Known vulnerabilities in Magento Open Source - page 18

Vendor: Adobe
Software CPE: cpe:2.3:a:adobe:magento:*:*:*:*:*:*:*:*
Total vulnerabilities: 455
Public exploits: 7
Known exploited (KEV): 6
Highest CVSSv4 Score: 9.4

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Magento Open Source Magento Open Source is affected by 455 known vulnerabilities: 5 critical, 65 high, 157 medium, 228 low Critical High Medium Low

Vulnerabilities (455)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU30879 - Exposure of sensitive information to an unauthorized actor
CVE-2019-7852
CWE-200 Medium
No
No
2.3.2 03.08.2019 SB2019080307
#VU30880 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2019-7853
CWE-79 Low
No
No
2.3.2 03.08.2019 SB2019080307
#VU30881 - Exposure of sensitive information to an unauthorized actor
CVE-2019-7854
CWE-200 Medium
No
No
2.3.2 03.08.2019 SB2019080307
#VU30882 - Cryptographic Issues
CVE-2019-7855
CWE-310 Medium
No
No
2.3.2 03.08.2019 SB2019080307
#VU30883 - Cross-Site Request Forgery (CSRF)
CVE-2019-7857
CWE-352 Medium
No
No
2.3.2 03.08.2019 SB2019080307
#VU30884 - Cryptographic Issues
CVE-2019-7858
CWE-310 Medium
No
No
2.3.2 03.08.2019 SB2019080307
#VU30885 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2019-7859
CWE-22 Medium
No
No
2.3.2 03.08.2019 SB2019080307
#VU30886 - Cryptographic Issues
CVE-2019-7860
CWE-310 Medium
No
No
2.3.2 03.08.2019 SB2019080307
#VU30887 - Unrestricted Upload of File with Dangerous Type
CVE-2019-7861
CWE-434 Medium
No
No
2.3.2 03.08.2019 SB2019080307
#VU30888 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2019-7862
CWE-79 Low
No
No
2.3.2 03.08.2019 SB2019080307
#VU30889 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2019-7863
CWE-79 Low
No
No
2.3.2 03.08.2019 SB2019080307
#VU30890 - Improper Access Control
CVE-2019-7864
CWE-284 Medium
No
No
2.3.2 03.08.2019 SB2019080307
#VU30891 - Cross-Site Request Forgery (CSRF)
CVE-2019-7865
CWE-352 Medium
No
No
2.3.2 03.08.2019 SB2019080307
#VU30892 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2019-7866
CWE-79 Low
No
No
2.3.2 03.08.2019 SB2019080307
#VU30893 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2019-7867
CWE-79 Low
No
No
2.3.2 03.08.2019 SB2019080307
#VU30894 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2019-7868
CWE-79 Low
No
No
2.3.2 03.08.2019 SB2019080307
#VU30895 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2019-7869
CWE-79 Low
No
No
2.3.2 03.08.2019 SB2019080307
#VU30896 - Security Features
CVE-2019-7871
CWE-254 High
No
No
2.3.2 03.08.2019 SB2019080307
#VU30897 - Improper Authorization
CVE-2019-7872
CWE-285 Medium
No
No
2.3.2 03.08.2019 SB2019080307
#VU30898 - Cross-Site Request Forgery (CSRF)
CVE-2019-7873
CWE-352 Low
No
No
2.3.2 03.08.2019 SB2019080307


Showing elements 341 - 360 out of 455