Skip to content
Sign in

Adobe product

Commerce and Magento Open Source

Alert
No CISA KEV deadline is open. CISA last added a Commerce and Magento Open Source CVE on 17 Jul 2024.

Tracked since 28 Oct · latest article 28 Oct · RSS · API

0Open KEV deadlines

None open

0Added to KEV · 90 days

of 2 in the full CISA catalogue · all time

0High exploit odds · current

EPSS top 5%, not in KEV

1Articles · 7 days

usual rate

Exploited, by due date2

Commerce and Magento Open Source CVEs in CISA KEV with their federal deadlines. None is open.

Exploited Commerce and Magento Open Source CVEs
CVEProductAddedFederal deadlineArticles
In CISA KEVCVE-2024-34102Commerce and Magento Open Source17 JulPassed 7 Aug1
In CISA KEVCVE-2022-24086Commerce and Magento Open Source15 FebPassed 1 Mar–
Vendor CSV of 83 entries for AdobeAll 83 vendor entries, including other products.

Patch cadence and exploit odds

How often CISA adds Commerce and Magento Open Source CVEs, how many have a fix, and where their exploit odds sit.

Added to CISA KEV per quarter

0Q1 ’250Q2 ’250Q3 ’250Q4 ’250Q1 ’260Q2 ’260Q3 ’260Q4 ’26
Show as table
Added to CISA KEV per quarter
QuarterAdded
Q1 20250
Q2 20250
Q3 20250
Q4 20250
Q1 20260
Q2 20260
Q3 20260
Q4 20260

No additions in the last eight quarters.

Fix listed

1 of 1 CVE in coverage

Every CVE in coverage has a fix recorded.

EPSS percentile of each CVE

One dot per CVE; a red diamond marks those in CISA KEV.

top 5%CVE-2024-34102: 100th percentile, in CISA KEV050100
Show as table
FIRST EPSS percentiles across CVEs in coverage
CVEEPSS percentile
CVE-2024-34102100

Coverage1 article · all time

The latest article naming Commerce and Magento Open Source, in the shared story grammar.

Full timeline
Developinglatest 3 hours ago1 article1 outlet

1 article from 1 outlet since 28 Oct. Still developing; the latest report was 3 hours ago.

Now28 OctFirst reportUnit 42 · 28 Oct, 19:00
  • Wed 28 Oct, 19:00 UTC. Unit 42, first report. Unit 42 warns retailers of evolving peak season cyber threats. Cites a CVE in CISA KEV.
  • Known exploited CVE
  • No CVE
  • Larger: an outlet’s first report
  • Coverage over time
Show all 1 articles as a list
  1. Wed 28 OctDay 01
    1. Unit 42 warns retailers of evolving peak season cyber threats19:00 · Unit 42 · First report · Exploited CVE · Known exploited CVE

All CVEs in coverage1

Exploited first, then by EPSS

In the CVE tracker
  • CVE-2024-34102Exploited

    XXE can expose crypt key and other secrets granting full admin access

    9.8Critical99.9% EPSS · 1 article
CyberSIXTSignal over noise
Updated AboutDevelopersSign in