Known vulnerabilities in magento-lts - page 2

Vendor: OPENMAGE
Software: magento-lts
Software CPE: cpe:2.3:a:openmage:magento-lts:*:*:*:*:*:*:*:*
Total vulnerabilities: 31
Public exploits: 1
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting magento-lts magento-lts is affected by 31 known vulnerabilities: 6 high, 7 medium, 18 low Critical High Medium Low

Vulnerabilities (31)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU71575 - Improper Control of Generation of Code ('Code Injection')
CVE-2021-41231
CWE-94 Low
No
No
19.4.13, 20.0.11 26.01.2023 SB2023012642
#VU56129 - Deserialization of Untrusted Data
CVE-2020-15244
CWE-502 Low
No
No
19.4.8, 20.0.4 27.08.2021 SB2020102136
#VU56127 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2021-32759
CWE-79 Low
No
No
19.4.15, 20.0.13 27.08.2021 SB2021082705
#VU56126 - Improper Restriction of XML External Entity Reference ('XXE')
CVE-2021-32758
CWE-611 High
No
No
19.4.15, 20.0.13 27.08.2021 SB2021082705
#VU52457 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2021-21427
CWE-89 High
No
No
19.4.13, 20.0.10 21.04.2021 SB2021042118
#VU52455 - Improper input validation
CVE-2021-21426
CWE-20 Medium
No
No
19.4.13, 20.0.10 21.04.2021 SB2021042118
#VU52454 - Deserialization of Untrusted Data
CVE-2021-3007
CWE-502 High
Available
No
19.4.13, 20.0.10 21.04.2021 SB2021010421
SB2021042118
#VU126488 - Improper Access Control
CVE-2020-26252
CWE-284 Medium
No
No
19.4.9, 20.0.5 19.01.2021 SB2021011929
#VU126489 - Improper Access Control
CVE-2020-26285
CWE-284 Low
No
No
19.4.9, 20.0.5 19.01.2021 SB2021011929
#VU126490 - Improper Access Control
CVE-2020-26295
CWE-284 Low
No
No
19.4.9, 20.0.5 19.01.2021 SB2021011929
#VU46013 - Cross-Site Request Forgery (CSRF)
CVE-2020-15151
CWE-352 Low
No
No
19.4.6, 20.0.2 25.08.2020 SB2020082516


Showing elements 21 - 40 out of 31