Skip to contentAdobe Commerce vulnerabilities
- adobe commerce, magento +1 moreAdobe Commerce | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') (CWE-89)CVE-2023-38249Fix available8.0 High
- adobe commerce, magento +1 moreAdobe Commerce | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') (CWE-89)CVE-2023-38221Fix available8.0 High
- adobe commerce, magento open source +1 moreAdobe Commerce post-auth improper input validation leads to remote code executionCVE-2022-24093Fix available9.1 Critical
- adobe commerce, magento +1 moreMagento Commerce Media Gallery Upload Improper Access Control Could Lead To Remote Code ExecutionCVE-2021-36036Fix available7.2 High
- adobe commerce, magento +1 moreMagento Commerce CMS Page Improper Input Validation Could Lead To Remote Code ExecutionCVE-2021-36021Fix available7.2 High
- adobe commerce, magento +1 moreMagento Commerce Widgets Update Layout XML Injection Vulnerability Could Lead To Remote Code ExecutionCVE-2021-36023Fix available9.1 Critical
- adobe commerceAdobe Commerce XML Injection (aka Blind XPath Injection) Arbitrary file system readCVE-2023-38207Fix available7.5 High
- adobe commerce, magento commerce +1 moreValidate Your Inputs | Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') (CWE-78)CVE-2023-38208Fix available9.1 Critical
- adobe commerce, magento commerce +1 moreAdobe Commerce Incorrect Authorization Security feature bypassCVE-2023-38209Fix available6.5 Medium
- adobe commerce, magento, magento commerce +2 moreAdmin-to-admin stored XSS via cache poisoningCVE-2023-29297Fix available9.1 Critical
- adobe commerce, magento, magento commerce +2 more[Cloud] Customer suspects IDOR vulnerabilityCVE-2023-29296Fix available4.3 Medium
- adobe commerce, magento, magento commerce +2 moreInsecure Direct Object Reference (IDOR) in Create Quote FunctionCVE-2023-29295Fix available4.3 Medium
- adobe commerce, magento, magento commerce +2 moreBypass Purchase Order Approval using Company User in Adobe Commerce B2BCVE-2023-29294Fix available4.3 Medium
- adobe commerce, magento +1 moreAdobe Commerce | Improper Input Validation (CWE-20)CVE-2023-29293Fix available2.7 Low
- adobe commerce, magento, magento commerce +2 moreServer Side Request Forgery (SSRF) in FedEx carrier integration configurationCVE-2023-29292Fix available4.9 Medium
- adobe commerce, magento, magento commerce +2 moreServer Side Request Forgery (SSRF) in USPS carrier integration configurationCVE-2023-29291Fix available4.9 Medium
- adobe commerce, magento, magento commerce +2 moreAdobe Commerce Guest Cart Shipping Address Overwrite IDORCVE-2023-29290Fix available5.3 Medium
- adobe commerce, magento, magento commerce +2 moreAdobe Commerce XML Injection Security feature bypassCVE-2023-29289Fix available6.5 Medium
- adobe commerce, magento +1 moreAdobe Commerce | Incorrect Authorization (CWE-863)CVE-2023-29288Fix available4.3 Medium
- adobe commerce, magento, magento commerce +2 moreAdobe Commerce Information Exposure Security feature bypassCVE-2023-29287Fix available5.3 Medium
- adobe commerce, magento, magento commerce +2 moreAdobe Commerce Incorrect Authorization Security feature bypassCVE-2023-22248Fix available7.5 High
- adobe commerce, magento commerce, magento open source +2 moreAdobe Commerce Incorrect Authorization Security feature bypassCVE-2023-22251Fix available4.3 Medium
- adobe commerce, magento commerce, magento open source +2 moreAdobe Commerce Improper Access Control Security feature bypassCVE-2023-22250Fix available5.3 Medium
- adobe commerce, magento commerce, magento open source +2 moreAdobe Commerce Stored XSS Arbitrary code executionCVE-2023-22249EPSS 58.5%4.8 Medium
- adobe commerce, magento commerce, magento open source +2 moreAdobe Commerce XML Injection Arbitrary file system readCVE-2023-22247Fix available7.5 High
- adobe commerce, magento +1 more[CVE-2021-36032] Magento IDOR Leads to Account TakeoverCVE-2022-42344Fix available8.8 High
- adobe commerce, magento commerce, magento open source +2 moreAdobe Commerce Improper Access Control Security feature bypassCVE-2022-35689Fix available5.3 Medium
- adobe commerce, magento commerce, magento open source +2 moreAdobe Commerce Stored XSS Arbitrary code executionCVE-2022-35698Public exploitEPSS 14.7%10.0 Critical
- adobe commerce, magento commerce +1 moreAdobe Commerce Improper Access Control Security feature bypassCVE-2022-35692Fix available5.3 Medium
- adobe commerce, magento commerce, magento +2 moreAdobe Commerce Improper Access Control Security feature bypassCVE-2022-34259Fix available5.3 Medium
- adobe commerce, magento commerce, magento +2 moreAdobe Commerce Stored XSS Arbitrary code executionCVE-2022-34257Fix available6.1 Medium
- adobe commerce, magento commerce, magento +2 moreAdobe Commerce XML Injection Arbitrary code executionCVE-2022-34253Fix available9.1 Critical
- adobe commerce, magento commerce, magento +2 moreAdobe Commerce Improper Access Control Privilege escalationCVE-2022-34255Fix available8.8 High
- adobe commerce, magento commerce, magento +2 moreAdobe Commerce Improper Limitation of a Pathname to a Restricted Directory Arbitrary code executionCVE-2022-34254Fix available8.5 High
- adobe commerce, magento commerce, magento +2 moreAdobe Commerce Improper Authorization Privilege escalationCVE-2022-34256Fix available7.5 High
- adobe commerce, magento commerce, magento +2 moreAdobe Commerce Stored XSS Arbitrary code executionCVE-2022-34258Fix availableEPSS 69.9%4.8 Medium
- adobe commerce, commerce and magento open source, magento +1 more +3 moreAdobe Commerce checkout improper input validation leads to remote code executionCVE-2022-24086In KEVPublic exploitFix availableEPSS 99.2%9.8 Critical
- adobe commerce, magento commerce, magento open source +2 moreAdobe Commerce Cross-Site Request Forgery (CSRF) Could Lead To Unauthorized Cart AdditionCVE-2021-39864Fix available6.5 Medium
- adobe magento commerce, magento +1 moreMagento Commerce improper authorization allows an authenticated user to perform certain functions without permissionCVE-2021-28567Fix available5.0 Medium
- adobe magento commerce, magento +1 moreMagento Commerce information disclosure during upload action leveraging a specially crafted fileCVE-2021-28566Fix available3.7 Low
- adobe commerce, magento commerce, magento open source +2 moreMagento Commerce GraphQL Improper Input Validation Could Lead To Denial Of ServiceCVE-2021-36044Fix available7.5 High
- adobe commerce, magento commerce, magento open source +2 moreMagento Commerce Stored Cross-site Scripting VulnerabilityCVE-2021-36027Fix available6.5 Medium
- adobe commerce, magento commerce, magento open source +2 moreMagento Commerce Authenticated Blind SSRF Could Lead To Remote Code ExecutionCVE-2021-36043Fix available8.0 High
- adobe commerce, magento commerce, magento open source +2 moreMagento Commerce API File Option Upload Extension Improper Input Validation Vulnerability Could Lead To Remote Code ExecutionCVE-2021-36042Fix available9.1 Critical
- adobe commerce, magento commerce, magento open source +2 moreMagento Commerce Improper Input Validation During Checkout Process Could Lead To Privilege EscalationCVE-2021-36030Fix available7.5 High
- adobe commerce, magento commerce, magento open source +2 moreMagento Commerce Improper Input Validation Could Lead To Remote Code ExecutionCVE-2021-36041Fix available9.1 Critical
- adobe commerce, magento commerce, magento open source +2 moreMagento Commerce Improper Input Validation Could Lead To Remote Code ExecutionCVE-2021-36040Fix available9.1 Critical
- adobe commerce, magento commerce, magento open source +2 moreMagento Commerce Customer Edition Improper Input Validation Could Lead To Remote Code ExecutionCVE-2021-36025Fix available9.1 Critical
- adobe commerce, magento commerce, magento open source +2 moreMagento Commerce XML Injection Vulnerability In The 'City' Field Could Lead To Remote Code ExecutionCVE-2021-36020Fix available8.2 High
- adobe commerce, magento commerce, magento open source +2 moreMagento Commerce Stock Media Improper Input Validation Could Lead To Remote Code ExecutionCVE-2021-360359.1 Critical
- Show moreLoading…