[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fqpPoDVS7zweuSEG99nIYIj1XWjAw454DPMQ52rV0lzA":3,"g5a-risk:CVE-2024-28757":319},{"success":4,"data":5,"meta":316},true,{"cveId":6,"title":7,"description":8,"shortDescription":8,"publishedDate":9,"lastModified":10,"cvssScore":11,"cvssVector":12,"cvssMetrics":13,"epssScore":35,"epssPercentile":25,"epssTimeSeries":36,"severity":37,"affectedProducts":38,"affectedProductsCount":117,"references":118,"referencesCount":173,"weaknesses":174,"weaknessesCount":183,"isActivelyExploited":80,"cisaInfo":25,"otxData":25,"relatedBlogPosts":184,"seoMetadata":185,"configurations":210,"relatedVendorCves":314,"notableEvents":315},"CVE-2024-28757","What is CVE-2024-28757?","libexpat through 2.6.1 allows an XML Entity Expansion attack when there is isolated use of external parsers (created via XML_ExternalEntityParserCreate).","2024-03-10T05:15:06.57","2026-06-17T07:21:45.16",7.5,"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:N\u002FI:N\u002FA:H",{"CVSSMetricV31":14,"CVSSMetricV30":32,"CVSSMetricV2":33,"CVSSMetricV40":34},[15,28],{"Source":16,"Type":17,"CVSSData":18,"ExploitabilityScore":26,"ImpactScore":27},"nvd@nist.gov","Primary",{"Version":19,"VectorString":12,"AttackVector":20,"AttackComplexity":21,"PrivilegesRequired":22,"UserInteraction":22,"Scope":23,"ConfidentialityImpact":22,"IntegrityImpact":22,"AvailabilityImpact":24,"BaseScore":11,"BaseSeverity":24,"ExploitCodeMaturity":25,"RemediationLevel":25,"ReportConfidence":25,"TemporalScore":25,"TemporalSeverity":25,"ConfidentialityRequirement":25,"IntegrityRequirement":25,"AvailabilityRequirement":25,"ModifiedAttackVector":25,"ModifiedAttackComplexity":25,"ModifiedPrivilegesRequired":25,"ModifiedUserInteraction":25,"ModifiedScope":25,"ModifiedConfidentialityImpact":25,"ModifiedIntegrityImpact":25,"ModifiedAvailabilityImpact":25,"EnvironmentalScore":25,"EnvironmentalSeverity":25},"3.1","NETWORK","LOW","NONE","UNCHANGED","HIGH",null,3.9,3.6,{"Source":29,"Type":30,"CVSSData":31,"ExploitabilityScore":26,"ImpactScore":27},"134c704f-9b21-4f2e-91b3-4a467353bcc0","Secondary",{"Version":19,"VectorString":12,"AttackVector":20,"AttackComplexity":21,"PrivilegesRequired":22,"UserInteraction":22,"Scope":23,"ConfidentialityImpact":22,"IntegrityImpact":22,"AvailabilityImpact":24,"BaseScore":11,"BaseSeverity":24,"ExploitCodeMaturity":25,"RemediationLevel":25,"ReportConfidence":25,"TemporalScore":25,"TemporalSeverity":25,"ConfidentialityRequirement":25,"IntegrityRequirement":25,"AvailabilityRequirement":25,"ModifiedAttackVector":25,"ModifiedAttackComplexity":25,"ModifiedPrivilegesRequired":25,"ModifiedUserInteraction":25,"ModifiedScope":25,"ModifiedConfidentialityImpact":25,"ModifiedIntegrityImpact":25,"ModifiedAvailabilityImpact":25,"EnvironmentalScore":25,"EnvironmentalSeverity":25},[],[],[],0.02006,[35,35,35,35,35,35,35],"High",[39,44,49,52,55,60,63,67,71,74,77,81,84,87,90,93,96,99,102,105,108,111,114],{"vendor":40,"product":41,"version":42,"criteria":43,"vulnerable":4},"libexpat_project","libexpat","*","cpe:2.3:a:libexpat_project:libexpat:*:*:*:*:*:*:*:*",{"vendor":45,"product":46,"version":47,"criteria":48,"vulnerable":4},"fedoraproject","fedora","38","cpe:2.3:o:fedoraproject:fedora:38:*:*:*:*:*:*:*",{"vendor":45,"product":46,"version":50,"criteria":51,"vulnerable":4},"39","cpe:2.3:o:fedoraproject:fedora:39:*:*:*:*:*:*:*",{"vendor":45,"product":46,"version":53,"criteria":54,"vulnerable":4},"40","cpe:2.3:o:fedoraproject:fedora:40:*:*:*:*:*:*:*",{"vendor":56,"product":57,"version":58,"criteria":59,"vulnerable":4},"netapp","active_iq_unified_manager","-","cpe:2.3:a:netapp:active_iq_unified_manager:-:*:*:*:*:vmware_vsphere:*:*",{"vendor":56,"product":61,"version":58,"criteria":62,"vulnerable":4},"oncommand_workflow_automation","cpe:2.3:a:netapp:oncommand_workflow_automation:-:*:*:*:*:*:*:*",{"vendor":56,"product":64,"version":65,"criteria":66,"vulnerable":4},"ontap","9","cpe:2.3:a:netapp:ontap:9:*:*:*:*:*:*:*",{"vendor":56,"product":68,"version":69,"criteria":70,"vulnerable":4},"ontap_tools","10","cpe:2.3:a:netapp:ontap_tools:10:*:*:*:*:vmware_vsphere:*:*",{"vendor":56,"product":72,"version":58,"criteria":73,"vulnerable":4},"windows_host_utilities","cpe:2.3:a:netapp:windows_host_utilities:-:*:*:*:*:*:*:*",{"vendor":56,"product":75,"version":58,"criteria":76,"vulnerable":4},"h300s_firmware","cpe:2.3:o:netapp:h300s_firmware:-:*:*:*:*:*:*:*",{"vendor":56,"product":78,"version":58,"criteria":79,"vulnerable":80},"h300s","cpe:2.3:h:netapp:h300s:-:*:*:*:*:*:*:*",false,{"vendor":56,"product":82,"version":58,"criteria":83,"vulnerable":4},"h500s_firmware","cpe:2.3:o:netapp:h500s_firmware:-:*:*:*:*:*:*:*",{"vendor":56,"product":85,"version":58,"criteria":86,"vulnerable":80},"h500s","cpe:2.3:h:netapp:h500s:-:*:*:*:*:*:*:*",{"vendor":56,"product":88,"version":58,"criteria":89,"vulnerable":4},"h700s_firmware","cpe:2.3:o:netapp:h700s_firmware:-:*:*:*:*:*:*:*",{"vendor":56,"product":91,"version":58,"criteria":92,"vulnerable":80},"h700s","cpe:2.3:h:netapp:h700s:-:*:*:*:*:*:*:*",{"vendor":56,"product":94,"version":58,"criteria":95,"vulnerable":4},"h410s_firmware","cpe:2.3:o:netapp:h410s_firmware:-:*:*:*:*:*:*:*",{"vendor":56,"product":97,"version":58,"criteria":98,"vulnerable":80},"h410s","cpe:2.3:h:netapp:h410s:-:*:*:*:*:*:*:*",{"vendor":56,"product":100,"version":58,"criteria":101,"vulnerable":4},"h410c_firmware","cpe:2.3:o:netapp:h410c_firmware:-:*:*:*:*:*:*:*",{"vendor":56,"product":103,"version":58,"criteria":104,"vulnerable":80},"h410c","cpe:2.3:h:netapp:h410c:-:*:*:*:*:*:*:*",{"vendor":56,"product":106,"version":58,"criteria":107,"vulnerable":4},"h610c_firmware","cpe:2.3:o:netapp:h610c_firmware:-:*:*:*:*:*:*:*",{"vendor":56,"product":109,"version":58,"criteria":110,"vulnerable":80},"h610c","cpe:2.3:h:netapp:h610c:-:*:*:*:*:*:*:*",{"vendor":56,"product":112,"version":58,"criteria":113,"vulnerable":4},"h610s_firmware","cpe:2.3:o:netapp:h610s_firmware:-:*:*:*:*:*:*:*",{"vendor":56,"product":115,"version":58,"criteria":116,"vulnerable":80},"h610s","cpe:2.3:h:netapp:h610s:-:*:*:*:*:*:*:*",23,[119,126,132,135,139,142,145,150,152,154,156,158,160,162,165,168,171],{"url":120,"source":121,"tags":122},"http:\u002F\u002Fwww.openwall.com\u002Flists\u002Foss-security\u002F2024\u002F03\u002F15\u002F1","Openwall",[123,124,125],"Mailing List","Patch","Release Notes",{"url":127,"source":128,"tags":129},"https:\u002F\u002Fgithub.com\u002Flibexpat\u002Flibexpat\u002Fissues\u002F839","GitHub",[130,131,124],"Exploit","Issue Tracking",{"url":133,"source":128,"tags":134},"https:\u002F\u002Fgithub.com\u002Flibexpat\u002Flibexpat\u002Fpull\u002F842",[131,124],{"url":136,"source":137,"tags":138},"https:\u002F\u002Flists.fedoraproject.org\u002Farchives\u002Flist\u002Fpackage-announce%40lists.fedoraproject.org\u002Fmessage\u002FFPLC6WDSRDUYS7F7JWAOVOHFNOUQ43DD\u002F","Fedoraproject",[123],{"url":140,"source":137,"tags":141},"https:\u002F\u002Flists.fedoraproject.org\u002Farchives\u002Flist\u002Fpackage-announce%40lists.fedoraproject.org\u002Fmessage\u002FLKJ7V5F6LJCEQJXDBWGT27J7NAP3E3N7\u002F",[123],{"url":143,"source":137,"tags":144},"https:\u002F\u002Flists.fedoraproject.org\u002Farchives\u002Flist\u002Fpackage-announce%40lists.fedoraproject.org\u002Fmessage\u002FVK2O34GH43NTHBZBN7G5Y6YKJKPUCTBE\u002F",[123],{"url":146,"source":147,"tags":148},"https:\u002F\u002Fsecurity.netapp.com\u002Fadvisory\u002Fntap-20240322-0001\u002F","Netapp",[149],"Third Party Advisory",{"url":120,"source":121,"tags":151},[123,124,125],{"url":127,"source":128,"tags":153},[130,131,124],{"url":133,"source":128,"tags":155},[131,124],{"url":136,"source":137,"tags":157},[123],{"url":140,"source":137,"tags":159},[123],{"url":143,"source":137,"tags":161},[123],{"url":163,"source":137,"tags":164},"https:\u002F\u002Flists.fedoraproject.org\u002Farchives\u002Flist\u002Fpackage-announce@lists.fedoraproject.org\u002Fmessage\u002FFPLC6WDSRDUYS7F7JWAOVOHFNOUQ43DD\u002F",[],{"url":166,"source":137,"tags":167},"https:\u002F\u002Flists.fedoraproject.org\u002Farchives\u002Flist\u002Fpackage-announce@lists.fedoraproject.org\u002Fmessage\u002FLKJ7V5F6LJCEQJXDBWGT27J7NAP3E3N7\u002F",[],{"url":169,"source":137,"tags":170},"https:\u002F\u002Flists.fedoraproject.org\u002Farchives\u002Flist\u002Fpackage-announce@lists.fedoraproject.org\u002Fmessage\u002FVK2O34GH43NTHBZBN7G5Y6YKJKPUCTBE\u002F",[],{"url":146,"source":147,"tags":172},[149],17,[175],{"id":176,"name":177,"description":178,"extendedDescription":179,"status":180,"abstraction":181,"structure":182},"CWE-776","Improper Restriction of Recursive Entity References in DTDs ('XML Entity Expansion')","The product uses XML documents and allows their structure to be defined with a Document Type Definition (DTD), but it does not properly control the number of recursive definitions of entities.","If the DTD contains a large number of nested or recursive entities, this can lead to explosive growth of data when parsed, causing a denial of service.","Draft","Base","Simple",1,[],{"title":186,"metaDescription":187,"keywords":188,"canonicalUrl":189,"structuredData":190},"What is CVE-2024-28757? Vulnerability Analysis | Security Advisory | Precursor Intelligence","Comprehensive analysis of CVE-2024-28757, a high severity cyber security vulnerability from 2024. libexpat through 2.6.1 allows an XML Entity Expansion attac...","CVE-2024-28757, CVE-2024-28757 vulnerability, CVE-2024-28757 security, high severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2024, CVSS score, exploit, patch, remediation, libexpat_project security, fedoraproject security, netapp security, libexpat vulnerability, fedora vulnerability, active_iq_unified_manager vulnerability, oncommand_workflow_automation vulnerability, ontap vulnerability","\u002Fwhat-is\u002Fcve-2024-28757",{"@context":191,"@type":192,"headline":186,"description":187,"datePublished":9,"dateModified":10,"author":193,"publisher":197,"about":201,"mainEntityOfPage":205,"articleSection":208,"keywords":209},"https:\u002F\u002Fschema.org","TechArticle",{"@type":194,"name":195,"url":196},"Organization","Precursor Intelligence","https:\u002F\u002Fprecursorintelligence.com",{"@type":194,"name":195,"url":196,"logo":198},{"@type":199,"url":200},"ImageObject","https:\u002F\u002Fprecursorintelligence.com\u002Fimg\u002Flogos\u002Feplogo.png",{"@type":202,"name":6,"description":203,"additionalType":204},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":206,"@id":207},"WebPage","https:\u002F\u002Fprecursorintelligence.com\u002Fwhat-is\u002Fcve-2024-28757","Cybersecurity","CVE-2024-28757, CVE-2024-28757 vulnerability, CVE-2024-28757 security, high severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[211,219,229,243,254,264,274,284,294,304],{"Operator":25,"Negate":25,"Nodes":212},[213],{"Operator":214,"Negate":80,"CPEMatch":215},"OR",[216],{"Vulnerable":4,"Criteria":43,"MatchCriteriaID":217,"VersionStartExcluding":25,"VersionStartIncluding":25,"VersionEndExcluding":218,"VersionEndIncluding":25},"463A4DD2-9DA6-420C-A361-293B1166B9C6","2.6.2",{"Operator":25,"Negate":25,"Nodes":220},[221],{"Operator":214,"Negate":80,"CPEMatch":222},[223,225,227],{"Vulnerable":4,"Criteria":48,"MatchCriteriaID":224,"VersionStartExcluding":25,"VersionStartIncluding":25,"VersionEndExcluding":25,"VersionEndIncluding":25},"CC559B26-5DFC-4B7A-A27C-B77DE755DFF9",{"Vulnerable":4,"Criteria":51,"MatchCriteriaID":226,"VersionStartExcluding":25,"VersionStartIncluding":25,"VersionEndExcluding":25,"VersionEndIncluding":25},"B8EDB836-4E6A-4B71-B9B2-AA3E03E0F646",{"Vulnerable":4,"Criteria":54,"MatchCriteriaID":228,"VersionStartExcluding":25,"VersionStartIncluding":25,"VersionEndExcluding":25,"VersionEndIncluding":25},"CA277A6C-83EC-4536-9125-97B84C4FAF59",{"Operator":25,"Negate":25,"Nodes":230},[231],{"Operator":214,"Negate":80,"CPEMatch":232},[233,235,237,239,241],{"Vulnerable":4,"Criteria":59,"MatchCriteriaID":234,"VersionStartExcluding":25,"VersionStartIncluding":25,"VersionEndExcluding":25,"VersionEndIncluding":25},"3A756737-1CC4-42C2-A4DF-E1C893B4E2D5",{"Vulnerable":4,"Criteria":62,"MatchCriteriaID":236,"VersionStartExcluding":25,"VersionStartIncluding":25,"VersionEndExcluding":25,"VersionEndIncluding":25},"5735E553-9731-4AAC-BCFF-989377F817B3",{"Vulnerable":4,"Criteria":66,"MatchCriteriaID":238,"VersionStartExcluding":25,"VersionStartIncluding":25,"VersionEndExcluding":25,"VersionEndIncluding":25},"A20333EE-4C13-426E-8B54-D78679D5DDB8",{"Vulnerable":4,"Criteria":70,"MatchCriteriaID":240,"VersionStartExcluding":25,"VersionStartIncluding":25,"VersionEndExcluding":25,"VersionEndIncluding":25},"5333B745-F7A3-46CB-8437-8668DB08CD6F",{"Vulnerable":4,"Criteria":73,"MatchCriteriaID":242,"VersionStartExcluding":25,"VersionStartIncluding":25,"VersionEndExcluding":25,"VersionEndIncluding":25},"15282AE5-2005-4852-8FC8-EF2CE0E28FB4",{"Operator":244,"Negate":25,"Nodes":245},"AND",[246,250],{"Operator":214,"Negate":80,"CPEMatch":247},[248],{"Vulnerable":4,"Criteria":76,"MatchCriteriaID":249,"VersionStartExcluding":25,"VersionStartIncluding":25,"VersionEndExcluding":25,"VersionEndIncluding":25},"6770B6C3-732E-4E22-BF1C-2D2FD610061C",{"Operator":214,"Negate":80,"CPEMatch":251},[252],{"Vulnerable":80,"Criteria":79,"MatchCriteriaID":253,"VersionStartExcluding":25,"VersionStartIncluding":25,"VersionEndExcluding":25,"VersionEndIncluding":25},"9F9C8C20-42EB-4AB5-BD97-212DEB070C43",{"Operator":244,"Negate":25,"Nodes":255},[256,260],{"Operator":214,"Negate":80,"CPEMatch":257},[258],{"Vulnerable":4,"Criteria":83,"MatchCriteriaID":259,"VersionStartExcluding":25,"VersionStartIncluding":25,"VersionEndExcluding":25,"VersionEndIncluding":25},"7FFF7106-ED78-49BA-9EC5-B889E3685D53",{"Operator":214,"Negate":80,"CPEMatch":261},[262],{"Vulnerable":80,"Criteria":86,"MatchCriteriaID":263,"VersionStartExcluding":25,"VersionStartIncluding":25,"VersionEndExcluding":25,"VersionEndIncluding":25},"E63D8B0F-006E-4801-BF9D-1C001BBFB4F9",{"Operator":244,"Negate":25,"Nodes":265},[266,270],{"Operator":214,"Negate":80,"CPEMatch":267},[268],{"Vulnerable":4,"Criteria":89,"MatchCriteriaID":269,"VersionStartExcluding":25,"VersionStartIncluding":25,"VersionEndExcluding":25,"VersionEndIncluding":25},"56409CEC-5A1E-4450-AA42-641E459CC2AF",{"Operator":214,"Negate":80,"CPEMatch":271},[272],{"Vulnerable":80,"Criteria":92,"MatchCriteriaID":273,"VersionStartExcluding":25,"VersionStartIncluding":25,"VersionEndExcluding":25,"VersionEndIncluding":25},"B06F4839-D16A-4A61-9BB5-55B13F41E47F",{"Operator":244,"Negate":25,"Nodes":275},[276,280],{"Operator":214,"Negate":80,"CPEMatch":277},[278],{"Vulnerable":4,"Criteria":95,"MatchCriteriaID":279,"VersionStartExcluding":25,"VersionStartIncluding":25,"VersionEndExcluding":25,"VersionEndIncluding":25},"D0B4AD8A-F172-4558-AEC6-FF424BA2D912",{"Operator":214,"Negate":80,"CPEMatch":281},[282],{"Vulnerable":80,"Criteria":98,"MatchCriteriaID":283,"VersionStartExcluding":25,"VersionStartIncluding":25,"VersionEndExcluding":25,"VersionEndIncluding":25},"8497A4C9-8474-4A62-8331-3FE862ED4098",{"Operator":244,"Negate":25,"Nodes":285},[286,290],{"Operator":214,"Negate":80,"CPEMatch":287},[288],{"Vulnerable":4,"Criteria":101,"MatchCriteriaID":289,"VersionStartExcluding":25,"VersionStartIncluding":25,"VersionEndExcluding":25,"VersionEndIncluding":25},"234DEFE0-5CE5-4B0A-96B8-5D227CB8ED31",{"Operator":214,"Negate":80,"CPEMatch":291},[292],{"Vulnerable":80,"Criteria":104,"MatchCriteriaID":293,"VersionStartExcluding":25,"VersionStartIncluding":25,"VersionEndExcluding":25,"VersionEndIncluding":25},"CDDF61B7-EC5C-467C-B710-B89F502CD04F",{"Operator":244,"Negate":25,"Nodes":295},[296,300],{"Operator":214,"Negate":80,"CPEMatch":297},[298],{"Vulnerable":4,"Criteria":107,"MatchCriteriaID":299,"VersionStartExcluding":25,"VersionStartIncluding":25,"VersionEndExcluding":25,"VersionEndIncluding":25},"89612649-BACF-4FAC-9BA4-324724FD93A6",{"Operator":214,"Negate":80,"CPEMatch":301},[302],{"Vulnerable":80,"Criteria":110,"MatchCriteriaID":303,"VersionStartExcluding":25,"VersionStartIncluding":25,"VersionEndExcluding":25,"VersionEndIncluding":25},"F3D9B255-C1AF-42D1-BF9B-13642FBDC080",{"Operator":244,"Negate":25,"Nodes":305},[306,310],{"Operator":214,"Negate":80,"CPEMatch":307},[308],{"Vulnerable":4,"Criteria":113,"MatchCriteriaID":309,"VersionStartExcluding":25,"VersionStartIncluding":25,"VersionEndExcluding":25,"VersionEndIncluding":25},"FD7CFE0E-9D1E-4495-B302-89C3096FC0DF",{"Operator":214,"Negate":80,"CPEMatch":311},[312],{"Vulnerable":80,"Criteria":116,"MatchCriteriaID":313,"VersionStartExcluding":25,"VersionStartIncluding":25,"VersionEndExcluding":25,"VersionEndIncluding":25},"F63A3FA7-AAED-4A9D-9FDE-6195302DA0F6",[],[],{"lastModified":10,"cacheTime":317,"version":318},1792362030051,"2.0",{"score":320,"band":321,"action":322,"scoredAt":323},48,"Medium","Plan remediation","2026-10-16T07:01:04.229156+00:00"]