Cyber threats / Vulnerabilities

CVE-2022-24086

Adobe Commerce and Magento Open Source Improper Input Validation Vulnerability
99.2%
EPSS
100%
Percentile
Yes
Known exploited
0
APAC news · 90d
Summary

Adobe Commerce and Magento Open Source contain an improper input validation vulnerability which can allow for arbitrary code execution.

Vendor
Adobe
Product
Commerce and Magento Open Source
Added to KEV
Feb 15, 2022
Remediation due
Mar 1, 2022 (US federal deadline)
Ransomware use
Not known
Weakness
CWE-20
EPSS
99.2% as of Nov 12
In the news
  • No Asia-Pacific article names this CVE yet.
Linked
Actors named alongside it:
none
Incidents exploiting it:
  • none recorded
References