Skip to content

Browse Docs Sources Guide

Search/Get API key

Every CVE
Vendors
Adobe
Magento

Adobe Magento vulnerabilities

Known exploitedIn KEVPublic exploitFix available

adobe commerce, magento, magento commerce +2 moreAdobe Commerce Information Exposure Security feature bypassCVE-2023-29287Fix available5.3 MediumJune 15, 2023
adobe commerce, magento, magento commerce +2 moreAdobe Commerce Incorrect Authorization Security feature bypassCVE-2023-22248Fix available7.5 HighJune 15, 2023
adobe commerce, magento commerce, magento open source +2 moreAdobe Commerce Incorrect Authorization Security feature bypassCVE-2023-22251Fix available4.3 MediumMarch 27, 2023
adobe commerce, magento commerce, magento open source +2 moreAdobe Commerce Improper Access Control Security feature bypassCVE-2023-22250Fix available5.3 MediumMarch 27, 2023
adobe commerce, magento commerce, magento open source +2 moreAdobe Commerce Stored XSS Arbitrary code executionCVE-2023-22249EPSS 58.5%4.8 MediumMarch 27, 2023
adobe commerce, magento commerce, magento open source +2 moreAdobe Commerce XML Injection Arbitrary file system readCVE-2023-22247Fix available7.5 HighMarch 27, 2023
adobe commerce, magento commerce, magento open source +2 moreAdobe Commerce Improper Access Control Security feature bypassCVE-2022-35689Fix available5.3 MediumOctober 14, 2022
adobe commerce, magento commerce, magento open source +2 moreAdobe Commerce Stored XSS Arbitrary code executionCVE-2022-35698Public exploitEPSS 14.7%10.0 CriticalOctober 14, 2022
adobe commerce, magento commerce +1 moreAdobe Commerce Improper Access Control Security feature bypassCVE-2022-35692Fix available5.3 MediumAugust 19, 2022
adobe commerce, magento commerce, magento +2 moreAdobe Commerce Improper Access Control Security feature bypassCVE-2022-34259Fix available5.3 MediumAugust 16, 2022
adobe commerce, magento commerce, magento +2 moreAdobe Commerce Stored XSS Arbitrary code executionCVE-2022-34257Fix available6.1 MediumAugust 16, 2022
adobe commerce, magento commerce, magento +2 moreAdobe Commerce XML Injection Arbitrary code executionCVE-2022-34253Fix available9.1 CriticalAugust 16, 2022
adobe commerce, magento commerce, magento +2 moreAdobe Commerce Improper Access Control Privilege escalationCVE-2022-34255Fix available8.8 HighAugust 16, 2022
adobe commerce, magento commerce, magento +2 moreAdobe Commerce Improper Limitation of a Pathname to a Restricted Directory Arbitrary code executionCVE-2022-34254Fix available8.5 HighAugust 16, 2022
adobe commerce, magento commerce, magento +2 moreAdobe Commerce Improper Authorization Privilege escalationCVE-2022-34256Fix available7.5 HighAugust 16, 2022
adobe commerce, magento commerce, magento +2 moreAdobe Commerce Stored XSS Arbitrary code executionCVE-2022-34258Fix availableEPSS 69.9%4.8 MediumAugust 16, 2022
adobe commerce, commerce and magento open source, magento +1 more +3 moreAdobe Commerce checkout improper input validation leads to remote code executionCVE-2022-24086In KEVPublic exploitFix availableEPSS 99.2%9.8 CriticalFebruary 16, 2022
adobe commerce, magento commerce, magento open source +2 moreAdobe Commerce Cross-Site Request Forgery (CSRF) Could Lead To Unauthorized Cart AdditionCVE-2021-39864Fix available6.5 MediumOctober 15, 2021
adobe magento commerce, magento +1 moreMagento Commerce improper authorization allows an authenticated user to perform certain functions without permissionCVE-2021-28567Fix available5.0 MediumSeptember 8, 2021
adobe magento commerce, magento +1 moreMagento Commerce information disclosure during upload action leveraging a specially crafted fileCVE-2021-28566Fix available3.7 LowSeptember 8, 2021
adobe commerce, magento commerce, magento open source +2 moreMagento Commerce GraphQL Improper Input Validation Could Lead To Denial Of ServiceCVE-2021-36044Fix available7.5 HighSeptember 1, 2021
adobe commerce, magento commerce, magento open source +2 moreMagento Commerce Stored Cross-site Scripting VulnerabilityCVE-2021-36027Fix available6.5 MediumSeptember 1, 2021
adobe commerce, magento commerce, magento open source +2 moreMagento Commerce Authenticated Blind SSRF Could Lead To Remote Code ExecutionCVE-2021-36043Fix available8.0 HighSeptember 1, 2021
adobe commerce, magento commerce, magento open source +2 moreMagento Commerce API File Option Upload Extension Improper Input Validation Vulnerability Could Lead To Remote Code ExecutionCVE-2021-36042Fix available9.1 CriticalSeptember 1, 2021
adobe commerce, magento commerce, magento open source +2 moreMagento Commerce Improper Input Validation During Checkout Process Could Lead To Privilege EscalationCVE-2021-36030Fix available7.5 HighSeptember 1, 2021
adobe commerce, magento commerce, magento open source +2 moreMagento Commerce Improper Input Validation Could Lead To Remote Code ExecutionCVE-2021-36041Fix available9.1 CriticalSeptember 1, 2021
adobe commerce, magento commerce, magento open source +2 moreMagento Commerce Improper Input Validation Could Lead To Remote Code ExecutionCVE-2021-36040Fix available9.1 CriticalSeptember 1, 2021
adobe commerce, magento commerce, magento open source +2 moreMagento Commerce Customer Edition Improper Input Validation Could Lead To Remote Code ExecutionCVE-2021-36025Fix available9.1 CriticalSeptember 1, 2021
adobe commerce, magento commerce, magento open source +2 moreMagento Commerce XML Injection Vulnerability In The 'City' Field Could Lead To Remote Code ExecutionCVE-2021-36020Fix available8.2 HighSeptember 1, 2021
adobe commerce, magento commerce, magento open source +2 moreMagento Commerce Stock Media Improper Input Validation Could Lead To Remote Code ExecutionCVE-2021-360359.1 CriticalSeptember 1, 2021
adobe commerce, magento commerce, magento open source +2 moreMagento Commerce Improper Neutralization of Special Elements Used In A CommandCVE-2021-36024Fix available9.1 CriticalSeptember 1, 2021
adobe commerce, magento commerce, magento open source +2 moreMagento Commerce Path Traversal In `theme[preview_image]` Parameter Could Lead To Remote Code ExecutionCVE-2021-36031Fix available7.2 HighSeptember 1, 2021
adobe commerce, magento commerce, magento open source +2 moreMagento Commerce `quoteId` parameter Incorrect Authorization Vulnerability Could Lead To Information DisclosureCVE-2021-36039Fix available6.5 MediumSeptember 1, 2021
adobe commerce, magento commerce, magento open source +2 moreMagento Commerce Improper Authorization Vulnerability Could Lead To Remote Code ExecutionCVE-2021-36029Fix available9.1 CriticalSeptember 1, 2021
adobe commerce, magento commerce, magento open source +2 moreMagento Commerce Stored Cross-site Scripting VulnerabilityCVE-2021-36026Fix available6.5 MediumSeptember 1, 2021
adobe commerce, magento commerce, magento open source +2 moreMagento Commerce Improper Input Validation Could Lead To Information Exposure and Privilege EscalationCVE-2021-36032Fix available8.3 HighSeptember 1, 2021
adobe commerce, magento commerce, magento open source +2 moreMagento Commerce Multishipping Module Improper Input Validation Could Lead To Information ExposureCVE-2021-36038Fix available6.5 MediumSeptember 1, 2021
adobe commerce, magento commerce, magento open source +2 moreMagento Commerce XML Injection Vulnerability Could Lead To Remote Code ExecutionCVE-2021-36028Fix available9.1 CriticalSeptember 1, 2021
adobe commerce, magento commerce, magento open source +2 moreMagento Commerce Improper Input Validation Could Lead To Remote Code ExecutionCVE-2021-36034Fix available9.1 CriticalSeptember 1, 2021
adobe commerce, magento commerce, magento open source +2 moreMagento Commerce Widgets Update Layout XML Injection Vulnerability Could Lead To Remote Code ExecutionCVE-2021-36022Fix available9.1 CriticalSeptember 1, 2021
adobe commerce, magento commerce, magento open source +2 moreMagento Commerce Widgets Module XML Injection Vulnerability Could Lead To Remote Code ExecutionCVE-2021-36033Fix available9.1 CriticalSeptember 1, 2021
adobe commerce, magento commerce, magento open source +2 moreMagento Commerce Improper Authorization Vulnerability Could Lead To Information ExposureCVE-2021-36037Fix available6.5 MediumSeptember 1, 2021
adobe commerce, magento commerce, magento open source +2 moreMagento Commerce Gift Card Business Logic ErrorCVE-2021-36012Fix available6.5 MediumSeptember 1, 2021
adobe magento commerce, magento +1 moreMagento Commerce path traversal vulnerability in child theme store creationCVE-2021-28584Fix available5.4 MediumJune 28, 2021
adobe magento commerce, magento +1 moreMagento Commerce improper input validation in customer customer webapiCVE-2021-28585Fix available5.3 MediumJune 28, 2021
adobe magento commerce, magento +1 moreMagento Commerce insecure storage of sensitive documentationCVE-2021-28583Fix available7.5 HighJune 28, 2021
adobe magento commerce, magento +1 moreMagento Commerce improper Authorization via the 'Create Customer' endpointCVE-2021-28563Fix available6.5 MediumJune 28, 2021
adobe magento commerce, magento +1 moreMagento Commerce DOM-based cross-site scripting (XSS) could lead to arbitrary javascript executionCVE-2021-28556Fix available6.9 MediumJune 28, 2021
magento upward connector, adobe magento commerce, magento upward php +2 moreMagento UPWARD-php Path traversal vulnerability via UPWARD ConnectorCVE-2021-210644.9 MediumFebruary 25, 2021
adobe magento commerce, magento +1 moreMagento Commerce Arbitrary Folder Empty Could Lead To Arbitrary Code ExecutionCVE-2021-21014Public exploitFix available9.1 CriticalFebruary 11, 2021
Show moreLoading…

Docs Sources Guide Browse Privacy Terms

esc

PagesAll vulnerabilities Browse Docs Sources Guide Get API key

MoveEnter Open