CISA's list that day
17 July 2024
On CISA added 3 vulnerabilities to its list of exploited vulnerabilities, in VMware vCenter Server, SolarWinds Serv-U and Adobe Commerce and Magento Open Source. US federal agencies must fix them by .
Added that day
| Vulnerability | Product | Our group | Listed | Deadline | EPSS |
|---|---|---|---|---|---|
| CVE-2024-28995Path Traversal | SolarWinds Serv-U | Patch this weekMetasploit module; EPSS 0.99 | 0.99 | ||
| CVE-2024-34102Improper Restriction of XML External Entity Reference (XXE) | Adobe Commerce and Magento Open Source | Patch this weekMetasploit module; EPSS 0.99 | 0.99 | ||
| CVE-2022-22948Incorrect Default File Permissions | VMware vCenter Server | Patch this weekMetasploit module | 0.13 |
Our record of CISA's changes begins on 24 January 2025. For earlier days this page lists the entries CISA dates to this day; changes CISA made that day are not known to us.