Skip to contentShopware vulnerabilities
Newest
- shopware b2b suiteAn issue was discovered in Shopware B2B-Suite through 4.4.1. The sort-by parameter of the search...CVE-2022-249566.5 Medium
- runzero platform, shopware +1 moreInsufficient Session Expiration in shopwareCVE-2022-24744Fix available2.6 Low
- runzero platform, shopware +1 moreGuest session is shared between customers in shopwareCVE-2022-24745Fix available4.8 Medium
- runzero platform, shopware +1 moreHTML injection possibility in voucher code formCVE-2022-24746Fix available6.1 Medium
- runzero platform, shopware +1 moreHTTP caching is marking private HTTP headers as publicCVE-2022-24747Fix available6.3 Medium
- runzero platform, shopware +1 moreIncorrect Authentication in shopwareCVE-2022-24748Fix available6.8 Medium
- shopwareInsufficient Session Expiration in shopwareCVE-2022-21652Fix available3.5 Low
- shopwareOpen redirect in shopwareCVE-2022-21651Fix available6.8 Medium
- shopwareAuthenticated Stored XSS in AdministrationCVE-2021-41188Fix available5.7 Medium
- runzero platform, shopware +1 moreAuthenticated server-side request forgery in file upload via URL.CVE-2021-37711Fix available8.8 High
- runzero platform, shopware +1 moreCross-Site Scripting via SVG media filesCVE-2021-37710Fix available8.0 High
- runzero platform, shopware +1 moreInsecure direct object reference of log files of the Import/Export featureCVE-2021-37709Fix available6.5 Medium
- runzero platform, shopware +1 moreCommand injection in mail agent settingsCVE-2021-37708Fix available8.8 High
- runzero platform, shopware +1 moreManipulation of product reviews via APICVE-2021-37707Fix available6.5 Medium
- runzero platform, shopware +1 morePrivate files publicly accessible with Cloud Storage providersCVE-2021-32717Fix available7.5 High
- runzero platform, shopware +1 moreInternal hidden fields are visible on to many associations in admin apiCVE-2021-32716Fix available4.4 Medium
- shopwareInformation leakage in Error HandlerCVE-2021-32712Fix available5.3 Medium
- shopwareAuthenticated Stored XSSCVE-2021-32713Fix available4.8 Medium
- runzero platform, shopware +1 moreCreation of order credits was not validated by acl in admin ordersCVE-2021-32709Fix available4.9 Medium
- runzero platform, shopware +1 morePotential Session Hijacking in ShopwareCVE-2021-32710Fix available5.9 Medium
- runzero platform, shopware +1 moreLeak of information via Store-APICVE-2021-32711Fix available9.1 Critical
- shopwareShopware vulnerable to SSRFCVE-2020-13970Fix available8.8 High
- shopwareShopware vulnerable to Cross-site ScriptingCVE-2020-13971Fix available5.4 Medium
- shopwareShopware database password is leaked to an unauthenticated usersCVE-2020-13997Fix available7.5 High
- shopwareShopware Cross-site Scripting VulnerabilityCVE-2019-12935Fix available7.4 High
- shopwareShopware Insecure Deserialization VulnerabilityCVE-2019-12799Public exploitEPSS 54.1%6.5 Medium
- shopwareShopware SQL InjectionCVE-2018-20713Fix available8.8 High
- shopwareShopware XXE VulnerabilityCVE-2017-18357Public exploitFix availableEPSS 27.1%6.5 Medium
- shopwareShopware XSS VulnerabilityCVE-2017-15374Public exploit6.1 Medium
- shopwareShopware RCE VulnerabilityCVE-2016-3109Fix availableEPSS 28.1%9.8 Critical