[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fqpPoDVS7zweuSEG99nIYIj1XWjAw454DPMQ52rV0lzA":3,"g5a-risk:CVE-2024-28757":318},{"success":4,"data":5,"meta":315},true,{"cveId":6,"title":7,"description":8,"shortDescription":8,"publishedDate":9,"lastModified":10,"cvssScore":11,"cvssVector":12,"cvssMetrics":13,"epssScore":34,"epssPercentile":25,"epssTimeSeries":35,"severity":36,"affectedProducts":37,"affectedProductsCount":116,"references":117,"referencesCount":172,"weaknesses":173,"weaknessesCount":182,"isActivelyExploited":79,"cisaInfo":25,"otxData":25,"relatedBlogPosts":183,"seoMetadata":184,"configurations":209,"relatedVendorCves":313,"notableEvents":314},"CVE-2024-28757","What is CVE-2024-28757?","libexpat through 2.6.1 allows an XML Entity Expansion attack when there is isolated use of external parsers (created via XML_ExternalEntityParserCreate).","2024-03-10T05:15:06.57","2025-11-04T22:15:59.8",7.5,"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:N\u002FI:N\u002FA:H",{"CVSSMetricV31":14,"CVSSMetricV30":32,"CVSSMetricV2":33,"CVSSMetricV40":25},[15,28],{"Source":16,"Type":17,"CVSSData":18,"ExploitabilityScore":26,"ImpactScore":27},"nvd@nist.gov","Primary",{"Version":19,"VectorString":12,"AttackVector":20,"AttackComplexity":21,"PrivilegesRequired":22,"UserInteraction":22,"Scope":23,"ConfidentialityImpact":22,"IntegrityImpact":22,"AvailabilityImpact":24,"BaseScore":11,"BaseSeverity":24,"ExploitCodeMaturity":25,"RemediationLevel":25,"ReportConfidence":25,"TemporalScore":25,"TemporalSeverity":25,"ConfidentialityRequirement":25,"IntegrityRequirement":25,"AvailabilityRequirement":25,"ModifiedAttackVector":25,"ModifiedAttackComplexity":25,"ModifiedPrivilegesRequired":25,"ModifiedUserInteraction":25,"ModifiedScope":25,"ModifiedConfidentialityImpact":25,"ModifiedIntegrityImpact":25,"ModifiedAvailabilityImpact":25,"EnvironmentalScore":25,"EnvironmentalSeverity":25},"3.1","NETWORK","LOW","NONE","UNCHANGED","HIGH",null,3.9,3.6,{"Source":29,"Type":30,"CVSSData":31,"ExploitabilityScore":26,"ImpactScore":27},"134c704f-9b21-4f2e-91b3-4a467353bcc0","Secondary",{"Version":19,"VectorString":12,"AttackVector":20,"AttackComplexity":21,"PrivilegesRequired":22,"UserInteraction":22,"Scope":23,"ConfidentialityImpact":22,"IntegrityImpact":22,"AvailabilityImpact":24,"BaseScore":11,"BaseSeverity":24,"ExploitCodeMaturity":25,"RemediationLevel":25,"ReportConfidence":25,"TemporalScore":25,"TemporalSeverity":25,"ConfidentialityRequirement":25,"IntegrityRequirement":25,"AvailabilityRequirement":25,"ModifiedAttackVector":25,"ModifiedAttackComplexity":25,"ModifiedPrivilegesRequired":25,"ModifiedUserInteraction":25,"ModifiedScope":25,"ModifiedConfidentialityImpact":25,"ModifiedIntegrityImpact":25,"ModifiedAvailabilityImpact":25,"EnvironmentalScore":25,"EnvironmentalSeverity":25},[],[],0.02006,[34,34,34,34,34,34,34],"High",[38,43,48,51,54,59,62,66,70,73,76,80,83,86,89,92,95,98,101,104,107,110,113],{"vendor":39,"product":40,"version":41,"criteria":42,"vulnerable":4},"libexpat_project","libexpat","*","cpe:2.3:a:libexpat_project:libexpat:*:*:*:*:*:*:*:*",{"vendor":44,"product":45,"version":46,"criteria":47,"vulnerable":4},"fedoraproject","fedora","38","cpe:2.3:o:fedoraproject:fedora:38:*:*:*:*:*:*:*",{"vendor":44,"product":45,"version":49,"criteria":50,"vulnerable":4},"39","cpe:2.3:o:fedoraproject:fedora:39:*:*:*:*:*:*:*",{"vendor":44,"product":45,"version":52,"criteria":53,"vulnerable":4},"40","cpe:2.3:o:fedoraproject:fedora:40:*:*:*:*:*:*:*",{"vendor":55,"product":56,"version":57,"criteria":58,"vulnerable":4},"netapp","active_iq_unified_manager","-","cpe:2.3:a:netapp:active_iq_unified_manager:-:*:*:*:*:vmware_vsphere:*:*",{"vendor":55,"product":60,"version":57,"criteria":61,"vulnerable":4},"oncommand_workflow_automation","cpe:2.3:a:netapp:oncommand_workflow_automation:-:*:*:*:*:*:*:*",{"vendor":55,"product":63,"version":64,"criteria":65,"vulnerable":4},"ontap","9","cpe:2.3:a:netapp:ontap:9:*:*:*:*:*:*:*",{"vendor":55,"product":67,"version":68,"criteria":69,"vulnerable":4},"ontap_tools","10","cpe:2.3:a:netapp:ontap_tools:10:*:*:*:*:vmware_vsphere:*:*",{"vendor":55,"product":71,"version":57,"criteria":72,"vulnerable":4},"windows_host_utilities","cpe:2.3:a:netapp:windows_host_utilities:-:*:*:*:*:*:*:*",{"vendor":55,"product":74,"version":57,"criteria":75,"vulnerable":4},"h300s_firmware","cpe:2.3:o:netapp:h300s_firmware:-:*:*:*:*:*:*:*",{"vendor":55,"product":77,"version":57,"criteria":78,"vulnerable":79},"h300s","cpe:2.3:h:netapp:h300s:-:*:*:*:*:*:*:*",false,{"vendor":55,"product":81,"version":57,"criteria":82,"vulnerable":4},"h500s_firmware","cpe:2.3:o:netapp:h500s_firmware:-:*:*:*:*:*:*:*",{"vendor":55,"product":84,"version":57,"criteria":85,"vulnerable":79},"h500s","cpe:2.3:h:netapp:h500s:-:*:*:*:*:*:*:*",{"vendor":55,"product":87,"version":57,"criteria":88,"vulnerable":4},"h700s_firmware","cpe:2.3:o:netapp:h700s_firmware:-:*:*:*:*:*:*:*",{"vendor":55,"product":90,"version":57,"criteria":91,"vulnerable":79},"h700s","cpe:2.3:h:netapp:h700s:-:*:*:*:*:*:*:*",{"vendor":55,"product":93,"version":57,"criteria":94,"vulnerable":4},"h410s_firmware","cpe:2.3:o:netapp:h410s_firmware:-:*:*:*:*:*:*:*",{"vendor":55,"product":96,"version":57,"criteria":97,"vulnerable":79},"h410s","cpe:2.3:h:netapp:h410s:-:*:*:*:*:*:*:*",{"vendor":55,"product":99,"version":57,"criteria":100,"vulnerable":4},"h410c_firmware","cpe:2.3:o:netapp:h410c_firmware:-:*:*:*:*:*:*:*",{"vendor":55,"product":102,"version":57,"criteria":103,"vulnerable":79},"h410c","cpe:2.3:h:netapp:h410c:-:*:*:*:*:*:*:*",{"vendor":55,"product":105,"version":57,"criteria":106,"vulnerable":4},"h610c_firmware","cpe:2.3:o:netapp:h610c_firmware:-:*:*:*:*:*:*:*",{"vendor":55,"product":108,"version":57,"criteria":109,"vulnerable":79},"h610c","cpe:2.3:h:netapp:h610c:-:*:*:*:*:*:*:*",{"vendor":55,"product":111,"version":57,"criteria":112,"vulnerable":4},"h610s_firmware","cpe:2.3:o:netapp:h610s_firmware:-:*:*:*:*:*:*:*",{"vendor":55,"product":114,"version":57,"criteria":115,"vulnerable":79},"h610s","cpe:2.3:h:netapp:h610s:-:*:*:*:*:*:*:*",23,[118,125,131,134,138,141,144,149,151,153,155,157,159,161,164,167,170],{"url":119,"source":120,"tags":121},"http:\u002F\u002Fwww.openwall.com\u002Flists\u002Foss-security\u002F2024\u002F03\u002F15\u002F1","Openwall",[122,123,124],"Mailing List","Patch","Release Notes",{"url":126,"source":127,"tags":128},"https:\u002F\u002Fgithub.com\u002Flibexpat\u002Flibexpat\u002Fissues\u002F839","GitHub",[129,130,123],"Exploit","Issue Tracking",{"url":132,"source":127,"tags":133},"https:\u002F\u002Fgithub.com\u002Flibexpat\u002Flibexpat\u002Fpull\u002F842",[130,123],{"url":135,"source":136,"tags":137},"https:\u002F\u002Flists.fedoraproject.org\u002Farchives\u002Flist\u002Fpackage-announce%40lists.fedoraproject.org\u002Fmessage\u002FFPLC6WDSRDUYS7F7JWAOVOHFNOUQ43DD\u002F","Fedoraproject",[122],{"url":139,"source":136,"tags":140},"https:\u002F\u002Flists.fedoraproject.org\u002Farchives\u002Flist\u002Fpackage-announce%40lists.fedoraproject.org\u002Fmessage\u002FLKJ7V5F6LJCEQJXDBWGT27J7NAP3E3N7\u002F",[122],{"url":142,"source":136,"tags":143},"https:\u002F\u002Flists.fedoraproject.org\u002Farchives\u002Flist\u002Fpackage-announce%40lists.fedoraproject.org\u002Fmessage\u002FVK2O34GH43NTHBZBN7G5Y6YKJKPUCTBE\u002F",[122],{"url":145,"source":146,"tags":147},"https:\u002F\u002Fsecurity.netapp.com\u002Fadvisory\u002Fntap-20240322-0001\u002F","Netapp",[148],"Third Party Advisory",{"url":119,"source":120,"tags":150},[122,123,124],{"url":126,"source":127,"tags":152},[129,130,123],{"url":132,"source":127,"tags":154},[130,123],{"url":135,"source":136,"tags":156},[122],{"url":139,"source":136,"tags":158},[122],{"url":142,"source":136,"tags":160},[122],{"url":162,"source":136,"tags":163},"https:\u002F\u002Flists.fedoraproject.org\u002Farchives\u002Flist\u002Fpackage-announce@lists.fedoraproject.org\u002Fmessage\u002FFPLC6WDSRDUYS7F7JWAOVOHFNOUQ43DD\u002F",[],{"url":165,"source":136,"tags":166},"https:\u002F\u002Flists.fedoraproject.org\u002Farchives\u002Flist\u002Fpackage-announce@lists.fedoraproject.org\u002Fmessage\u002FLKJ7V5F6LJCEQJXDBWGT27J7NAP3E3N7\u002F",[],{"url":168,"source":136,"tags":169},"https:\u002F\u002Flists.fedoraproject.org\u002Farchives\u002Flist\u002Fpackage-announce@lists.fedoraproject.org\u002Fmessage\u002FVK2O34GH43NTHBZBN7G5Y6YKJKPUCTBE\u002F",[],{"url":145,"source":146,"tags":171},[148],17,[174],{"id":175,"name":176,"description":177,"extendedDescription":178,"status":179,"abstraction":180,"structure":181},"CWE-776","Improper Restriction of Recursive Entity References in DTDs ('XML Entity Expansion')","The product uses XML documents and allows their structure to be defined with a Document Type Definition (DTD), but it does not properly control the number of recursive definitions of entities.","If the DTD contains a large number of nested or recursive entities, this can lead to explosive growth of data when parsed, causing a denial of service.","Draft","Base","Simple",1,[],{"title":185,"metaDescription":186,"keywords":187,"canonicalUrl":188,"structuredData":189},"What is CVE-2024-28757? Vulnerability Analysis | Security Advisory | EdgeProtect","Comprehensive analysis of CVE-2024-28757, a high severity cyber security vulnerability from 2024. libexpat through 2.6.1 allows an XML Entity Expansion attac...","CVE-2024-28757, CVE-2024-28757 vulnerability, CVE-2024-28757 security, high severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2024, CVSS score, exploit, patch, remediation, libexpat_project security, fedoraproject security, netapp security, libexpat vulnerability, fedora vulnerability, active_iq_unified_manager vulnerability, oncommand_workflow_automation vulnerability, ontap vulnerability","\u002Fwhat-is\u002Fcve-2024-28757",{"@context":190,"@type":191,"headline":185,"description":186,"datePublished":9,"dateModified":10,"author":192,"publisher":196,"about":200,"mainEntityOfPage":204,"articleSection":207,"keywords":208},"https:\u002F\u002Fschema.org","TechArticle",{"@type":193,"name":194,"url":195},"Organization","EdgeProtect","https:\u002F\u002Fedgeprotect.io",{"@type":193,"name":194,"url":195,"logo":197},{"@type":198,"url":199},"ImageObject","https:\u002F\u002Fedgeprotect.io\u002Fimg\u002Flogos\u002Fedgeprotect-logo-512.png",{"@type":201,"name":6,"description":202,"additionalType":203},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":205,"@id":206},"WebPage","https:\u002F\u002Fedgeprotect.io\u002Fwhat-is\u002Fcve-2024-28757","Cybersecurity","CVE-2024-28757, CVE-2024-28757 vulnerability, CVE-2024-28757 security, high severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[210,218,228,242,253,263,273,283,293,303],{"Operator":25,"Negate":25,"Nodes":211},[212],{"Operator":213,"Negate":79,"CPEMatch":214},"OR",[215],{"Vulnerable":4,"Criteria":42,"MatchCriteriaID":216,"VersionStartExcluding":25,"VersionStartIncluding":25,"VersionEndExcluding":217,"VersionEndIncluding":25},"463A4DD2-9DA6-420C-A361-293B1166B9C6","2.6.2",{"Operator":25,"Negate":25,"Nodes":219},[220],{"Operator":213,"Negate":79,"CPEMatch":221},[222,224,226],{"Vulnerable":4,"Criteria":47,"MatchCriteriaID":223,"VersionStartExcluding":25,"VersionStartIncluding":25,"VersionEndExcluding":25,"VersionEndIncluding":25},"CC559B26-5DFC-4B7A-A27C-B77DE755DFF9",{"Vulnerable":4,"Criteria":50,"MatchCriteriaID":225,"VersionStartExcluding":25,"VersionStartIncluding":25,"VersionEndExcluding":25,"VersionEndIncluding":25},"B8EDB836-4E6A-4B71-B9B2-AA3E03E0F646",{"Vulnerable":4,"Criteria":53,"MatchCriteriaID":227,"VersionStartExcluding":25,"VersionStartIncluding":25,"VersionEndExcluding":25,"VersionEndIncluding":25},"CA277A6C-83EC-4536-9125-97B84C4FAF59",{"Operator":25,"Negate":25,"Nodes":229},[230],{"Operator":213,"Negate":79,"CPEMatch":231},[232,234,236,238,240],{"Vulnerable":4,"Criteria":58,"MatchCriteriaID":233,"VersionStartExcluding":25,"VersionStartIncluding":25,"VersionEndExcluding":25,"VersionEndIncluding":25},"3A756737-1CC4-42C2-A4DF-E1C893B4E2D5",{"Vulnerable":4,"Criteria":61,"MatchCriteriaID":235,"VersionStartExcluding":25,"VersionStartIncluding":25,"VersionEndExcluding":25,"VersionEndIncluding":25},"5735E553-9731-4AAC-BCFF-989377F817B3",{"Vulnerable":4,"Criteria":65,"MatchCriteriaID":237,"VersionStartExcluding":25,"VersionStartIncluding":25,"VersionEndExcluding":25,"VersionEndIncluding":25},"A20333EE-4C13-426E-8B54-D78679D5DDB8",{"Vulnerable":4,"Criteria":69,"MatchCriteriaID":239,"VersionStartExcluding":25,"VersionStartIncluding":25,"VersionEndExcluding":25,"VersionEndIncluding":25},"5333B745-F7A3-46CB-8437-8668DB08CD6F",{"Vulnerable":4,"Criteria":72,"MatchCriteriaID":241,"VersionStartExcluding":25,"VersionStartIncluding":25,"VersionEndExcluding":25,"VersionEndIncluding":25},"15282AE5-2005-4852-8FC8-EF2CE0E28FB4",{"Operator":243,"Negate":25,"Nodes":244},"AND",[245,249],{"Operator":213,"Negate":79,"CPEMatch":246},[247],{"Vulnerable":4,"Criteria":75,"MatchCriteriaID":248,"VersionStartExcluding":25,"VersionStartIncluding":25,"VersionEndExcluding":25,"VersionEndIncluding":25},"6770B6C3-732E-4E22-BF1C-2D2FD610061C",{"Operator":213,"Negate":79,"CPEMatch":250},[251],{"Vulnerable":79,"Criteria":78,"MatchCriteriaID":252,"VersionStartExcluding":25,"VersionStartIncluding":25,"VersionEndExcluding":25,"VersionEndIncluding":25},"9F9C8C20-42EB-4AB5-BD97-212DEB070C43",{"Operator":243,"Negate":25,"Nodes":254},[255,259],{"Operator":213,"Negate":79,"CPEMatch":256},[257],{"Vulnerable":4,"Criteria":82,"MatchCriteriaID":258,"VersionStartExcluding":25,"VersionStartIncluding":25,"VersionEndExcluding":25,"VersionEndIncluding":25},"7FFF7106-ED78-49BA-9EC5-B889E3685D53",{"Operator":213,"Negate":79,"CPEMatch":260},[261],{"Vulnerable":79,"Criteria":85,"MatchCriteriaID":262,"VersionStartExcluding":25,"VersionStartIncluding":25,"VersionEndExcluding":25,"VersionEndIncluding":25},"E63D8B0F-006E-4801-BF9D-1C001BBFB4F9",{"Operator":243,"Negate":25,"Nodes":264},[265,269],{"Operator":213,"Negate":79,"CPEMatch":266},[267],{"Vulnerable":4,"Criteria":88,"MatchCriteriaID":268,"VersionStartExcluding":25,"VersionStartIncluding":25,"VersionEndExcluding":25,"VersionEndIncluding":25},"56409CEC-5A1E-4450-AA42-641E459CC2AF",{"Operator":213,"Negate":79,"CPEMatch":270},[271],{"Vulnerable":79,"Criteria":91,"MatchCriteriaID":272,"VersionStartExcluding":25,"VersionStartIncluding":25,"VersionEndExcluding":25,"VersionEndIncluding":25},"B06F4839-D16A-4A61-9BB5-55B13F41E47F",{"Operator":243,"Negate":25,"Nodes":274},[275,279],{"Operator":213,"Negate":79,"CPEMatch":276},[277],{"Vulnerable":4,"Criteria":94,"MatchCriteriaID":278,"VersionStartExcluding":25,"VersionStartIncluding":25,"VersionEndExcluding":25,"VersionEndIncluding":25},"D0B4AD8A-F172-4558-AEC6-FF424BA2D912",{"Operator":213,"Negate":79,"CPEMatch":280},[281],{"Vulnerable":79,"Criteria":97,"MatchCriteriaID":282,"VersionStartExcluding":25,"VersionStartIncluding":25,"VersionEndExcluding":25,"VersionEndIncluding":25},"8497A4C9-8474-4A62-8331-3FE862ED4098",{"Operator":243,"Negate":25,"Nodes":284},[285,289],{"Operator":213,"Negate":79,"CPEMatch":286},[287],{"Vulnerable":4,"Criteria":100,"MatchCriteriaID":288,"VersionStartExcluding":25,"VersionStartIncluding":25,"VersionEndExcluding":25,"VersionEndIncluding":25},"234DEFE0-5CE5-4B0A-96B8-5D227CB8ED31",{"Operator":213,"Negate":79,"CPEMatch":290},[291],{"Vulnerable":79,"Criteria":103,"MatchCriteriaID":292,"VersionStartExcluding":25,"VersionStartIncluding":25,"VersionEndExcluding":25,"VersionEndIncluding":25},"CDDF61B7-EC5C-467C-B710-B89F502CD04F",{"Operator":243,"Negate":25,"Nodes":294},[295,299],{"Operator":213,"Negate":79,"CPEMatch":296},[297],{"Vulnerable":4,"Criteria":106,"MatchCriteriaID":298,"VersionStartExcluding":25,"VersionStartIncluding":25,"VersionEndExcluding":25,"VersionEndIncluding":25},"89612649-BACF-4FAC-9BA4-324724FD93A6",{"Operator":213,"Negate":79,"CPEMatch":300},[301],{"Vulnerable":79,"Criteria":109,"MatchCriteriaID":302,"VersionStartExcluding":25,"VersionStartIncluding":25,"VersionEndExcluding":25,"VersionEndIncluding":25},"F3D9B255-C1AF-42D1-BF9B-13642FBDC080",{"Operator":243,"Negate":25,"Nodes":304},[305,309],{"Operator":213,"Negate":79,"CPEMatch":306},[307],{"Vulnerable":4,"Criteria":112,"MatchCriteriaID":308,"VersionStartExcluding":25,"VersionStartIncluding":25,"VersionEndExcluding":25,"VersionEndIncluding":25},"FD7CFE0E-9D1E-4495-B302-89C3096FC0DF",{"Operator":213,"Negate":79,"CPEMatch":310},[311],{"Vulnerable":79,"Criteria":115,"MatchCriteriaID":312,"VersionStartExcluding":25,"VersionStartIncluding":25,"VersionEndExcluding":25,"VersionEndIncluding":25},"F63A3FA7-AAED-4A9D-9FDE-6195302DA0F6",[],[],{"lastModified":10,"cacheTime":316,"version":317},1793211634207,"2.0",{"score":319,"band":320,"action":321,"scoredAt":322},48,"Medium","Plan remediation","2026-07-01T10:32:06.453195+00:00"]