Adobe Magento Open Source vulnerabilities

• adobe commerce, commerce webhooks, magento +1 more +3 more Large attack surface through legit webhook usage in Adobe Commerce CVE-2024-34108 Fix available 9.1 CriticalJune 13, 2024
• adobe commerce, magento open source +1 more Adobe Commerce post-auth improper input validation leads to remote code execution CVE-2022-24093 Fix available 9.1 CriticalSeptember 12, 2023
• adobe commerce, magento commerce, magento open source +2 more Adobe Commerce Incorrect Authorization Security feature bypass CVE-2023-22251 Fix available 4.3 MediumMarch 27, 2023
• adobe commerce, magento commerce, magento open source +2 more Adobe Commerce Improper Access Control Security feature bypass CVE-2023-22250 Fix available 5.3 MediumMarch 27, 2023
• adobe commerce, magento commerce, magento open source +2 more Adobe Commerce Stored XSS Arbitrary code execution CVE-2023-22249 EPSS 58.5% 4.8 MediumMarch 27, 2023
• adobe commerce, magento commerce, magento open source +2 more Adobe Commerce XML Injection Arbitrary file system read CVE-2023-22247 Fix available 7.5 HighMarch 27, 2023
• adobe commerce, magento commerce, magento open source +2 more Adobe Commerce Improper Access Control Security feature bypass CVE-2022-35689 Fix available 5.3 MediumOctober 14, 2022
• adobe commerce, magento commerce, magento open source +2 more Adobe Commerce Stored XSS Arbitrary code execution CVE-2022-35698 Public exploit EPSS 14.7% 10.0 CriticalOctober 14, 2022
• adobe commerce, magento commerce, magento open source +2 more Adobe Commerce Cross-Site Request Forgery (CSRF) Could Lead To Unauthorized Cart Addition CVE-2021-39864 Fix available 6.5 MediumOctober 15, 2021
• adobe commerce, magento commerce, magento open source +2 more Magento Commerce GraphQL Improper Input Validation Could Lead To Denial Of Service CVE-2021-36044 Fix available 7.5 HighSeptember 1, 2021
• adobe commerce, magento commerce, magento open source +2 more Magento Commerce Stored Cross-site Scripting Vulnerability CVE-2021-36027 Fix available 6.5 MediumSeptember 1, 2021
• adobe commerce, magento commerce, magento open source +2 more Magento Commerce Authenticated Blind SSRF Could Lead To Remote Code Execution CVE-2021-36043 Fix available 8.0 HighSeptember 1, 2021
• adobe commerce, magento commerce, magento open source +2 more Magento Commerce API File Option Upload Extension Improper Input Validation Vulnerability Could Lead To Remote Code Execution CVE-2021-36042 Fix available 9.1 CriticalSeptember 1, 2021
• adobe commerce, magento commerce, magento open source +2 more Magento Commerce Improper Input Validation During Checkout Process Could Lead To Privilege Escalation CVE-2021-36030 Fix available 7.5 HighSeptember 1, 2021
• adobe commerce, magento commerce, magento open source +2 more Magento Commerce Improper Input Validation Could Lead To Remote Code Execution CVE-2021-36041 Fix available 9.1 CriticalSeptember 1, 2021
• adobe commerce, magento commerce, magento open source +2 more Magento Commerce Improper Input Validation Could Lead To Remote Code Execution CVE-2021-36040 Fix available 9.1 CriticalSeptember 1, 2021
• adobe commerce, magento commerce, magento open source +2 more Magento Commerce Customer Edition Improper Input Validation Could Lead To Remote Code Execution CVE-2021-36025 Fix available 9.1 CriticalSeptember 1, 2021
• adobe commerce, magento commerce, magento open source +2 more Magento Commerce XML Injection Vulnerability In The 'City' Field Could Lead To Remote Code Execution CVE-2021-36020 Fix available 8.2 HighSeptember 1, 2021
• adobe commerce, magento commerce, magento open source +2 more Magento Commerce Stock Media Improper Input Validation Could Lead To Remote Code Execution CVE-2021-36035 9.1 CriticalSeptember 1, 2021
• adobe commerce, magento commerce, magento open source +2 more Magento Commerce Improper Neutralization of Special Elements Used In A Command CVE-2021-36024 Fix available 9.1 CriticalSeptember 1, 2021
• adobe commerce, magento commerce, magento open source +2 more Magento Commerce Path Traversal In `theme[preview_image]` Parameter Could Lead To Remote Code Execution CVE-2021-36031 Fix available 7.2 HighSeptember 1, 2021
• adobe commerce, magento commerce, magento open source +2 more Magento Commerce `quoteId` parameter Incorrect Authorization Vulnerability Could Lead To Information Disclosure CVE-2021-36039 Fix available 6.5 MediumSeptember 1, 2021
• adobe commerce, magento commerce, magento open source +2 more Magento Commerce Improper Authorization Vulnerability Could Lead To Remote Code Execution CVE-2021-36029 Fix available 9.1 CriticalSeptember 1, 2021
• adobe commerce, magento commerce, magento open source +2 more Magento Commerce Stored Cross-site Scripting Vulnerability CVE-2021-36026 Fix available 6.5 MediumSeptember 1, 2021
• adobe commerce, magento commerce, magento open source +2 more Magento Commerce Improper Input Validation Could Lead To Information Exposure and Privilege Escalation CVE-2021-36032 Fix available 8.3 HighSeptember 1, 2021
• adobe commerce, magento commerce, magento open source +2 more Magento Commerce Multishipping Module Improper Input Validation Could Lead To Information Exposure CVE-2021-36038 Fix available 6.5 MediumSeptember 1, 2021
• adobe commerce, magento commerce, magento open source +2 more Magento Commerce XML Injection Vulnerability Could Lead To Remote Code Execution CVE-2021-36028 Fix available 9.1 CriticalSeptember 1, 2021
• adobe commerce, magento commerce, magento open source +2 more Magento Commerce Improper Input Validation Could Lead To Remote Code Execution CVE-2021-36034 Fix available 9.1 CriticalSeptember 1, 2021
• adobe commerce, magento commerce, magento open source +2 more Magento Commerce Widgets Update Layout XML Injection Vulnerability Could Lead To Remote Code Execution CVE-2021-36022 Fix available 9.1 CriticalSeptember 1, 2021
• adobe commerce, magento commerce, magento open source +2 more Magento Commerce Widgets Module XML Injection Vulnerability Could Lead To Remote Code Execution CVE-2021-36033 Fix available 9.1 CriticalSeptember 1, 2021
• adobe commerce, magento commerce, magento open source +2 more Magento Commerce Improper Authorization Vulnerability Could Lead To Information Exposure CVE-2021-36037 Fix available 6.5 MediumSeptember 1, 2021
• adobe commerce, magento commerce, magento open source +2 more Magento Commerce Gift Card Business Logic Error CVE-2021-36012 Fix available 6.5 MediumSeptember 1, 2021
• adobe magento commerce, magento open source +1 more Magento Commerce Insecure Direct Object Reference Vulnerability Could Lead To Sensitive Information Disclosure CVE-2021-21012 5.3 MediumJanuary 13, 2021