VendorsOro Incorocommerceall versions
Vulnerabilities

Oro Inc OroCommerce

Ranked by severity, then by exploit likelihood. Click a CVE ID for its full record.

4CVEs
CVE-2022-31037
OroCommerce vulnerable to Cross-site Scripting via Shipping rule editing page
Published 2022-10-18 · Modified
6.9EPSS 0.004
CVE-2022-35950
OroCommerce Cross-site Scripting vulnerability in add note dialog of Shopping List line item
Published 2023-10-09 · Modified
6.9EPSS 0.004
CVE-2023-32065
OroCommerce get-totals-for-checkout API endpoint returns unwanted data
Published 2023-11-28 · Modified
5.8EPSS 0.005
CVE-2023-32064
OroCommerce Customer Portal Incorrect Customer and Customer Group Frontend Menus pages visibility
Published 2023-11-28 · Modified
5.0EPSS 0.005