Known vulnerabilities in Magento Open Source 2.4.3-p1_v1 - page 5

Vendor: Adobe
Version: 2.4.3-p1_v1
Software CPE: cpe:2.3:a:adobe:magento:*:*:*:*:*:*:*:*
Total vulnerabilities: 103
Public exploits: 1
Known exploited (KEV): 1
Highest CVSSv4 Score: 9.3

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting Magento Open Source version 2.4.3-p1_v1 Magento Open Source 2.4.3-p1_v1 is affected by 103 vulnerabilities: 10 high, 34 medium, 59 low Critical High Medium Low

Vulnerabilities (103)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU77469 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2023-29297
CWE-79 Low
No
No
2.4.4-p4, 2.4.5-p3, 2.4.6-p1 16.06.2023 SB2023061608
#VU77468 - Business Logic Errors (3.0)
CVE-2023-29294
CWE-840 Low
No
No
2.4.4-p4, 2.4.5-p3, 2.4.6-p1 16.06.2023 SB2023061608
#VU77467 - Improper input validation
CVE-2023-29293
CWE-20 Low
No
No
2.4.4-p4, 2.4.5-p3, 2.4.6-p1 16.06.2023 SB2023061608
#VU77466 - Server-Side Request Forgery (SSRF)
CVE-2023-29292
CWE-918 Low
No
No
2.4.4-p4, 2.4.5-p3, 2.4.6-p1 16.06.2023 SB2023061608
#VU77465 - Server-Side Request Forgery (SSRF)
CVE-2023-29291
CWE-918 Low
No
No
2.4.4-p4, 2.4.5-p3, 2.4.6-p1 16.06.2023 SB2023061608
#VU77462 - Incorrect Authorization
CVE-2023-22248
CWE-863 Low
No
No
2.4.4-p4, 2.4.5-p3, 2.4.6-p1 16.06.2023 SB2023061608
#VU77460 - Incorrect Authorization
CVE-2023-29296
CWE-863 Low
No
No
2.4.4-p4, 2.4.5-p3, 2.4.6-p1 16.06.2023 SB2023061608
#VU77459 - Incorrect Authorization
CVE-2023-29295
CWE-863 Low
No
No
2.4.4-p4, 2.4.5-p3, 2.4.6-p1 16.06.2023 SB2023061608
#VU73685 - Improper Authorization
CVE-2023-22251
CWE-285 Low
No
No
2.4.4-p3, 2.4.5-p2, 2.4.6 14.03.2023 SB2023031480
#VU73684 - Improper Access Control
CVE-2023-22250
CWE-284 Medium
No
No
2.4.4-p3, 2.4.5-p2, 2.4.6 14.03.2023 SB2023031480
#VU73683 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2023-22249
CWE-79 Low
No
No
2.4.4-p3, 2.4.5-p2, 2.4.6 14.03.2023 SB2023031480
#VU73682 - XML Injection
CVE-2023-22247
CWE-91 High
No
No
2.4.4-p3, 2.4.5-p2, 2.4.6 14.03.2023 SB2023031480
#VU68367 - Improper Access Control
CVE-2022-35689
CWE-284 Medium
No
No
2.4.4-p2, 2.4.5-p1 17.10.2022 SB2022101168
#VU68204 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2022-35698
CWE-79 Medium
No
No
2.4.4-p2, 2.4.5-p1 11.10.2022 SB2022101168
#VU66379 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2022-34258
CWE-79 Low
No
No
2.3.7-p4, 2.4.3-p3, 2.4.4-p1, 2.4.5 10.08.2022 SB2022081051
#VU66378 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2022-34257
CWE-79 Low
No
No
2.3.7-p4, 2.4.3-p3, 2.4.4-p1, 2.4.5 10.08.2022 SB2022081051
#VU66377 - Improper Authorization
CVE-2022-34256
CWE-285 Medium
No
No
2.3.7-p4, 2.4.3-p3, 2.4.4-p1, 2.4.5 10.08.2022 SB2022081051
#VU66362 - Improper input validation
CVE-2022-34255
CWE-20 Medium
No
No
2.3.7-p4, 2.4.3-p3, 2.4.4-p1, 2.4.5 10.08.2022 SB2022081051
#VU66355 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2022-34254
CWE-22 Medium
No
No
2.3.7-p4, 2.4.3-p3, 2.4.4-p1, 2.4.5 10.08.2022 SB2022081051
#VU66346 - XML Injection
CVE-2022-34253
CWE-91 Low
No
No
2.3.7-p4, 2.4.3-p3, 2.4.4-p1, 2.4.5 10.08.2022 SB2022081051


Showing elements 81 - 100 out of 103