Known vulnerabilities in Magento Open Source - page 11

Vendor: Adobe
Software CPE: cpe:2.3:a:adobe:magento:*:*:*:*:*:*:*:*
Total vulnerabilities: 462
Public exploits: 8
Known exploited (KEV): 7

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Magento Open Source Magento Open Source is affected by 462 known vulnerabilities: 6 critical, 67 high, 159 medium, 230 low Critical High Medium Low

Vulnerabilities (462)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU68198 - Improper Authorization
CVE-2022-35692
CWE-285 Low
No
No
2.3.7-p4, 2.4.3-p3, 2.4.4-p1, 2.4.5 11.10.2022 SB2022081051
#VU66380 - Improper Access Control
CVE-2022-34259
CWE-284 Medium
No
No
2.3.7-p4, 2.4.3-p3, 2.4.4-p1, 2.4.5 10.08.2022 SB2022081051
#VU62362 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2022-24087
CWE-78 Critical
Available
Exploited
2.4.3-p1_v1 15.04.2022 SB2022021301
#VU62146 - Improper input validation
CVE-2022-24093
CWE-20 Medium
No
No
2.3.7-p3, 2.4.3-p2, 2.4.4 12.04.2022 SB2022041244
#VU60558 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2022-24086
CWE-78 Critical
Available
Exploited
2.4.3-p1_v1 13.02.2022 SB2022021301
#VU57353 - Cross-Site Request Forgery (CSRF)
CVE-2021-39864
CWE-352 Medium
No
No
2.3.7-p2, 2.4.3-p1 14.10.2021 SB2021101406
#VU55765 - XML Injection
CVE-2021-36033
CWE-91 Low
No
No
2.3.7-p1, 2.4.2-p2, 2.4.3 10.08.2021 SB2021081043
#VU55764 - XML Injection
CVE-2021-36028
CWE-91 Low
No
No
2.3.7-p1, 2.4.2-p2, 2.4.3 10.08.2021 SB2021081043
#VU55763 - XML Injection
CVE-2021-36020
CWE-91 High
No
No
2.3.7-p1, 2.4.2-p2, 2.4.3 10.08.2021 SB2021081043
#VU55761 - Server-Side Request Forgery (SSRF)
CVE-2021-36043
CWE-918 Low
No
No
2.3.7-p1, 2.4.2-p2, 2.4.3 10.08.2021 SB2021081043
#VU55759 - Improper Authorization
CVE-2021-36039
CWE-285 Medium
No
No
2.3.7-p1, 2.4.2-p2, 2.4.3 10.08.2021 SB2021081043
#VU55758 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2021-36023
CWE-78 Low
No
No
2.3.7-p1, 2.4.2-p2, 2.4.3 10.08.2021 SB2021081043
#VU55757 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2021-36022
CWE-78 Low
No
No
2.3.7-p1, 2.4.2-p2, 2.4.3 10.08.2021 SB2021081043
#VU55756 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2021-36031
CWE-22 Low
No
No
2.3.7-p1, 2.4.2-p2, 2.4.3 10.08.2021 SB2021081043
#VU55755 - Improper input validation
CVE-2021-36042
CWE-20 Low
No
No
2.3.7-p1, 2.4.2-p2, 2.4.3 10.08.2021 SB2021081043
#VU55754 - Improper input validation
CVE-2021-36041
CWE-20 Low
No
No
2.3.7-p1, 2.4.2-p2, 2.4.3 10.08.2021 SB2021081043
#VU55753 - Improper input validation
CVE-2021-36040
CWE-20 Low
No
No
2.3.7-p1, 2.4.2-p2, 2.4.3 10.08.2021 SB2021081043
#VU55752 - Improper input validation
CVE-2021-36035
CWE-20 Low
No
No
2.3.7-p1, 2.4.2-p2, 2.4.3 10.08.2021 SB2021081043
#VU55751 - Improper input validation
CVE-2021-36034
CWE-20 Low
No
No
2.3.7-p1, 2.4.2-p2, 2.4.3 10.08.2021 SB2021081043
#VU55738 - Business Logic Errors (3.0)
CVE-2021-36012
CWE-840 Medium
No
No
2.3.7-p1, 2.4.2-p2, 2.4.3 10.08.2021 SB2021081043


Showing elements 201 - 220 out of 462