Filter
AND
Adobe CommerceAdobe Commerce and Magento Open Source Improper Input Validation Vulnerability
First published (updated )
Adobe CommerceAdobe Commerce | Improper Authentication (CWE-287)
9.8
First published (updated )
Adobe CommerceAdobe Commerce Improper Authorization Privilege escalation
9.8
First published (updated )
Adobe Magento Open SourceAdobe Commerce post-auth improper input validation leads to remote code execution
9.1
First published (updated )
Adobe CommerceAdobe Commerce XML Injection Arbitrary code execution
9.1
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Adobe CommerceAdobe Commerce | Improper Authentication (CWE-287)
8.8
First published (updated )
Adobe CommerceAdobe Commerce Improper Limitation of a Pathname to a Restricted Directory Arbitrary code execution
8.8
First published (updated )
Adobe CommerceAdobe Commerce Improper Access Control Privilege escalation
8.8
First published (updated )
Adobe Commerce[CVE-2021-36032] Magento IDOR Leads to Account Takeover
8.8
First published (updated )
Adobe CommerceAdobe Commerce | Cross-site Scripting (XSS) (CWE-79)
8.1
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Adobe CommerceAdobe Commerce | Improper Input Validation (CWE-20)
7.6
First published (updated )
Adobe CommerceAdobe Commerce | Incorrect Authorization (CWE-863)
6.5
First published (updated )
Adobe CommerceAdobe Commerce | Improper Access Control (CWE-284)
6.5
First published (updated )
Adobe CommerceAdobe Commerce | Cross-site Scripting (Reflected XSS) (CWE-79)
6.1
First published (updated )
Adobe CommerceAdobe Commerce Stored XSS Arbitrary code execution
6.1
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Adobe CommerceAdobe Commerce Stored XSS Arbitrary code execution
5.5
First published (updated )
Adobe CommerceAdobe Commerce | Incorrect Authorization (CWE-863)
5.4
First published (updated )
Adobe CommerceAdobe Commerce | Incorrect Authorization (CWE-863)
5.4
First published (updated )
Adobe CommerceAdobe Commerce | Improper Access Control (CWE-284)
5.3
First published (updated )
Adobe CommerceAdobe Commerce Improper Access Control Security feature bypass
5.3
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Adobe CommerceAdobe Commerce | Cross-site Scripting (Stored XSS) (CWE-79)
4.8
First published (updated )
Adobe CommerceAdobe Commerce | Time-of-check Time-of-use (TOCTOU) Race Condition (CWE-367)
4.3
First published (updated )
Adobe CommerceAdobe Commerce | Incorrect Authorization (CWE-863)
4.3
First published (updated )
Adobe CommerceAdobe Commerce | Improper Access Control (CWE-284)
4.3
First published (updated )
Adobe CommerceAdobe Commerce | Improper Access Control (CWE-284)
4.3
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Adobe CommerceAdobe Commerce | Improper Access Control (CWE-284)
4.3
First published (updated )
Adobe CommerceAdobe Commerce | Improper Access Control (CWE-284)
4.3
First published (updated )
Adobe CommerceAdobe Commerce | Information Exposure (CWE-200)
2.7
First published (updated )
Adobe CommerceAdobe Commerce | Improper Access Control (CWE-284)
2.7
First published (updated )
Adobe CommerceAdobe Commerce | Improper Access Control (CWE-284)
2.7
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.