Known vulnerabilities in Magento Open Source - page 17

Vendor: Adobe
Software CPE: cpe:2.3:a:adobe:magento:*:*:*:*:*:*:*:*
Total vulnerabilities: 462
Public exploits: 8
Known exploited (KEV): 7

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Magento Open Source Magento Open Source is affected by 462 known vulnerabilities: 6 critical, 67 high, 159 medium, 230 low Critical High Medium Low

Vulnerabilities (462)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU30673 - Deserialization of Untrusted Data
CVE-2019-8141
CWE-502 Medium
No
No
2.3.2 06.11.2019 SB2019080307
#VU30674 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2019-8142
CWE-79 Low
No
No
2.3.2 06.11.2019 SB2019080307
#VU30675 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2019-8143
CWE-89 High
No
No
2.3.2 06.11.2019 SB2019080307
#VU30676 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2019-8146
CWE-79 Low
No
No
2.3.2 06.11.2019 SB2019080307
#VU30677 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2019-8147
CWE-79 Low
No
No
2.3.2 06.11.2019 SB2019080307
#VU30678 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2019-8148
CWE-79 Low
No
No
2.3.2 06.11.2019 SB2019080307
#VU30679 - Session Fixation
CVE-2019-8149
CWE-384 High
No
No
2.3.2 06.11.2019 SB2019080307
#VU30680 - Improper input validation
CVE-2019-8150
CWE-20 High
No
No
2.3.2 06.11.2019 SB2019080307
#VU30681 - Server-Side Request Forgery (SSRF)
CVE-2019-8151
CWE-918 Medium
No
No
2.3.2 06.11.2019 SB2019080307
#VU30682 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2019-8152
CWE-79 Low
No
No
2.3.2 06.11.2019 SB2019080307
#VU30683 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2019-8153
CWE-79 Low
No
No
2.3.2 06.11.2019 SB2019080307
#VU30684 - Improper input validation
CVE-2019-8154
CWE-20 High
No
No
2.3.2 06.11.2019 SB2019080307
#VU30685 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2019-8159
CWE-78 High
No
No
2.3.2 06.11.2019 SB2019080307
#VU30686 - Improper input validation
CVE-2019-8232
CWE-20 Medium
No
No
2.3.2 06.11.2019 SB2019080307
#VU30687 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2019-8233
CWE-79 Low
No
No
2.3.2 06.11.2019 SB2019080307
#VU30688 - Improper Authentication
CVE-2019-8108
CWE-287 Medium
No
No
2.3.2 06.11.2019 SB2019080307
#VU30689 - Cross-Site Request Forgery (CSRF)
CVE-2019-8109
CWE-352 Medium
No
No
2.3.2 06.11.2019 SB2019080307
#VU30690 - Improper input validation
CVE-2019-8110
CWE-20 High
No
No
2.3.2 06.11.2019 SB2019080307
#VU30691 - Improper input validation
CVE-2019-8111
CWE-20 High
No
No
2.3.2 06.11.2019 SB2019080307
#VU30692 - Insufficient Verification of Data Authenticity
CVE-2019-8112
CWE-345 Medium
No
No
2.3.2 06.11.2019 SB2019080307


Showing elements 321 - 340 out of 462