VendorsAdobemagento_open_sourceall versions
Vulnerabilities

Adobe Magento Open Source

Ranked by severity, then by exploit likelihood. Click a CVE ID for its full record.

32CVEs
CVE-2022-35698
Adobe Commerce Stored XSS Arbitrary code execution
Published 2022-10-14 · Modified
10.0EPSS 0.109
CVE-2021-36020
Magento Commerce XML Injection Vulnerability In The 'City' Field Could Lead To Remote Code Execution
Published 2021-09-01 · Modified
9.8EPSS 0.027
CVE-2021-36022
Magento Commerce Widgets Update Layout XML Injection Vulnerability Could Lead To Remote Code Execution
Published 2021-09-01 · Modified
9.1EPSS 0.034
CVE-2021-36033
Magento Commerce Widgets Module XML Injection Vulnerability Could Lead To Remote Code Execution
Published 2021-09-01 · Modified
9.1EPSS 0.031
CVE-2021-36024
Magento Commerce Improper Neutralization of Special Elements Used In A Command
Published 2021-09-01 · Modified
9.1EPSS 0.029
CVE-2021-36028
Magento Commerce XML Injection Vulnerability Could Lead To Remote Code Execution
Published 2021-09-01 · Modified
9.1EPSS 0.029
CVE-2021-36040
Magento Commerce Improper Input Validation Could Lead To Remote Code Execution
Published 2021-09-01 · Modified
9.1EPSS 0.029
CVE-2021-36025
Magento Commerce Customer Edition Improper Input Validation Could Lead To Remote Code Execution
Published 2021-09-01 · Modified
9.1EPSS 0.028
CVE-2021-36035
Magento Commerce Stock Media Improper Input Validation Could Lead To Remote Code Execution
Published 2021-09-01 · Modified
9.1EPSS 0.028
CVE-2021-36029
Magento Commerce Improper Authorization Vulnerability Could Lead To Remote Code Execution
Published 2021-09-01 · Modified
9.1EPSS 0.025
CVE-2021-36042
Magento Commerce API File Option Upload Extension Improper Input Validation Vulnerability Could Lead To Remote Code Execution
Published 2021-09-01 · Modified
9.1EPSS 0.025
CVE-2021-36041
Magento Commerce Improper Input Validation Could Lead To Remote Code Execution
Published 2021-09-01 · Modified
9.1EPSS 0.024
CVE-2021-36034
Magento Commerce Improper Input Validation Could Lead To Remote Code Execution
Published 2021-09-01 · Modified
9.1EPSS 0.024
CVE-2022-24093
Adobe Commerce post-auth improper input validation leads to remote code execution
Published 2023-09-12 · Modified
9.1EPSS 0.015
CVE-2021-36032
Magento Commerce Improper Input Validation Could Lead To Information Exposure and Privilege Escalation
Published 2021-09-01 · Modified
8.8EPSS 0.022
CVE-2021-36043
Magento Commerce Authenticated Blind SSRF Could Lead To Remote Code Execution
Published 2021-09-01 · Modified
8.0EPSS 0.019
CVE-2021-36030
Magento Commerce Improper Input Validation During Checkout Process Could Lead To Privilege Escalation
Published 2021-09-01 · Modified
7.5EPSS 0.023
CVE-2021-36044
Magento Commerce GraphQL Improper Input Validation Could Lead To Denial Of Service
Published 2021-09-01 · Modified
7.5EPSS 0.020
CVE-2023-22247
Adobe Commerce XML Injection Arbitrary file system read
Published 2023-03-27 · Modified
7.5EPSS 0.009
CVE-2021-36031
Magento Commerce Path Traversal In `theme[preview_image]` Parameter Could Lead To Remote Code Execution
Published 2021-09-01 · Modified
7.2EPSS 0.031
CVE-2021-36012
Magento Commerce Gift Card Business Logic Error
Published 2021-09-01 · Modified
6.5EPSS 0.020
CVE-2021-36037
Magento Commerce Improper Authorization Vulnerability Could Lead To Information Exposure
Published 2021-09-01 · Modified
6.5EPSS 0.018
CVE-2021-36038
Magento Commerce Multishipping Module Improper Input Validation Could Lead To Information Exposure
Published 2021-09-01 · Modified
6.5EPSS 0.018
CVE-2021-36039
Magento Commerce `quoteId` parameter Incorrect Authorization Vulnerability Could Lead To Information Disclosure
Published 2021-09-01 · Modified
6.5EPSS 0.017
CVE-2021-36026
Magento Commerce Stored Cross-site Scripting Vulnerability
Published 2021-09-01 · Modified
6.5EPSS 0.017
CVE-2021-39864
Adobe Commerce Cross-Site Request Forgery (CSRF) Could Lead To Unauthorized Cart Addition
Published 2021-10-15 · Modified
6.5EPSS 0.016
CVE-2021-36027
Magento Commerce Stored Cross-site Scripting Vulnerability
Published 2021-09-01 · Modified
6.5EPSS 0.014
CVE-2021-21012
Magento Commerce Insecure Direct Object Reference Vulnerability Could Lead To Sensitive Information Disclosure
Published 2021-01-13 · Modified
5.3EPSS 0.040
CVE-2022-35689
Adobe Commerce Improper Access Control Security feature bypass
Published 2022-10-14 · Modified
5.3EPSS 0.013
CVE-2023-22250
Adobe Commerce Improper Access Control Security feature bypass
Published 2023-03-27 · Modified
5.3EPSS 0.010
CVE-2023-22249
Adobe Commerce Stored XSS Arbitrary code execution
Published 2023-03-27 · Modified
4.8EPSS 0.585
CVE-2023-22251
Adobe Commerce Incorrect Authorization Security feature bypass
Published 2023-03-27 · Modified
4.3EPSS 0.006