Skip to contentAdobe Commerce vulnerabilities
- adobe commerce, magento +1 moreAdobe Commerce | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') (CWE-89)CVE-2023-38249Fix available8.0 High
- adobe commerce, magento +1 moreAdobe Commerce | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') (CWE-89)CVE-2023-38221Fix available8.0 High
- adobe commerce, magento open source +1 moreAdobe Commerce post-auth improper input validation leads to remote code executionCVE-2022-24093Fix available9.1 Critical
- adobe commerce, magento +1 moreMagento Commerce Media Gallery Upload Improper Access Control Could Lead To Remote Code ExecutionCVE-2021-36036Fix available7.2 High
- adobe commerce, magento +1 moreMagento Commerce CMS Page Improper Input Validation Could Lead To Remote Code ExecutionCVE-2021-36021Fix available7.2 High
- adobe commerce, magento +1 moreMagento Commerce Widgets Update Layout XML Injection Vulnerability Could Lead To Remote Code ExecutionCVE-2021-36023Fix available9.1 Critical
- adobe commerceAdobe Commerce XML Injection (aka Blind XPath Injection) Arbitrary file system readCVE-2023-38207Fix available7.5 High
- adobe commerce, magento +1 moreAdobe Commerce | Improper Input Validation (CWE-20)CVE-2023-29293Fix available2.7 Low
- adobe commerce, magento +1 moreAdobe Commerce | Incorrect Authorization (CWE-863)CVE-2023-29288Fix available4.3 Medium
- adobe commerce, magento +1 more[CVE-2021-36032] Magento IDOR Leads to Account TakeoverCVE-2022-42344Fix available8.8 High