VendorsOro Incoroplatformany version
Vulnerabilities

Oro Inc OroPlatform any version

Ranked by severity, then by exploit likelihood. Click a CVE ID for its full record.

6CVEs
CVE-2022-41951
OroPlatform vulnerable to path traversal during temporary file manipulations
Published 2023-11-27 · Modified
9.8EPSS 0.009
CVE-2021-43852
JavaScript Prototype Pollution in oro/platform
Published 2022-01-04 · Modified
8.8EPSS 0.011
CVE-2021-41236
XSS vulnerability in oro/platform
Published 2022-01-04 · Modified
6.9EPSS 0.007
CVE-2023-32062
OroCalendarBundle has incorrect system calendar events visibility
Published 2023-11-27 · Modified
5.0EPSS 0.005
CVE-2023-45824
OroPlatform's pinned entity creation form shows pages of other users
Published 2024-03-25 · Analyzed
4.3EPSS 0.004
CVE-2023-48296
OroPlatform's storefront user can access history and most viewed data from matching back-office user with the same ID
Published 2024-03-25 · Analyzed
4.3EPSS 0.004