CVE-2024-55635 - Vulnerability Details

Vendors	Products
Drupal	Drupal

Link	Providers
https://www.drupal.org/sa-core-2024-005

Type	Values Removed	Values Added
Metrics	epss `{'score': 0.00054}`	epss `{'score': 0.00082}`

Type	Values Removed	Values Added
First Time appeared		Drupal Drupal drupal
CPEs		cpe:2.3:a:drupal:drupal::::::::
Vendors & Products		Drupal Drupal drupal

Type	Values Removed	Values Added
Metrics		cvssV3_1 `{'score': 6.1, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N'}` ssvc `{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}`

Type	Values Removed	Values Added
Description		Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Drupal Core allows Cross-Site Scripting (XSS).This issue affects Drupal Core: from 7.0 before 7.102.
Title		Drupal core - Critical - Cross Site Scripting - SA-CORE-2024-005
Weaknesses		CWE-79
References		https://www.drupal.org/sa-core-2024-005

Show plain JSON

{"dataType": "CVE_RECORD", "dataVersion": "5.1", "cveMetadata": {"cveId": "CVE-2024-55635", "assignerOrgId": "2c85b837-eb8b-40ed-9d74-228c62987387", "state": "PUBLISHED", "assignerShortName": "drupal", "dateReserved": "2024-12-09T23:07:41.397Z", "datePublished": "2024-12-09T23:23:38.742Z", "dateUpdated": "2024-12-10T21:18:04.893Z"}, "containers": {"cna": {"affected": [{"collectionURL": "https://www.drupal.org/project/drupal/", "defaultStatus": "unaffected", "product": "Drupal Core", "repo": "https://git.drupalcode.org/project/drupal", "vendor": "Drupal", "versions": [{"lessThan": "7.102", "status": "affected", "version": "7.0", "versionType": "semver"}]}], "credits": [{"lang": "en", "type": "finder", "value": "Cesar"}, {"lang": "en", "type": "remediation developer", "value": "Greg Knaddison"}, {"lang": "en", "type": "remediation developer", "value": "Matthew Grill"}, {"lang": "en", "type": "remediation developer", "value": "Wim Leers"}, {"lang": "en", "type": "remediation developer", "value": "Drew Webber"}, {"lang": "en", "type": "remediation developer", "value": "Ra M\u00e4nd"}, {"lang": "en", "type": "remediation developer", "value": "Fabian Franz"}, {"lang": "en", "type": "remediation developer", "value": "Juraj Nemec"}, {"lang": "en", "type": "coordinator", "value": "xjm"}], "datePublic": "2024-11-21T03:23:00.000Z", "descriptions": [{"lang": "en", "supportingMedia": [{"base64": false, "type": "text/html", "value": "Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Drupal Core allows Cross-Site Scripting (XSS).<p>This issue affects Drupal Core: from 7.0 before 7.102.</p>"}], "value": "Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Drupal Core allows Cross-Site Scripting (XSS).This issue affects Drupal Core: from 7.0 before 7.102."}], "impacts": [{"capecId": "CAPEC-63", "descriptions": [{"lang": "en", "value": "CAPEC-63 Cross-Site Scripting (XSS)"}]}], "problemTypes": [{"descriptions": [{"cweId": "CWE-79", "description": "CWE-79 Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting')", "lang": "en", "type": "CWE"}]}], "providerMetadata": {"orgId": "2c85b837-eb8b-40ed-9d74-228c62987387", "shortName": "drupal", "dateUpdated": "2024-12-09T23:23:38.742Z"}, "references": [{"url": "https://www.drupal.org/sa-core-2024-005"}], "source": {"discovery": "UNKNOWN"}, "title": "Drupal core - Critical - Cross Site Scripting - SA-CORE-2024-005", "x_generator": {"engine": "Vulnogram 0.2.0"}}, "adp": [{"metrics": [{"cvssV3_1": {"scope": "CHANGED", "version": "3.1", "baseScore": 6.1, "attackVector": "NETWORK", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "integrityImpact": "LOW", "userInteraction": "REQUIRED", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "NONE", "confidentialityImpact": "LOW"}}, {"other": {"type": "ssvc", "content": {"timestamp": "2024-12-10T21:17:31.860803Z", "id": "CVE-2024-55635", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2024-12-10T21:18:04.893Z"}}]}}

{

dataType : CVE_RECORD (string)

dataVersion : 5.1 (string)

cveMetadata : { »

cveId : CVE-2024-55635 (string)

assignerOrgId : 2c85b837-eb8b-40ed-9d74-228c62987387 (string)

state : PUBLISHED (string)

assignerShortName : drupal (string)

dateReserved : 2024-12-09T23:07:41.397Z (string)

datePublished : 2024-12-09T23:23:38.742Z (string)

dateUpdated : 2024-12-10T21:18:04.893Z (string)

}

containers : { »

cna : { »

affected : [ »

0 : { »

collectionURL : https://www.drupal.org/project/drupal/ (string)

defaultStatus : unaffected (string)

product : Drupal Core (string)

repo : https://git.drupalcode.org/project/drupal (string)

vendor : Drupal (string)

versions : [ »

0 : { »

lessThan : 7.102 (string)

status : affected (string)

version : 7.0 (string)

versionType : semver (string)

}

]

}

]

credits : [ »

0 : { »

lang : en (string)

type : finder (string)

value : Cesar (string)

}

1 : { »

lang : en (string)

type : remediation developer (string)

value : Greg Knaddison (string)

}

2 : { »

lang : en (string)

type : remediation developer (string)

value : Matthew Grill (string)

}

3 : { »

lang : en (string)

type : remediation developer (string)

value : Wim Leers (string)

}

4 : { »

lang : en (string)

type : remediation developer (string)

value : Drew Webber (string)

}

5 : { »

lang : en (string)

type : remediation developer (string)

value : Ra Mänd (string)

}

6 : { »

lang : en (string)

type : remediation developer (string)

value : Fabian Franz (string)

}

7 : { »

lang : en (string)

type : remediation developer (string)

value : Juraj Nemec (string)

}

8 : { »

lang : en (string)

type : coordinator (string)

value : xjm (string)

}

]

datePublic : 2024-11-21T03:23:00.000Z (string)

descriptions : [ »

0 : { »

lang : en (string)

supportingMedia : [ »

0 : { »

base64 : false (boolean)

type : text/html (string)

value : Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Drupal Core allows Cross-Site Scripting (XSS).<p>This issue affects Drupal Core: from 7.0 before 7.102.</p> (string)

}

]

value : Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Drupal Core allows Cross-Site Scripting (XSS).This issue affects Drupal Core: from 7.0 before 7.102. (string)

}

]

impacts : [ »

0 : { »

capecId : CAPEC-63 (string)

descriptions : [ »

0 : { »

lang : en (string)

value : CAPEC-63 Cross-Site Scripting (XSS) (string)

}

]

}

]

problemTypes : [ »

0 : { »

descriptions : [ »

0 : { »

cweId : CWE-79 (string)

description : CWE-79 Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') (string)

lang : en (string)

type : CWE (string)

}

]

}

]

providerMetadata : { »

orgId : 2c85b837-eb8b-40ed-9d74-228c62987387 (string)

shortName : drupal (string)

dateUpdated : 2024-12-09T23:23:38.742Z (string)

}

references : [ »

0 : { »

url : https://www.drupal.org/sa-core-2024-005 (string)

}

]

source : { »

discovery : UNKNOWN (string)

}

title : Drupal core - Critical - Cross Site Scripting - SA-CORE-2024-005 (string)

x_generator : { »

engine : Vulnogram 0.2.0 (string)

}

adp : [ »

0 : { »

metrics : [ »

0 : { »

cvssV3_1 : { »

scope : CHANGED (string)

version : 3.1 (string)

baseScore : 6.1 (number)

attackVector : NETWORK (string)

baseSeverity : MEDIUM (string)

vectorString : CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N (string)

integrityImpact : LOW (string)

userInteraction : REQUIRED (string)

attackComplexity : LOW (string)

availabilityImpact : NONE (string)

privilegesRequired : NONE (string)

confidentialityImpact : LOW (string)

}

1 : { »

other : { »

type : ssvc (string)

content : { »

timestamp : 2024-12-10T21:17:31.860803Z (string)

id : CVE-2024-55635 (string)

options : [ »

0 : { »

Exploitation : none (string)

}

1 : { »

Automatable : no (string)

}

2 : { »

Technical Impact : partial (string)

}

]

role : CISA Coordinator (string)

version : 2.0.3 (string)

}

]

title : CISA ADP Vulnrichment (string)

providerMetadata : { »

orgId : 134c704f-9b21-4f2e-91b3-4a467353bcc0 (string)

shortName : CISA-ADP (string)

dateUpdated : 2024-12-10T21:18:04.893Z (string)

}

]

}

Show plain JSON

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"cvssV3_1": {"scope": "CHANGED", "version": "3.1", "baseScore": 6.1, "attackVector": "NETWORK", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "integrityImpact": "LOW", "userInteraction": "REQUIRED", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "NONE", "confidentialityImpact": "LOW"}}, {"other": {"type": "ssvc", "content": {"id": "CVE-2024-55635", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "version": "2.0.3", "timestamp": "2024-12-10T21:17:31.860803Z"}}}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2024-12-10T21:17:44.900Z"}}], "cna": {"title": "Drupal core - Critical - Cross Site Scripting - SA-CORE-2024-005", "source": {"discovery": "UNKNOWN"}, "credits": [{"lang": "en", "type": "finder", "value": "Cesar"}, {"lang": "en", "type": "remediation developer", "value": "Greg Knaddison"}, {"lang": "en", "type": "remediation developer", "value": "Matthew Grill"}, {"lang": "en", "type": "remediation developer", "value": "Wim Leers"}, {"lang": "en", "type": "remediation developer", "value": "Drew Webber"}, {"lang": "en", "type": "remediation developer", "value": "Ra M\u00e4nd"}, {"lang": "en", "type": "remediation developer", "value": "Fabian Franz"}, {"lang": "en", "type": "remediation developer", "value": "Juraj Nemec"}, {"lang": "en", "type": "coordinator", "value": "xjm"}], "impacts": [{"capecId": "CAPEC-63", "descriptions": [{"lang": "en", "value": "CAPEC-63 Cross-Site Scripting (XSS)"}]}], "affected": [{"repo": "https://git.drupalcode.org/project/drupal", "vendor": "Drupal", "product": "Drupal Core", "versions": [{"status": "affected", "version": "7.0", "lessThan": "7.102", "versionType": "semver"}], "collectionURL": "https://www.drupal.org/project/drupal/", "defaultStatus": "unaffected"}], "datePublic": "2024-11-21T03:23:00.000Z", "references": [{"url": "https://www.drupal.org/sa-core-2024-005"}], "x_generator": {"engine": "Vulnogram 0.2.0"}, "descriptions": [{"lang": "en", "value": "Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Drupal Core allows Cross-Site Scripting (XSS).This issue affects Drupal Core: from 7.0 before 7.102.", "supportingMedia": [{"type": "text/html", "value": "Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Drupal Core allows Cross-Site Scripting (XSS).<p>This issue affects Drupal Core: from 7.0 before 7.102.</p>", "base64": false}]}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-79", "description": "CWE-79 Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting')"}]}], "providerMetadata": {"orgId": "2c85b837-eb8b-40ed-9d74-228c62987387", "shortName": "drupal", "dateUpdated": "2024-12-09T23:23:38.742Z"}}}, "cveMetadata": {"cveId": "CVE-2024-55635", "state": "PUBLISHED", "dateUpdated": "2024-12-10T21:18:04.893Z", "dateReserved": "2024-12-09T23:07:41.397Z", "assignerOrgId": "2c85b837-eb8b-40ed-9d74-228c62987387", "datePublished": "2024-12-09T23:23:38.742Z", "assignerShortName": "drupal"}, "dataVersion": "5.1"}

{

dataType : CVE_RECORD (string)

containers : { »

adp : [ »

0 : { »

title : CISA ADP Vulnrichment (string)

metrics : [ »

0 : { »

cvssV3_1 : { »

scope : CHANGED (string)

version : 3.1 (string)

baseScore : 6.1 (number)

attackVector : NETWORK (string)

baseSeverity : MEDIUM (string)

vectorString : CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N (string)

integrityImpact : LOW (string)

userInteraction : REQUIRED (string)

attackComplexity : LOW (string)

availabilityImpact : NONE (string)

privilegesRequired : NONE (string)

confidentialityImpact : LOW (string)

}

1 : { »

other : { »

type : ssvc (string)

content : { »

id : CVE-2024-55635 (string)

role : CISA Coordinator (string)

options : [ »

0 : { »

Exploitation : none (string)

}

1 : { »

Automatable : no (string)

}

2 : { »

Technical Impact : partial (string)

}

]

version : 2.0.3 (string)

timestamp : 2024-12-10T21:17:31.860803Z (string)

}

]

providerMetadata : { »

orgId : 134c704f-9b21-4f2e-91b3-4a467353bcc0 (string)

shortName : CISA-ADP (string)

dateUpdated : 2024-12-10T21:17:44.900Z (string)

}

]

cna : { »

title : Drupal core - Critical - Cross Site Scripting - SA-CORE-2024-005 (string)

source : { »

discovery : UNKNOWN (string)

}

credits : [ »

0 : { »

lang : en (string)

type : finder (string)

value : Cesar (string)

}

1 : { »

lang : en (string)

type : remediation developer (string)

value : Greg Knaddison (string)

}

2 : { »

lang : en (string)

type : remediation developer (string)

value : Matthew Grill (string)

}

3 : { »

lang : en (string)

type : remediation developer (string)

value : Wim Leers (string)

}

4 : { »

lang : en (string)

type : remediation developer (string)

value : Drew Webber (string)

}

5 : { »

lang : en (string)

type : remediation developer (string)

value : Ra Mänd (string)

}

6 : { »

lang : en (string)

type : remediation developer (string)

value : Fabian Franz (string)

}

7 : { »

lang : en (string)

type : remediation developer (string)

value : Juraj Nemec (string)

}

8 : { »

lang : en (string)

type : coordinator (string)

value : xjm (string)

}

]

impacts : [ »

0 : { »

capecId : CAPEC-63 (string)

descriptions : [ »

0 : { »

lang : en (string)

value : CAPEC-63 Cross-Site Scripting (XSS) (string)

}

]

}

]

affected : [ »

0 : { »

repo : https://git.drupalcode.org/project/drupal (string)

vendor : Drupal (string)

product : Drupal Core (string)

versions : [ »

0 : { »

status : affected (string)

version : 7.0 (string)

lessThan : 7.102 (string)

versionType : semver (string)

}

]

collectionURL : https://www.drupal.org/project/drupal/ (string)

defaultStatus : unaffected (string)

}

]

datePublic : 2024-11-21T03:23:00.000Z (string)

references : [ »

0 : { »

url : https://www.drupal.org/sa-core-2024-005 (string)

}

]

x_generator : { »

engine : Vulnogram 0.2.0 (string)

}

descriptions : [ »

0 : { »

lang : en (string)

value : Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Drupal Core allows Cross-Site Scripting (XSS).This issue affects Drupal Core: from 7.0 before 7.102. (string)

supportingMedia : [ »

0 : { »

type : text/html (string)

value : Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Drupal Core allows Cross-Site Scripting (XSS).<p>This issue affects Drupal Core: from 7.0 before 7.102.</p> (string)

base64 : false (boolean)

}

]

}

]

problemTypes : [ »

0 : { »

descriptions : [ »

0 : { »

lang : en (string)

type : CWE (string)

cweId : CWE-79 (string)

description : CWE-79 Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') (string)

}

]

}

]

providerMetadata : { »

orgId : 2c85b837-eb8b-40ed-9d74-228c62987387 (string)

shortName : drupal (string)

dateUpdated : 2024-12-09T23:23:38.742Z (string)

}

cveMetadata : { »

cveId : CVE-2024-55635 (string)

state : PUBLISHED (string)

dateUpdated : 2024-12-10T21:18:04.893Z (string)

dateReserved : 2024-12-09T23:07:41.397Z (string)

assignerOrgId : 2c85b837-eb8b-40ed-9d74-228c62987387 (string)

datePublished : 2024-12-09T23:23:38.742Z (string)

assignerShortName : drupal (string)

}

dataVersion : 5.1 (string)

}

Show plain JSON

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:drupal:drupal:*:*:*:*:*:*:*:*", "matchCriteriaId": "B615DBF4-30B6-49D5-BD59-749C1D1EFE19", "versionEndExcluding": "7.102", "versionStartIncluding": "7.0", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "cveTags": [], "descriptions": [{"lang": "en", "value": "Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Drupal Core allows Cross-Site Scripting (XSS).This issue affects Drupal Core: from 7.0 before 7.102."}, {"lang": "es", "value": "La vulnerabilidad de neutralizaci\u00f3n incorrecta de la entrada durante la generaci\u00f3n de p\u00e1ginas web (XSS o 'Cross-site Scripting') en Drupal Core permite Cross-Site Scripting (XSS). Este problema afecta a Drupal Core: desde 7.0 hasta 7.102."}], "id": "CVE-2024-55635", "lastModified": "2025-06-02T16:22:31.120", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 6.1, "baseSeverity": "MEDIUM", "confidentialityImpact": "LOW", "integrityImpact": "LOW", "privilegesRequired": "NONE", "scope": "CHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "version": "3.1"}, "exploitabilityScore": 2.8, "impactScore": 2.7, "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "type": "Secondary"}]}, "published": "2024-12-10T00:15:22.433", "references": [{"source": "mlhess@drupal.org", "tags": ["Vendor Advisory"], "url": "https://www.drupal.org/sa-core-2024-005"}], "sourceIdentifier": "mlhess@drupal.org", "vulnStatus": "Analyzed", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-79"}], "source": "mlhess@drupal.org", "type": "Secondary"}, {"description": [{"lang": "en", "value": "CWE-79"}], "source": "nvd@nist.gov", "type": "Primary"}]}

{

configurations : [ »

0 : { »

nodes : [ »

0 : { »

cpeMatch : [ »

0 : { »

criteria : cpe:2.3:a:drupal:drupal:*:*:*:*:*:*:*:* (string)

matchCriteriaId : B615DBF4-30B6-49D5-BD59-749C1D1EFE19 (string)

versionEndExcluding : 7.102 (string)

versionStartIncluding : 7.0 (string)

vulnerable : true (boolean)

}

]

negate : false (boolean)

operator : OR (string)

}

]

}

]

cveTags : [ *empty* ]

descriptions : [ »

0 : { »

lang : en (string)

value : Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Drupal Core allows Cross-Site Scripting (XSS).This issue affects Drupal Core: from 7.0 before 7.102. (string)

}

1 : { »

lang : es (string)

value : La vulnerabilidad de neutralización incorrecta de la entrada durante la generación de páginas web (XSS o 'Cross-site Scripting') en Drupal Core permite Cross-Site Scripting (XSS). Este problema afecta a Drupal Core: desde 7.0 hasta 7.102. (string)

}

]

id : CVE-2024-55635 (string)

lastModified : 2025-06-02T16:22:31.120 (string)

metrics : { »

cvssMetricV31 : [ »

0 : { »

cvssData : { »

attackComplexity : LOW (string)

attackVector : NETWORK (string)

availabilityImpact : NONE (string)

baseScore : 6.1 (number)

baseSeverity : MEDIUM (string)

confidentialityImpact : LOW (string)

integrityImpact : LOW (string)

privilegesRequired : NONE (string)

scope : CHANGED (string)

userInteraction : REQUIRED (string)

vectorString : CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N (string)

version : 3.1 (string)

}

exploitabilityScore : 2.8 (number)

impactScore : 2.7 (number)

source : 134c704f-9b21-4f2e-91b3-4a467353bcc0 (string)

type : Secondary (string)

}

]

}

published : 2024-12-10T00:15:22.433 (string)

references : [ »

0 : { »

source : mlhess@drupal.org (string)

tags : [ »

0 : Vendor Advisory (string)

]

url : https://www.drupal.org/sa-core-2024-005 (string)

}

]

sourceIdentifier : mlhess@drupal.org (string)

vulnStatus : Analyzed (string)

weaknesses : [ »

0 : { »

description : [ »

0 : { »

lang : en (string)

value : CWE-79 (string)

}

]

source : mlhess@drupal.org (string)

type : Secondary (string)

}

1 : { »

description : [ »

0 : { »

lang : en (string)

value : CWE-79 (string)

}

]

source : nvd@nist.gov (string)

type : Primary (string)

}

]

}

Metrics

Attack Vector Network

Attack Complexity Low

Privileges Required None

Scope Changed

Confidentiality Impact Low

Integrity Impact Low

Availability Impact None

User Interaction Required

Exploitation none

Automatable no

Technical Impact partial

Affected Vendors & Products

Metrics

Attack Vector Network

Attack Complexity Low

Privileges Required None

Scope Changed

Confidentiality Impact Low

Integrity Impact Low

Availability Impact None

User Interaction Required

Exploitation none

Automatable no

Technical Impact partial

Affected Vendors & Products

JSON object

JSON object

JSON object

JSON object