Known vulnerabilities in Magento Open Source - page 11

Vendor: Adobe
Software CPE: cpe:2.3:a:adobe:magento:*:*:*:*:*:*:*:*
Total vulnerabilities: 455
Public exploits: 7
Known exploited (KEV): 6
Highest CVSSv4 Score: 9.4

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Magento Open Source Magento Open Source is affected by 455 known vulnerabilities: 5 critical, 65 high, 157 medium, 228 low Critical High Medium Low

Vulnerabilities (455)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU55765 - XML Injection
CVE-2021-36033
CWE-91 Low
No
No
2.3.7-p1, 2.4.2-p2, 2.4.3 10.08.2021 SB2021081043
#VU55764 - XML Injection
CVE-2021-36028
CWE-91 Low
No
No
2.3.7-p1, 2.4.2-p2, 2.4.3 10.08.2021 SB2021081043
#VU55763 - XML Injection
CVE-2021-36020
CWE-91 High
No
No
2.3.7-p1, 2.4.2-p2, 2.4.3 10.08.2021 SB2021081043
#VU55761 - Server-Side Request Forgery (SSRF)
CVE-2021-36043
CWE-918 Low
No
No
2.3.7-p1, 2.4.2-p2, 2.4.3 10.08.2021 SB2021081043
#VU55759 - Improper Authorization
CVE-2021-36039
CWE-285 Medium
No
No
2.3.7-p1, 2.4.2-p2, 2.4.3 10.08.2021 SB2021081043
#VU55758 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2021-36023
CWE-78 Low
No
No
2.3.7-p1, 2.4.2-p2, 2.4.3 10.08.2021 SB2021081043
#VU55757 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2021-36022
CWE-78 Low
No
No
2.3.7-p1, 2.4.2-p2, 2.4.3 10.08.2021 SB2021081043
#VU55756 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2021-36031
CWE-22 Low
No
No
2.3.7-p1, 2.4.2-p2, 2.4.3 10.08.2021 SB2021081043
#VU55755 - Improper input validation
CVE-2021-36042
CWE-20 Low
No
No
2.3.7-p1, 2.4.2-p2, 2.4.3 10.08.2021 SB2021081043
#VU55754 - Improper input validation
CVE-2021-36041
CWE-20 Low
No
No
2.3.7-p1, 2.4.2-p2, 2.4.3 10.08.2021 SB2021081043
#VU55753 - Improper input validation
CVE-2021-36040
CWE-20 Low
No
No
2.3.7-p1, 2.4.2-p2, 2.4.3 10.08.2021 SB2021081043
#VU55752 - Improper input validation
CVE-2021-36035
CWE-20 Low
No
No
2.3.7-p1, 2.4.2-p2, 2.4.3 10.08.2021 SB2021081043
#VU55751 - Improper input validation
CVE-2021-36034
CWE-20 Low
No
No
2.3.7-p1, 2.4.2-p2, 2.4.3 10.08.2021 SB2021081043
#VU55750 - Improper input validation
CVE-2021-36025
CWE-20 Low
No
No
2.3.7-p1, 2.4.2-p2, 2.4.3 10.08.2021 SB2021081043
#VU55749 - Improper input validation
CVE-2021-36024
CWE-20 Low
No
No
2.3.7-p1, 2.4.2-p2, 2.4.3 10.08.2021 SB2021081043
#VU55748 - Improper input validation
CVE-2021-36021
CWE-20 Low
No
No
2.3.7-p1, 2.4.2-p2, 2.4.3 10.08.2021 SB2021081043
#VU55747 - Improper input validation
CVE-2021-36038
CWE-20 Medium
No
No
2.3.7-p1, 2.4.2-p2, 2.4.3 10.08.2021 SB2021081043
#VU55746 - Improper input validation
CVE-2021-36030
CWE-20 Medium
No
No
2.3.7-p1, 2.4.2-p2, 2.4.3 10.08.2021 SB2021081043
#VU55745 - Improper input validation
CVE-2021-36032
CWE-20 Medium
No
No
2.3.7-p1, 2.4.2-p2, 2.4.3 10.08.2021 SB2021081043
#VU55739 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2021-36026
CWE-79 Low
No
No
2.3.7-p1, 2.4.2-p2, 2.4.3 10.08.2021 SB2021081043


Showing elements 201 - 220 out of 455