Known vulnerabilities in Magento Open Source - page 9
Vendor:
Adobe
Software:
Magento Open Source
Software CPE:
cpe:2.3:a:adobe:magento:*:*:*:*:*:*:*:*
Website:
https://www.adobe.com
Total vulnerabilities:
455
Public exploits:
7
Known exploited (KEV):
6
Highest CVSSv4 Score:
9.4
Breakdown by Severity Chart
2.4.6-2026-aug
2.4.7-2026-aug
2.4.8-2026-aug
2.4.9-2026-aug
2.4.6-2026-jul
2.4.7-2026-jul
2.4.8-2026-jul
2.4.9-2026-jul
2.4.6-p15
2.4.7-p10
2.4.8-p5
2.4.9
2.4.5‑p16
2.4.8-p4
2.4.9‑beta1
2.4.7-p9
2.4.6-p14
2.4.5-p15
2.4.6-p13
2.4.7-p8
2.4.8-p3
2.4.9-alpha3
2.4.5-p14
2.4.6-p12
2.4.7-p7
2.4.8-p2
2.4.9-alpha2
2.4.5-p13
2.4.6-p11
2.4.7-p6
2.4.8-p1
2.4.9-alpha1
2.4.8
2.4.7-p5
2.4.6-p10
2.4.5-p12
2.4.4-p13
2.4.4-p12
2.4.5-p11
2.4.6-p9
2.4.7-p4
2.4.7-p3
2.4.6-p8
2.4.5-p10
2.4.4-p11
2.4.7-p2
2.4.6-p7
2.4.5-p9
2.4.4-p10
2.4.7-p1
2.4.6-p6
2.4.5-p8
2.4.4-p9
2.4.4-p8
2.4.5-p7
2.4.6-p5
2.4.7
2.4.7-beta3
2.4.6-p4
2.4.5-p6
2.4.4-p7
2.4.7-beta2
2.4.7-beta1
2.4.6-p3
2.4.5-p5
2.4.4-p6
2.4.6-p2
2.4.5-p4
2.4.4-p5
2.4.6-p1
2.4.5-p3
2.4.4-p4
2.4.5-p2
2.4.4-p3
2.4.6
2.4.4-p2
2.4.5-p1
2.4.5
2.4.4-p1
2.4.3-p3
2.3.7-p4
2.3.7-p3
2.4.4
2.4.3-p2
1.9.4.5
1.9.4.4
1.9.4.2
1.9.4.3
1.9.4.1
1.9.4.0
1.9.3.10
1.9.3.9
1.9.3.8
1.9.3.7
1.9.3.0
1.9.3.1
1.9.3.2
1.9.3.3
1.9.3.4
1.9.3.5
1.9.3.6
1.3.2.1
1.9.2.0
1.2.1.1
1.3.1
1.2.0.3
1.2.1
1.6.2.0
1.7.0.2
1.1.2
1.3.2
1.3.3.0
1.9.1.1
1.3.1.1
1.7.0.1
1.3.2.2
1.1.6
1.9.2.4
1.3.2.3
1.5.0.1
1.4.1.1
1.1.1
1.1.4
1.9.2.2
1.8.0.0
1.6.1.0
1.4.0.1
1.4.2.0
1.1.3
1.0
1.7.0.0
1.2.0
1.2.1.2
1.4.0.0
1.1.8
1.9.2.1
1.3.2.4
1.1.5
1.9.2.3
1.4.1.0
1.8.1.0
1.6.0.0
1.5.1.0
1.2.0.2
1.3.0
1.9.0.0
1.2.0.1
1.1.7
2.4.3-p1_v1
2.3.7-p2
2.4.3-p1
2.3.7-p1
2.4.2-p2
2.4.3
2.3.7
2.4.2-p1
2.3.6-p1
2.4.1-p1
2.4.2
2.3.6
2.4.0-p1
2.4.1
1.6.2
1.5
1.14.1.0
1.9.1.0
1.9.0.1
2.3.5-p2
2.4.0
2.3.3-p1
2.3.2-p2
2.3.5-p1
2.3.4-p2
2.3.5
2.3.4
2.2.11
2.3.3
2.2.10
2.1.18
2.2.9
2.3.2
2.0.18
2.0.17
2.0.16
2.0.15
2.0.14
2.0.13
2.0.12
2.0.11
2.0.10
2.0.9
2.0.8
2.0.7
2.0.6
2.0.5
2.0.4
2.0.3
2.0.2
2.0.1
2.0.0
1.0.0
0.74.0
0.42.0
0.1.0
2.3.1
2.3.0
2.2.8
2.2.7
2.1.17
2.1.16
2.1.15
2.1.14
2.1.13
2.1.12
2.1.11
2.1.10
2.1.9
2.1.8
2.1.7
2.1.6
2.1.5
2.1.4
2.1.3
2.1.2
2.1.1
2.1.0
2.2.6
2.2.5
2.2.4
2.2.3
2.2.2
2.2.1
2.2.0
Vulnerabilities (455)
| Vulnerability | CWE-ID | CSH Severity | Public Exploit | KEV | First fixed release | Published | Bulletins |
|---|---|---|---|---|---|---|---|
| #VU81796 - Server-Side Request Forgery (SSRF) CVE-2023-26366 |
CWE-918 | Low | 2.4.4-p6, 2.4.5-p5, 2.4.6-p3, 2.4.7-beta2 | 10.10.2023 |
SB2023101082 |
||
| #VU81795 - Resource exhaustion CVE-2023-38251 |
CWE-400 | Medium | 2.4.4-p6, 2.4.5-p5, 2.4.6-p3, 2.4.7-beta2 | 10.10.2023 |
SB2023101082 |
||
| #VU81794 - Exposure of sensitive information to an unauthorized actor CVE-2023-26367 |
CWE-200 | Low | 2.4.4-p6, 2.4.5-p5, 2.4.6-p3, 2.4.7-beta2 | 10.10.2023 |
SB2023101082 |
||
| #VU81792 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') CVE-2023-38250 |
CWE-89 | Low | 2.4.4-p6, 2.4.5-p5, 2.4.6-p3, 2.4.7-beta2 | 10.10.2023 |
SB2023101082 |
||
| #VU81791 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') CVE-2023-38249 |
CWE-89 | Low | 2.4.4-p6, 2.4.5-p5, 2.4.6-p3, 2.4.7-beta2 | 10.10.2023 |
SB2023101082 |
||
| #VU81790 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') CVE-2023-38221 |
CWE-89 | Low | 2.4.4-p6, 2.4.5-p5, 2.4.6-p3, 2.4.7-beta2 | 10.10.2023 |
SB2023101082 |
||
| #VU79228 - Improper Access Control CVE-2023-38209 |
CWE-284 | Medium | 2.4.4-p5, 2.4.5-p4, 2.4.6-p2 | 08.08.2023 |
SB2023080893 |
||
| #VU79226 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') CVE-2023-38208 |
CWE-78 | Medium | 2.4.4-p5, 2.4.5-p4, 2.4.6-p2 | 08.08.2023 |
SB2023080893 |
||
| #VU79224 - XML Injection CVE-2023-38207 |
CWE-91 | Medium | 2.4.4-p5, 2.4.5-p4, 2.4.6-p2 | 08.08.2023 |
SB2023080893 |
||
| #VU77468 - Business Logic Errors (3.0) CVE-2023-29294 |
CWE-840 | Low | 2.4.4-p4, 2.4.5-p3, 2.4.6-p1 | 16.06.2023 |
SB2023061608 |
||
| #VU77467 - Improper input validation CVE-2023-29293 |
CWE-20 | Low | 2.4.4-p4, 2.4.5-p3, 2.4.6-p1 | 16.06.2023 |
SB2023061608 |
||
| #VU77466 - Server-Side Request Forgery (SSRF) CVE-2023-29292 |
CWE-918 | Low | 2.4.4-p4, 2.4.5-p3, 2.4.6-p1 | 16.06.2023 |
SB2023061608 |
||
| #VU77465 - Server-Side Request Forgery (SSRF) CVE-2023-29291 |
CWE-918 | Low | 2.4.4-p4, 2.4.5-p3, 2.4.6-p1 | 16.06.2023 |
SB2023061608 |
||
| #VU77463 - Missing Support for Integrity Check CVE-2023-29290 |
CWE-353 | Medium | 2.4.4-p4, 2.4.5-p3, 2.4.6-p1 | 16.06.2023 |
SB2023061608 |
||
| #VU77462 - Incorrect Authorization CVE-2023-22248 |
CWE-863 | Low | 2.4.4-p4, 2.4.5-p3, 2.4.6-p1 | 16.06.2023 |
SB2023061608 |
||
| #VU77461 - XML Injection CVE-2023-29289 |
CWE-91 | Medium | 2.4.4-p4, 2.4.5-p3, 2.4.6-p1 | 16.06.2023 |
SB2023061608 |
||
| #VU77460 - Incorrect Authorization CVE-2023-29296 |
CWE-863 | Low | 2.4.4-p4, 2.4.5-p3, 2.4.6-p1 | 16.06.2023 |
SB2023061608 |
||
| #VU77459 - Incorrect Authorization CVE-2023-29295 |
CWE-863 | Low | 2.4.4-p4, 2.4.5-p3, 2.4.6-p1 | 16.06.2023 |
SB2023061608 |
||
| #VU77458 - Incorrect Authorization CVE-2023-29288 |
CWE-863 | Low | 2.4.4-p4, 2.4.5-p3, 2.4.6-p1 | 16.06.2023 |
SB2023061608 |
||
| #VU77457 - Exposure of sensitive information to an unauthorized actor CVE-2023-29287 |
CWE-200 | Medium | 2.4.4-p4, 2.4.5-p3, 2.4.6-p1 | 16.06.2023 |
SB2023061608 |
Showing elements 161 - 180 out of 455