Exploit / PoCcriticalExploited in the wild

U.S. CISA adds Adobe Commerce and Magento, SolarWinds Serv-U, and VMware vCenter Server bugs to its Known Exploited Vulnerabilities catalog

Security Affairsby @securityaffairsJul 21, 2024 · 08:29 UTC (Jul 21, 2024)2 min read1

Read at securityaffairs.com

Analyze CVE-2024-34102 with Vani AIImpact, affected versions, exploitation, mitigations and detection

CVEs: CVE-2024-34102 CVE-2024-28995 CVE-2022-22948

Tags: cve-2024-34102 cve-2024-28995 cve-2022-22948 exploit

Vulnerabilities mentioned

All

CVE	Vulnerability	CVSS	EPSS	Signals	Published
CVE-2022-22948	Information Disclosure via Incorrect File Permissions in VMware vCenter Server	6.5	13%	KEV	Mar 29, 2022 KEV Jul 17, 2024
CVE-2024-28995	Unauthenticated Path Traversal File-Read in SolarWinds Serv-U	7.5	100%	KEV	Jun 6, 2024 KEV Jul 17, 2024
CVE-2024-34102	XXE vulnerability enabling RCE in Adobe Commerce and Magento Open Source	9.8	100%	KEVPoC	Jun 13, 2024 KEV Jul 17, 2024

From the original article

2 min read at securityaffairs.com

U. S. Cybersecurity and Infrastructure Security Agency (CISA) adds Adobe Commerce and Magento, SolarWinds Serv-U, and VMware vCenter Server bugs to its Known Exploited Vulnerabilities catalog.

Security Affairs

By @securityaffairs · securityaffairs.com

Read the full article at Security Affairs

A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.