Skip to contentAdobe Magento Commerce vulnerabilities
- adobe commerce, magento commerce, magento open source +2 moreMagento Commerce Widgets Module XML Injection Vulnerability Could Lead To Remote Code ExecutionCVE-2021-36033Fix available9.1 Critical
- adobe commerce, magento commerce, magento open source +2 moreMagento Commerce Improper Authorization Vulnerability Could Lead To Information ExposureCVE-2021-36037Fix available6.5 Medium
- adobe commerce, magento commerce, magento open source +2 moreMagento Commerce Gift Card Business Logic ErrorCVE-2021-36012Fix available6.5 Medium
- adobe magento commerce, magento +1 moreMagento Commerce path traversal vulnerability in child theme store creationCVE-2021-28584Fix available5.4 Medium
- adobe magento commerce, magento +1 moreMagento Commerce improper input validation in customer customer webapiCVE-2021-28585Fix available5.3 Medium
- adobe magento commerce, magento +1 moreMagento Commerce insecure storage of sensitive documentationCVE-2021-28583Fix available7.5 High
- adobe magento commerce, magento +1 moreMagento Commerce improper Authorization via the 'Create Customer' endpointCVE-2021-28563Fix available6.5 Medium
- adobe magento commerce, magento +1 moreMagento Commerce DOM-based cross-site scripting (XSS) could lead to arbitrary javascript executionCVE-2021-28556Fix available6.9 Medium
- magento upward connector, adobe magento commerce, magento upward php +2 moreMagento UPWARD-php Path traversal vulnerability via UPWARD ConnectorCVE-2021-210644.9 Medium
- adobe magento commerce, magento +1 moreMagento Commerce Arbitrary Folder Empty Could Lead To Arbitrary Code ExecutionCVE-2021-21014Public exploitFix available9.1 Critical
- adobe magento commerce, magento +1 moreMagento Commerce Unauthorized Data Modification Could Lead to Arbitrary Code ExecutionCVE-2021-21016Fix available9.1 Critical
- adobe magento commerce, magento +1 moreMagento Commerce Failure To Invalidate User Session Could Lead To Unauthorized AccessCVE-2021-21032Fix available5.6 Medium
- adobe magento commerce, magento +1 moreMagento Commerce Reflected Cross-site Scripting Vulnerability Could Lead To Arbitrary JavaScript ExecutionCVE-2021-21029Fix availableEPSS 85.2%4.8 Medium
- adobe magento commerce, magento +1 moreMagento Commerce XML Injection Could Lead To Arbitrary Code ExecutionCVE-2021-21025Fix available9.1 Critical
- magento, adobe magento commerce +1 moreMagnto Commerce Unauthorized Data Modification Could Lead To Arbitrary Code ExecutionCVE-2021-21018Fix available9.1 Critical
- adobe magento commerce, magento +1 moreMagento Commerce Stored Cross-site Scripting Could Lead To Arbitrary Javascript ExecutionCVE-2021-21030Fix available8.1 High
- adobe magento commerce, magento +1 moreMagento Commerce Cross-Site Request Forgery (CSRF) Could Lead To Unauthorized Data ModificationCVE-2021-21027Fix available4.3 Medium
- adobe magento commerce, magento +1 moreMagento Commerce Incorrect permissions Could Lead To Unauthorized AccessCVE-2021-21026Fix available5.3 Medium
- adobe magento commerce, magento +1 moreMagento Commerce Blind SQL Injection Could Lead To Unauthorized AccessCVE-2021-21024Fix available9.1 Critical
- adobe magento commerce, magento +1 moreMagento Commerce Stored Cross Site Scripting Vulnerability Could Lead To Arbitrary Code ExecutionCVE-2021-21023Fix available4.8 Medium
- adobe magento commerce, magento +1 moreMagento Commerce Incorrect permissions Could Lead To Unauthorized AccessCVE-2021-21022Fix available5.3 Medium
- adobe magento commerce, magento +1 moreMagento Commerce Improper Access Control VulnerabilityCVE-2021-21020Fix available5.3 Medium
- adobe magento commerce, magento +1 moreMagento Commerce XML Injection Could Lead To Remote Code ExecutionCVE-2021-21019Fix available9.1 Critical
- adobe magento commerce, magento +1 moreMagento Commerce Unauthorized Data Modification Could Lead to Arbitrary Code ExecutionCVE-2021-21015Fix available8.0 High
- adobe magento, magento commerce +1 moreMagento Commerce Insecure Direct Object Reference Could Lead To Information DisclosureCVE-2021-210138.1 High
- adobe magento commerce, magento open source +1 moreMagento Commerce Insecure Direct Object Reference Vulnerability Could Lead To Sensitive Information DisclosureCVE-2021-210125.3 Medium
- magento, adobe magento commerce +1 moreIncorrect permissions in Integrations component could lead to unauthorized deletion of cmsPages via REST APICVE-2020-24404Fix available2.7 Low
- magento, adobe magento commerce +1 moreArbitrary code execution via file import functionalityCVE-2020-24407Fix available9.1 Critical
- magento, adobe magento commerce +1 moreDocument root path disclosure on Maintenance pageCVE-2020-24406Fix available3.7 Low
- magento, adobe magento commerce +1 moreIncorrect permissions in Inventory module could lead to unauthorized modification of inventory stock dataCVE-2020-24405Fix available4.3 Medium
- magento, adobe magento commerce +1 moreIncorrect permissions could lead to unauthorized modification of inventory source data via REST APICVE-2020-24403Fix available2.7 Low
- magento, adobe magento commerce +1 moreIncorrect permissions following the deletion of a user role or deactivation of a userCVE-2020-24401Fix available6.5 Medium
- magento, adobe magento commerce +1 moreIncorrect permissions in the Integrations component could lead to unauthorized deletion of customer details via REST APICVE-2020-24402Fix available4.9 Medium
- magento, adobe magento commerce +1 moreSQL injection allows arbitrary read from databaseCVE-2020-24400Fix available7.1 High
- magento, adobe magento commerce +1 moreStored XSS in customer address upload featureCVE-2020-24408Fix available6.1 Medium
- adobe magento, magento commerce, magento commerce +1 more +3 moreMagento 2 Community Edition SQLi VulnerabilityCVE-2019-7139Public exploitFix availableEPSS 22.2%9.8 Critical