Filter
AND
AND
Adobe Magento CommerceAdobe Commerce Improper Access Control Security feature bypass
5.3
First published (updated )
MagentoMagento Commerce Cross-Site Request Forgery (CSRF) Could Lead To Unauthorized Data Modification
4.3
First published (updated )
Adobe CommerceMagento Commerce Improper Authorization Vulnerability Could Lead To Information Exposure
6.5
First published (updated )
Adobe Magento CommerceAdobe Commerce Stored XSS Arbitrary code execution
6.1
First published (updated )
MagentoStored XSS in customer address upload feature
6.1
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Adobe CommerceMagento Commerce Gift Card Business Logic Error
6.5
First published (updated )
MagentoMagento Commerce DOM-based cross-site scripting (XSS) could lead to arbitrary javascript execution
6.9
First published (updated )
MagentoMagento Commerce Improper Access Control Vulnerability
5.3
First published (updated )
MagentoMagento Commerce Reflected Cross-site Scripting Vulnerability Could Lead To Arbitrary JavaScript Execution
4.8
First published (updated )
Adobe CommerceMagento Commerce Stored Cross-site Scripting Vulnerability
6.5
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
MagentoIncorrect permissions in Inventory module could lead to unauthorized modification of inventory stock data
4.3
First published (updated )
MagentoMagento Commerce improper Authorization via the 'Create Customer' endpoint
6.5
First published (updated )
MagentoIncorrect permissions in the Integrations component could lead to unauthorized deletion of customer details via REST API
5.5
First published (updated )
MagentoMagento Commerce Incorrect permissions Could Lead To Unauthorized Access
5.3
First published (updated )
Adobe Magento CommerceMagento Commerce Insecure Direct Object Reference Vulnerability Could Lead To Sensitive Information Disclosure
5.3
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Adobe Magento CommerceAdobe Commerce Stored XSS Arbitrary code execution
5.5
First published (updated )
MagentoIncorrect permissions could lead to unauthorized modification of inventory source data via REST API
First published (updated )
MagentoDocument root path disclosure on Maintenance page
4.3
First published (updated )
MagentoIncorrect permissions in Integrations component could lead to unauthorized deletion of cmsPages via REST API
5.5
First published (updated )
MagentoIncorrect permissions following the deletion of a user role or deactivation of a user
6.5
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Adobe CommerceMagento Commerce Stored Cross-site Scripting Vulnerability
6.5
First published (updated )
Adobe CommerceMagento Commerce Multishipping Module Improper Input Validation Could Lead To Information Exposure
6.5
First published (updated )
Adobe CommerceMagento Commerce `quoteId` parameter Incorrect Authorization Vulnerability Could Lead To Information Disclosure
6.5
First published (updated )
MagentoMagento Commerce Incorrect permissions Could Lead To Unauthorized Access
5.3
First published (updated )
MagentoMagento Commerce Stored Cross Site Scripting Vulnerability Could Lead To Arbitrary Code Execution
4.8
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.