AUGUST 4, 2026
Live Feed
Back to database
Case File

CVE-2024-28168

HIGH · CVSS 7.5 EPSS 1.04%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2024-10-09 · Last synced 2026-08-04

CyberRota Analysis

This is a high severity vulnerability with a CVSS score of 7.5. It affects Apache.

CVE
CVE-2024-28168
Severity
HIGH
CVSS
7.5
EPSS
1.04%
Apache

Original NVD Description

Improper Restriction of XML External Entity Reference ('XXE') vulnerability in Apache XML Graphics FOP. This issue affects Apache XML Graphics FOP: 2.9. Users are recommended to upgrade to version 2.10, which fixes the issue.

Related CVEs

Other vulnerabilities affecting the same vendor(s)

CVE-2026-65100 MEDIUM CVE-2026-58189 HIGH CVE-2026-58188 HIGH CVE-2026-58187 LOW CVE-2026-58186 HIGH CVE-2026-58185 MEDIUM