Known vulnerabilities in Magento Open Source - page 19

Vendor: Adobe
Software CPE: cpe:2.3:a:adobe:magento:*:*:*:*:*:*:*:*
Total vulnerabilities: 455
Public exploits: 7
Known exploited (KEV): 6
Highest CVSSv4 Score: 9.4

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Magento Open Source Magento Open Source is affected by 455 known vulnerabilities: 5 critical, 65 high, 157 medium, 228 low Critical High Medium Low

Vulnerabilities (455)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU30899 - Cross-Site Request Forgery (CSRF)
CVE-2019-7874
CWE-352 Medium
No
No
2.3.2 03.08.2019 SB2019080307
#VU30900 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2019-7875
CWE-79 Low
No
No
2.3.2 03.08.2019 SB2019080307
#VU30901 - Improper input validation
CVE-2019-7876
CWE-20 High
No
No
2.3.2 03.08.2019 SB2019080307
#VU30902 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2019-7877
CWE-79 Low
No
No
2.3.2 03.08.2019 SB2019080307
#VU30903 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2019-7880
CWE-79 Low
No
No
2.3.2 03.08.2019 SB2019080307
#VU30904 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2019-7881
CWE-79 Low
No
No
2.3.2 03.08.2019 SB2019080307
#VU30905 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2019-7882
CWE-79 Low
No
No
2.3.2 03.08.2019 SB2019080307
#VU30906 - Improper input validation
CVE-2019-7885
CWE-20 High
No
No
2.3.2 03.08.2019 SB2019080307
#VU30907 - Cryptographic Issues
CVE-2019-7886
CWE-310 Medium
No
No
2.3.2 03.08.2019 SB2019080307
#VU30908 - Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')
CVE-2019-7889
CWE-74 Medium
No
No
2.3.2 03.08.2019 SB2019080307
#VU30909 - Permissions, Privileges, and Access Controls
CVE-2019-7890
CWE-264 Medium
No
No
2.3.2 03.08.2019 SB2019080307
#VU30910 - Improper Control of Generation of Code ('Code Injection')
CVE-2019-7892
CWE-94 High
No
No
2.3.2 03.08.2019 SB2019080307
#VU30911 - Improper input validation
CVE-2019-7895
CWE-20 Medium
No
No
2.3.2 03.08.2019 SB2019080307
#VU30912 - Improper input validation
CVE-2019-7896
CWE-20 Medium
No
No
2.3.2 03.08.2019 SB2019080307
#VU30913 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2019-7897
CWE-79 Low
No
No
2.3.2 03.08.2019 SB2019080307
#VU30914 - Improper input validation
CVE-2019-7898
CWE-20 Medium
No
No
2.3.2 03.08.2019 SB2019080307
#VU30915 - Improper input validation
CVE-2019-7899
CWE-20 Medium
No
No
2.3.2 03.08.2019 SB2019080307
#VU30916 - Improper Access Control
CVE-2019-7904
CWE-284 Medium
No
No
2.3.2 03.08.2019 SB2019080307
#VU30917 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2019-7908
CWE-79 Low
No
No
2.3.2 03.08.2019 SB2019080307
#VU30918 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2019-7909
CWE-79 Low
No
No
2.3.2 03.08.2019 SB2019080307


Showing elements 361 - 380 out of 455