Known vulnerabilities in Magento Open Source 2.4.3-p1_v1 - page 4

Vendor: Adobe
Version: 2.4.3-p1_v1
Software CPE: cpe:2.3:a:adobe:magento:*:*:*:*:*:*:*:*
Total vulnerabilities: 103
Public exploits: 1
Known exploited (KEV): 1
Highest CVSSv4 Score: 9.3

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting Magento Open Source version 2.4.3-p1_v1 Magento Open Source 2.4.3-p1_v1 is affected by 103 vulnerabilities: 10 high, 34 medium, 59 low Critical High Medium Low

Vulnerabilities (103)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU94054 - Improper Access Control
CVE-2024-34107
CWE-284 Medium
No
No
2.4.4-p9, 2.4.5-p8, 2.4.6-p6, 2.4.7-p1 10.07.2024 SB2024071008
#VU94052 - Improper Authentication
CVE-2024-34106
CWE-287 Medium
No
No
2.4.4-p9, 2.4.5-p8, 2.4.6-p6, 2.4.7-p1 10.07.2024 SB2024071008
#VU94050 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2024-34105
CWE-79 Low
No
No
2.4.4-p9, 2.4.5-p8, 2.4.6-p6, 2.4.7-p1 10.07.2024 SB2024071008
#VU94048 - Unrestricted Upload of File with Dangerous Type
CVE-2024-34110
CWE-434 Low
No
No
2.4.4-p9, 2.4.5-p8, 2.4.6-p6, 2.4.7-p1 10.07.2024 SB2024071008
#VU94046 - Improper input validation
CVE-2024-34109
CWE-20 Low
No
No
2.4.4-p9, 2.4.5-p8, 2.4.6-p6, 2.4.7-p1 10.07.2024 SB2024071008
#VU94045 - Improper input validation
CVE-2024-34108
CWE-20 Low
No
No
2.4.4-p9, 2.4.5-p8, 2.4.6-p6, 2.4.7-p1 10.07.2024 SB2024071008
#VU94038 - Improper Authorization
CVE-2024-34104
CWE-285 High
No
No
2.4.4-p9, 2.4.5-p8, 2.4.6-p6, 2.4.7-p1 10.07.2024 SB2024071008
#VU81796 - Server-Side Request Forgery (SSRF)
CVE-2023-26366
CWE-918 Low
No
No
2.4.4-p6, 2.4.5-p5, 2.4.6-p3, 2.4.7-beta2 10.10.2023 SB2023101082
#VU81795 - Resource exhaustion
CVE-2023-38251
CWE-400 Medium
No
No
2.4.4-p6, 2.4.5-p5, 2.4.6-p3, 2.4.7-beta2 10.10.2023 SB2023101082
#VU81794 - Exposure of sensitive information to an unauthorized actor
CVE-2023-26367
CWE-200 Low
No
No
2.4.4-p6, 2.4.5-p5, 2.4.6-p3, 2.4.7-beta2 10.10.2023 SB2023101082
#VU81792 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2023-38250
CWE-89 Low
No
No
2.4.4-p6, 2.4.5-p5, 2.4.6-p3, 2.4.7-beta2 10.10.2023 SB2023101082
#VU81791 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2023-38249
CWE-89 Low
No
No
2.4.4-p6, 2.4.5-p5, 2.4.6-p3, 2.4.7-beta2 10.10.2023 SB2023101082
#VU81790 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2023-38221
CWE-89 Low
No
No
2.4.4-p6, 2.4.5-p5, 2.4.6-p3, 2.4.7-beta2 10.10.2023 SB2023101082
#VU81788 - Improper Authorization
CVE-2023-38220
CWE-285 Medium
No
No
2.4.4-p6, 2.4.5-p5, 2.4.6-p3, 2.4.7-beta2 10.10.2023 SB2023101082
#VU81786 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2023-38219
CWE-79 Low
No
No
2.4.4-p6, 2.4.5-p5, 2.4.6-p3, 2.4.7-beta2 10.10.2023 SB2023101082
#VU81785 - Improper input validation
CVE-2023-38218
CWE-20 High
No
No
2.4.4-p6, 2.4.5-p5, 2.4.6-p3, 2.4.7-beta2 10.10.2023 SB2023101082
#VU77463 - Missing Support for Integrity Check
CVE-2023-29290
CWE-353 Medium
No
No
2.4.4-p4, 2.4.5-p3, 2.4.6-p1 16.06.2023 SB2023061608
#VU77461 - XML Injection
CVE-2023-29289
CWE-91 Medium
No
No
2.4.4-p4, 2.4.5-p3, 2.4.6-p1 16.06.2023 SB2023061608
#VU77458 - Incorrect Authorization
CVE-2023-29288
CWE-863 Low
No
No
2.4.4-p4, 2.4.5-p3, 2.4.6-p1 16.06.2023 SB2023061608
#VU77457 - Exposure of sensitive information to an unauthorized actor
CVE-2023-29287
CWE-200 Medium
No
No
2.4.4-p4, 2.4.5-p3, 2.4.6-p1 16.06.2023 SB2023061608


Showing elements 61 - 80 out of 103