Adobe Magento Commerce vulnerabilities

• adobe commerce, magento commerce +1 more Validate Your Inputs | Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') (CWE-78) CVE-2023-38208 Fix available 9.1 CriticalAugust 9, 2023
• adobe commerce, magento commerce +1 more Adobe Commerce Incorrect Authorization Security feature bypass CVE-2023-38209 Fix available 6.5 MediumAugust 9, 2023
• adobe commerce, magento, magento commerce +2 more Admin-to-admin stored XSS via cache poisoning CVE-2023-29297 Fix available 9.1 CriticalJune 15, 2023
• adobe commerce, magento, magento commerce +2 more [Cloud] Customer suspects IDOR vulnerability CVE-2023-29296 Fix available 4.3 MediumJune 15, 2023
• adobe commerce, magento, magento commerce +2 more Insecure Direct Object Reference (IDOR) in Create Quote Function CVE-2023-29295 Fix available 4.3 MediumJune 15, 2023
• adobe commerce, magento, magento commerce +2 more Bypass Purchase Order Approval using Company User in Adobe Commerce B2B CVE-2023-29294 Fix available 4.3 MediumJune 15, 2023
• adobe commerce, magento, magento commerce +2 more Server Side Request Forgery (SSRF) in FedEx carrier integration configuration CVE-2023-29292 Fix available 4.9 MediumJune 15, 2023
• adobe commerce, magento, magento commerce +2 more Server Side Request Forgery (SSRF) in USPS carrier integration configuration CVE-2023-29291 Fix available 4.9 MediumJune 15, 2023
• adobe commerce, magento, magento commerce +2 more Adobe Commerce Guest Cart Shipping Address Overwrite IDOR CVE-2023-29290 Fix available 5.3 MediumJune 15, 2023
• adobe commerce, magento, magento commerce +2 more Adobe Commerce XML Injection Security feature bypass CVE-2023-29289 Fix available 6.5 MediumJune 15, 2023
• adobe commerce, magento, magento commerce +2 more Adobe Commerce Information Exposure Security feature bypass CVE-2023-29287 Fix available 5.3 MediumJune 15, 2023
• adobe commerce, magento, magento commerce +2 more Adobe Commerce Incorrect Authorization Security feature bypass CVE-2023-22248 Fix available 7.5 HighJune 15, 2023
• adobe commerce, magento commerce, magento open source +2 more Adobe Commerce Incorrect Authorization Security feature bypass CVE-2023-22251 Fix available 4.3 MediumMarch 27, 2023
• adobe commerce, magento commerce, magento open source +2 more Adobe Commerce Improper Access Control Security feature bypass CVE-2023-22250 Fix available 5.3 MediumMarch 27, 2023
• adobe commerce, magento commerce, magento open source +2 more Adobe Commerce Stored XSS Arbitrary code execution CVE-2023-22249 EPSS 58.5% 4.8 MediumMarch 27, 2023
• adobe commerce, magento commerce, magento open source +2 more Adobe Commerce XML Injection Arbitrary file system read CVE-2023-22247 Fix available 7.5 HighMarch 27, 2023
• adobe commerce, magento commerce, magento open source +2 more Adobe Commerce Improper Access Control Security feature bypass CVE-2022-35689 Fix available 5.3 MediumOctober 14, 2022
• adobe commerce, magento commerce, magento open source +2 more Adobe Commerce Stored XSS Arbitrary code execution CVE-2022-35698 Public exploit EPSS 14.7% 10.0 CriticalOctober 14, 2022
• adobe commerce, magento commerce +1 more Adobe Commerce Improper Access Control Security feature bypass CVE-2022-35692 Fix available 5.3 MediumAugust 19, 2022
• adobe commerce, magento commerce, magento +2 more Adobe Commerce Improper Access Control Security feature bypass CVE-2022-34259 Fix available 5.3 MediumAugust 16, 2022
• adobe commerce, magento commerce, magento +2 more Adobe Commerce Stored XSS Arbitrary code execution CVE-2022-34257 Fix available 6.1 MediumAugust 16, 2022
• adobe commerce, magento commerce, magento +2 more Adobe Commerce XML Injection Arbitrary code execution CVE-2022-34253 Fix available 9.1 CriticalAugust 16, 2022
• adobe commerce, magento commerce, magento +2 more Adobe Commerce Improper Access Control Privilege escalation CVE-2022-34255 Fix available 8.8 HighAugust 16, 2022
• adobe commerce, magento commerce, magento +2 more Adobe Commerce Improper Limitation of a Pathname to a Restricted Directory Arbitrary code execution CVE-2022-34254 Fix available 8.5 HighAugust 16, 2022
• adobe commerce, magento commerce, magento +2 more Adobe Commerce Improper Authorization Privilege escalation CVE-2022-34256 Fix available 7.5 HighAugust 16, 2022
• adobe commerce, magento commerce, magento +2 more Adobe Commerce Stored XSS Arbitrary code execution CVE-2022-34258 Fix available EPSS 69.9% 4.8 MediumAugust 16, 2022
• adobe commerce, commerce and magento open source, magento +1 more +3 more Adobe Commerce checkout improper input validation leads to remote code execution CVE-2022-24086 In KEVPublic exploitFix available EPSS 99.2% 9.8 CriticalFebruary 16, 2022
• adobe commerce, magento commerce, magento open source +2 more Adobe Commerce Cross-Site Request Forgery (CSRF) Could Lead To Unauthorized Cart Addition CVE-2021-39864 Fix available 6.5 MediumOctober 15, 2021
• adobe magento commerce, magento +1 more Magento Commerce improper authorization allows an authenticated user to perform certain functions without permission CVE-2021-28567 Fix available 5.0 MediumSeptember 8, 2021
• adobe magento commerce, magento +1 more Magento Commerce information disclosure during upload action leveraging a specially crafted file CVE-2021-28566 Fix available 3.7 LowSeptember 8, 2021
• adobe commerce, magento commerce, magento open source +2 more Magento Commerce GraphQL Improper Input Validation Could Lead To Denial Of Service CVE-2021-36044 Fix available 7.5 HighSeptember 1, 2021
• adobe commerce, magento commerce, magento open source +2 more Magento Commerce Stored Cross-site Scripting Vulnerability CVE-2021-36027 Fix available 6.5 MediumSeptember 1, 2021
• adobe commerce, magento commerce, magento open source +2 more Magento Commerce Authenticated Blind SSRF Could Lead To Remote Code Execution CVE-2021-36043 Fix available 8.0 HighSeptember 1, 2021
• adobe commerce, magento commerce, magento open source +2 more Magento Commerce API File Option Upload Extension Improper Input Validation Vulnerability Could Lead To Remote Code Execution CVE-2021-36042 Fix available 9.1 CriticalSeptember 1, 2021
• adobe commerce, magento commerce, magento open source +2 more Magento Commerce Improper Input Validation During Checkout Process Could Lead To Privilege Escalation CVE-2021-36030 Fix available 7.5 HighSeptember 1, 2021
• adobe commerce, magento commerce, magento open source +2 more Magento Commerce Improper Input Validation Could Lead To Remote Code Execution CVE-2021-36041 Fix available 9.1 CriticalSeptember 1, 2021
• adobe commerce, magento commerce, magento open source +2 more Magento Commerce Improper Input Validation Could Lead To Remote Code Execution CVE-2021-36040 Fix available 9.1 CriticalSeptember 1, 2021
• adobe commerce, magento commerce, magento open source +2 more Magento Commerce Customer Edition Improper Input Validation Could Lead To Remote Code Execution CVE-2021-36025 Fix available 9.1 CriticalSeptember 1, 2021
• adobe commerce, magento commerce, magento open source +2 more Magento Commerce XML Injection Vulnerability In The 'City' Field Could Lead To Remote Code Execution CVE-2021-36020 Fix available 8.2 HighSeptember 1, 2021
• adobe commerce, magento commerce, magento open source +2 more Magento Commerce Stock Media Improper Input Validation Could Lead To Remote Code Execution CVE-2021-36035 9.1 CriticalSeptember 1, 2021
• adobe commerce, magento commerce, magento open source +2 more Magento Commerce Improper Neutralization of Special Elements Used In A Command CVE-2021-36024 Fix available 9.1 CriticalSeptember 1, 2021
• adobe commerce, magento commerce, magento open source +2 more Magento Commerce Path Traversal In `theme[preview_image]` Parameter Could Lead To Remote Code Execution CVE-2021-36031 Fix available 7.2 HighSeptember 1, 2021
• adobe commerce, magento commerce, magento open source +2 more Magento Commerce `quoteId` parameter Incorrect Authorization Vulnerability Could Lead To Information Disclosure CVE-2021-36039 Fix available 6.5 MediumSeptember 1, 2021
• adobe commerce, magento commerce, magento open source +2 more Magento Commerce Improper Authorization Vulnerability Could Lead To Remote Code Execution CVE-2021-36029 Fix available 9.1 CriticalSeptember 1, 2021
• adobe commerce, magento commerce, magento open source +2 more Magento Commerce Stored Cross-site Scripting Vulnerability CVE-2021-36026 Fix available 6.5 MediumSeptember 1, 2021
• adobe commerce, magento commerce, magento open source +2 more Magento Commerce Improper Input Validation Could Lead To Information Exposure and Privilege Escalation CVE-2021-36032 Fix available 8.3 HighSeptember 1, 2021
• adobe commerce, magento commerce, magento open source +2 more Magento Commerce Multishipping Module Improper Input Validation Could Lead To Information Exposure CVE-2021-36038 Fix available 6.5 MediumSeptember 1, 2021
• adobe commerce, magento commerce, magento open source +2 more Magento Commerce XML Injection Vulnerability Could Lead To Remote Code Execution CVE-2021-36028 Fix available 9.1 CriticalSeptember 1, 2021
• adobe commerce, magento commerce, magento open source +2 more Magento Commerce Improper Input Validation Could Lead To Remote Code Execution CVE-2021-36034 Fix available 9.1 CriticalSeptember 1, 2021
• adobe commerce, magento commerce, magento open source +2 more Magento Commerce Widgets Update Layout XML Injection Vulnerability Could Lead To Remote Code Execution CVE-2021-36022 Fix available 9.1 CriticalSeptember 1, 2021
• Show olderLoading…