","dueDate":"2022-03-01","product":"Commerce and Magento Open Source","dateAdded":"2022-02-15","vendorProject":"Adobe","requiredAction":"Apply updates per vendor instructions.","known_exploited":true,"shortDescription":"Adobe Commerce and Magento Open Source contain an improper input validation vulnerability which can allow for arbitrary code execution.","vulnerabilityName":"Adobe Commerce and Magento Open Source Improper Input Validation Vulnerability","knownRansomwareCampaignUse":"Unknown"}},"related_cves":[{"value":"CVE-2022-24086","evidence":"/cveID"}],"security_relevant":true,"severity_evidence":null},"priority":{"reasons":["known_exploited"],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":true,"publisher_severity":"unknown"},"context_update":false},{"id":1124,"advisory_id":"0134e5cc-5ecc-457f-b9e8-d1fc81ffdc8f","revision":1,"source_id":"core-kev","source_url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-34102","source_published_at":"2024-07-17T00:00:00+00:00","published_at":"2026-10-24T20:56:48.621858+00:00","extraction_method":"structured","technologies":["commerce-and-magento-open-source","core-kev"],"cve_ids":["CVE-2024-34102"],"event_types":["advisory"],"payload":{"kind":"advisory","title":"Adobe Commerce and Magento Open Source Improper Restriction of XML External Entity Reference (XXE) Vulnerability","summary":"Adobe Commerce and Magento Open Source contain an improper restriction of XML external entity reference (XXE) vulnerability that allows for remote code execution. CISA required action: Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.","evidence":"kev:CVE-2024-34102","products":[{"name":{"value":"Commerce and Magento Open Source","evidence":"/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2024-34102","aliases":["CVE-2024-34102"],"affected":[],"modified":"2024-07-17T00:00:00.000Z","provider":"kev","references":["https://www.cisa.gov/known-exploited-vulnerabilities-catalog"],"exploitation":{"cwes":["CWE-611"],"cveID":"CVE-2024-34102","notes":"https://helpx.adobe.com/security/products/magento/apsb24-40.html;  https://nvd.nist.gov/vuln/detail/CVE-2024-34102","dueDate":"2024-08-07","product":"Commerce and Magento Open Source","dateAdded":"2024-07-17","vendorProject":"Adobe","requiredAction":"Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.","known_exploited":true,"shortDescription":"Adobe Commerce and Magento Open Source contain an improper restriction of XML external entity reference (XXE) vulnerability that allows for remote code execution.","vulnerabilityName":"Adobe Commerce and Magento Open Source Improper Restriction of XML External Entity Reference (XXE) Vulnerability","knownRansomwareCampaignUse":"Unknown"}},"related_cves":[{"value":"CVE-2024-34102","evidence":"/cveID"}],"security_relevant":true,"severity_evidence":null},"priority":{"reasons":["known_exploited"],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":true,"publisher_severity":"unknown"},"context_update":false}],"next_after":2879,"next_before":1124}