Filter
AND
Adobe CommerceAdobe Commerce and Magento Open Source Improper Restriction of XML External Entity Reference (XXE) Vulnerability
First published (updated )
Adobe CommerceAdobe Commerce | Improper Authentication (CWE-287)
9.8
First published (updated )
Adobe CommerceAdobe Commerce | Unrestricted Upload of File with Dangerous Type (CWE-434)
First published (updated )
Adobe CommerceAdobe Commerce | Improper Authentication (CWE-287)
8.8
First published (updated )
Adobe CommerceAdobe Commerce | Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') (CWE-78)
8.4
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Adobe CommerceAdobe Commerce | Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') (CWE-78)
8.4
First published (updated )
Adobe CommerceDOM XSS through integrations can impact other admins
8.1
First published (updated )
Adobe CommerceAdobe Commerce | Cross-site Scripting (XSS) (CWE-79)
8.1
First published (updated )
Adobe Commerce[Paris] Path Traversal lead to local file read
7.7
First published (updated )
Adobe CommerceAdobe Commerce | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') (CWE-22)
7.7
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Adobe CommerceStored XSS through Webhook module public key configuration
7.6
First published (updated )
Adobe CommerceAdobe Commerce | Improper Input Validation (CWE-20)
7.6
First published (updated )
Adobe CommerceAdobe Commerce | Incorrect Authorization (CWE-863)
6.5
First published (updated )
Adobe CommerceAdobe Commerce | Improper Access Control (CWE-284)
6.5
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Adobe CommerceAdobe Commerce | Cross-Site Request Forgery (CSRF) (CWE-352)
6.3
First published (updated )
Adobe CommerceAdobe Commerce | Cross-Site Request Forgery (CSRF) (CWE-352)
6.3
First published (updated )
Adobe CommerceAdobe Commerce | Cross-site Scripting (Reflected XSS) (CWE-79)
6.1
First published (updated )
Adobe CommerceAdobe Commerce | Cross-Site Request Forgery (CSRF) (CWE-352)
5.5
First published (updated )
Adobe CommerceAdobe Commerce | Server-Side Request Forgery (SSRF) (CWE-918)
5.5
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Adobe CommerceAdobe Commerce | Improper Authorization (CWE-285)
5.4
First published (updated )
Adobe CommerceAdobe Commerce | Incorrect Authorization (CWE-863)
5.4
First published (updated )
Adobe CommerceAdobe Commerce | Incorrect Authorization (CWE-863)
5.4
First published (updated )
Adobe CommerceAdobe Commerce | Improper Access Control (CWE-284)
5.3
First published (updated )
Adobe CommerceAdobe Commerce | Cross-site Scripting (Stored XSS) (CWE-79)
4.8
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Adobe CommerceAdobe Commerce | Improper Authorization (CWE-285)
4.3
First published (updated )
Adobe CommerceA user without ship permissions can ship the orders
4.3
First published (updated )
Adobe CommerceAn unauthorized user can export the Tax Sales Report
4.3
First published (updated )
Adobe CommerceBeing able to import/export tax rates without proper privileges
4.3
First published (updated )
Adobe CommerceAdobe Commerce | Improper Authorization (CWE-285)
4.3
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.