Known vulnerabilities in Magento Open Source - page 9

Vendor: Adobe
Software CPE: cpe:2.3:a:adobe:magento:*:*:*:*:*:*:*:*
Total vulnerabilities: 455
Public exploits: 7
Known exploited (KEV): 6
Highest CVSSv4 Score: 9.4

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Magento Open Source Magento Open Source is affected by 455 known vulnerabilities: 5 critical, 65 high, 157 medium, 228 low Critical High Medium Low

Vulnerabilities (455)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU81796 - Server-Side Request Forgery (SSRF)
CVE-2023-26366
CWE-918 Low
No
No
2.4.4-p6, 2.4.5-p5, 2.4.6-p3, 2.4.7-beta2 10.10.2023 SB2023101082
#VU81795 - Resource exhaustion
CVE-2023-38251
CWE-400 Medium
No
No
2.4.4-p6, 2.4.5-p5, 2.4.6-p3, 2.4.7-beta2 10.10.2023 SB2023101082
#VU81794 - Exposure of sensitive information to an unauthorized actor
CVE-2023-26367
CWE-200 Low
No
No
2.4.4-p6, 2.4.5-p5, 2.4.6-p3, 2.4.7-beta2 10.10.2023 SB2023101082
#VU81792 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2023-38250
CWE-89 Low
No
No
2.4.4-p6, 2.4.5-p5, 2.4.6-p3, 2.4.7-beta2 10.10.2023 SB2023101082
#VU81791 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2023-38249
CWE-89 Low
No
No
2.4.4-p6, 2.4.5-p5, 2.4.6-p3, 2.4.7-beta2 10.10.2023 SB2023101082
#VU81790 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2023-38221
CWE-89 Low
No
No
2.4.4-p6, 2.4.5-p5, 2.4.6-p3, 2.4.7-beta2 10.10.2023 SB2023101082
#VU79228 - Improper Access Control
CVE-2023-38209
CWE-284 Medium
No
No
2.4.4-p5, 2.4.5-p4, 2.4.6-p2 08.08.2023 SB2023080893
#VU79226 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2023-38208
CWE-78 Medium
No
No
2.4.4-p5, 2.4.5-p4, 2.4.6-p2 08.08.2023 SB2023080893
#VU79224 - XML Injection
CVE-2023-38207
CWE-91 Medium
No
No
2.4.4-p5, 2.4.5-p4, 2.4.6-p2 08.08.2023 SB2023080893
#VU77468 - Business Logic Errors (3.0)
CVE-2023-29294
CWE-840 Low
No
No
2.4.4-p4, 2.4.5-p3, 2.4.6-p1 16.06.2023 SB2023061608
#VU77467 - Improper input validation
CVE-2023-29293
CWE-20 Low
No
No
2.4.4-p4, 2.4.5-p3, 2.4.6-p1 16.06.2023 SB2023061608
#VU77466 - Server-Side Request Forgery (SSRF)
CVE-2023-29292
CWE-918 Low
No
No
2.4.4-p4, 2.4.5-p3, 2.4.6-p1 16.06.2023 SB2023061608
#VU77465 - Server-Side Request Forgery (SSRF)
CVE-2023-29291
CWE-918 Low
No
No
2.4.4-p4, 2.4.5-p3, 2.4.6-p1 16.06.2023 SB2023061608
#VU77463 - Missing Support for Integrity Check
CVE-2023-29290
CWE-353 Medium
No
No
2.4.4-p4, 2.4.5-p3, 2.4.6-p1 16.06.2023 SB2023061608
#VU77462 - Incorrect Authorization
CVE-2023-22248
CWE-863 Low
No
No
2.4.4-p4, 2.4.5-p3, 2.4.6-p1 16.06.2023 SB2023061608
#VU77461 - XML Injection
CVE-2023-29289
CWE-91 Medium
No
No
2.4.4-p4, 2.4.5-p3, 2.4.6-p1 16.06.2023 SB2023061608
#VU77460 - Incorrect Authorization
CVE-2023-29296
CWE-863 Low
No
No
2.4.4-p4, 2.4.5-p3, 2.4.6-p1 16.06.2023 SB2023061608
#VU77459 - Incorrect Authorization
CVE-2023-29295
CWE-863 Low
No
No
2.4.4-p4, 2.4.5-p3, 2.4.6-p1 16.06.2023 SB2023061608
#VU77458 - Incorrect Authorization
CVE-2023-29288
CWE-863 Low
No
No
2.4.4-p4, 2.4.5-p3, 2.4.6-p1 16.06.2023 SB2023061608
#VU77457 - Exposure of sensitive information to an unauthorized actor
CVE-2023-29287
CWE-200 Medium
No
No
2.4.4-p4, 2.4.5-p3, 2.4.6-p1 16.06.2023 SB2023061608


Showing elements 161 - 180 out of 455