Known vulnerabilities in Magento Open Source - page 17

Vendor: Adobe
Software CPE: cpe:2.3:a:adobe:magento:*:*:*:*:*:*:*:*
Total vulnerabilities: 455
Public exploits: 7
Known exploited (KEV): 6
Highest CVSSv4 Score: 9.4

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Magento Open Source Magento Open Source is affected by 455 known vulnerabilities: 5 critical, 65 high, 157 medium, 228 low Critical High Medium Low

Vulnerabilities (455)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU30680 - Improper input validation
CVE-2019-8150
CWE-20 High
No
No
2.3.2 06.11.2019 SB2019080307
#VU30681 - Server-Side Request Forgery (SSRF)
CVE-2019-8151
CWE-918 Medium
No
No
2.3.2 06.11.2019 SB2019080307
#VU30682 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2019-8152
CWE-79 Low
No
No
2.3.2 06.11.2019 SB2019080307
#VU30683 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2019-8153
CWE-79 Low
No
No
2.3.2 06.11.2019 SB2019080307
#VU30684 - Improper input validation
CVE-2019-8154
CWE-20 High
No
No
2.3.2 06.11.2019 SB2019080307
#VU30685 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2019-8159
CWE-78 High
No
No
2.3.2 06.11.2019 SB2019080307
#VU30686 - Improper input validation
CVE-2019-8232
CWE-20 Medium
No
No
2.3.2 06.11.2019 SB2019080307
#VU30687 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2019-8233
CWE-79 Low
No
No
2.3.2 06.11.2019 SB2019080307
#VU30688 - Improper Authentication
CVE-2019-8108
CWE-287 Medium
No
No
2.3.2 06.11.2019 SB2019080307
#VU30689 - Cross-Site Request Forgery (CSRF)
CVE-2019-8109
CWE-352 Medium
No
No
2.3.2 06.11.2019 SB2019080307
#VU30690 - Improper input validation
CVE-2019-8110
CWE-20 High
No
No
2.3.2 06.11.2019 SB2019080307
#VU30691 - Improper input validation
CVE-2019-8111
CWE-20 High
No
No
2.3.2 06.11.2019 SB2019080307
#VU30692 - Insufficient Verification of Data Authenticity
CVE-2019-8112
CWE-345 Medium
No
No
2.3.2 06.11.2019 SB2019080307
#VU30693 - Use of Cryptographically Weak Pseudo-Random Number Generator (PRNG)
CVE-2019-8113
CWE-338 Medium
No
No
2.3.2 06.11.2019 SB2019080307
#VU30694 - Improper Authentication
CVE-2019-8116
CWE-287 Medium
No
No
2.3.2 06.11.2019 SB2019080307
#VU30695 - Cleartext Storage of Sensitive Information
CVE-2019-8118
CWE-312 Medium
No
No
2.3.2 06.11.2019 SB2019080307
#VU30696 - Insufficient Verification of Data Authenticity
CVE-2019-8124
CWE-345 Medium
No
No
2.3.2 06.11.2019 SB2019080307
#VU30697 - Improper Restriction of Recursive Entity References in DTDs ('XML Entity Expansion')
CVE-2019-8126
CWE-776 Medium
No
No
2.3.2 06.11.2019 SB2019080307
#VU30698 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2019-8127
CWE-89 High
No
No
2.3.2 06.11.2019 SB2019080307
#VU30878 - Cross-Site Request Forgery (CSRF)
CVE-2019-7851
CWE-352 Medium
No
No
2.3.2 03.08.2019 SB2019080307


Showing elements 321 - 340 out of 455