Adobe Magento Commerce

• CVE-2022-24086 Critical 9.8 Exploited Adobe Commerce checkout improper input validation leads to remote code execution 99.2%
• CVE-2023-38208 Critical 9.1 Validate Your Inputs | Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') (CWE-78) 2.5%
• CVE-2023-38209 Medium 6.5 Adobe Commerce Incorrect Authorization Security feature bypass 1.0%
• CVE-2023-29296 Medium 4.3 [Cloud] Customer suspects IDOR vulnerability 0.6%
• CVE-2023-29290 Medium 5.3 Adobe Commerce Guest Cart Shipping Address Overwrite IDOR 0.6%
• CVE-2023-29287 Medium 5.3 Adobe Commerce Information Exposure Security feature bypass 0.7%
• CVE-2023-29295 Medium 4.3 Insecure Direct Object Reference (IDOR) in Create Quote Function 0.6%
• CVE-2023-29292 Medium 4.9 Server Side Request Forgery (SSRF) in FedEx carrier integration configuration 1.0%
• CVE-2023-29291 Medium 4.9 Server Side Request Forgery (SSRF) in USPS carrier integration configuration 1.1%
• CVE-2023-29294 Medium 4.3 Bypass Purchase Order Approval using Company User in Adobe Commerce B2B 0.7%
• CVE-2023-29289 Medium 6.5 Adobe Commerce XML Injection Security feature bypass 0.9%
• CVE-2023-29297 Critical 9.1 Admin-to-admin stored XSS via cache poisoning 1.4%
• CVE-2023-22248 High 7.5 Adobe Commerce Incorrect Authorization Security feature bypass 1.0%
• CVE-2023-22251 Medium 4.3 Adobe Commerce Incorrect Authorization Security feature bypass 0.6%
• CVE-2023-22249 Medium 4.8 Adobe Commerce Stored XSS Arbitrary code execution 58.5%
• CVE-2023-22247 High 7.5 Adobe Commerce XML Injection Arbitrary file system read 0.9%
• CVE-2023-22250 Medium 5.3 Adobe Commerce Improper Access Control Security feature bypass 1.0%
• CVE-2022-35689 Medium 5.3 Adobe Commerce Improper Access Control Security feature bypass 1.4%
• CVE-2022-35698 Critical 10.0 Adobe Commerce Stored XSS Arbitrary code execution 14.7%
• CVE-2022-35692 Medium 5.3 Adobe Commerce Improper Access Control Security feature bypass 0.9%
• CVE-2022-34259 Medium 5.3 Adobe Commerce Improper Access Control Security feature bypass 1.7%
• CVE-2022-34257 Medium 6.1 Adobe Commerce Stored XSS Arbitrary code execution 1.0%
• CVE-2022-34253 Critical 9.1 Adobe Commerce XML Injection Arbitrary code execution 5.2%
• CVE-2022-34255 High 8.8 Adobe Commerce Improper Access Control Privilege escalation 2.4%
• CVE-2022-34254 High 8.5 Adobe Commerce Improper Limitation of a Pathname to a Restricted Directory Arbitrary code execution 2.3%
• CVE-2022-34256 High 7.5 Adobe Commerce Improper Authorization Privilege escalation 2.2%
• CVE-2022-34258 Medium 4.8 Adobe Commerce Stored XSS Arbitrary code execution 69.9%
• CVE-2021-39864 Medium 6.5 Adobe Commerce Cross-Site Request Forgery (CSRF) Could Lead To Unauthorized Cart Addition 1.6%
• CVE-2021-28567 Medium 5.0 Magento Commerce improper authorization allows an authenticated user to perform certain functions without permission 0.8%
• CVE-2021-28566 Low 3.7 Magento Commerce information disclosure during upload action leveraging a specially crafted file 1.4%
• CVE-2021-36044 High 7.5 Magento Commerce GraphQL Improper Input Validation Could Lead To Denial Of Service 2.0%
• CVE-2021-36027 Medium 6.5 Magento Commerce Stored Cross-site Scripting Vulnerability 1.4%
• CVE-2021-36043 High 8.0 Magento Commerce Authenticated Blind SSRF Could Lead To Remote Code Execution 1.9%
• CVE-2021-36042 Critical 9.1 Magento Commerce API File Option Upload Extension Improper Input Validation Vulnerability Could Lead To Remote Code Execution 2.5%
• CVE-2021-36030 High 7.5 Magento Commerce Improper Input Validation During Checkout Process Could Lead To Privilege Escalation 2.3%
• CVE-2021-36041 Critical 9.1 Magento Commerce Improper Input Validation Could Lead To Remote Code Execution 2.4%
• CVE-2021-36040 Critical 9.1 Magento Commerce Improper Input Validation Could Lead To Remote Code Execution 2.9%
• CVE-2021-36025 Critical 9.1 Magento Commerce Customer Edition Improper Input Validation Could Lead To Remote Code Execution 2.8%
• CVE-2021-36020 High 8.2 Magento Commerce XML Injection Vulnerability In The 'City' Field Could Lead To Remote Code Execution 2.7%
• CVE-2021-36035 Critical 9.1 Magento Commerce Stock Media Improper Input Validation Could Lead To Remote Code Execution 2.8%
• CVE-2021-36024 Critical 9.1 Magento Commerce Improper Neutralization of Special Elements Used In A Command 2.9%
• CVE-2021-36031 High 7.2 Magento Commerce Path Traversal In `theme[preview_image]` Parameter Could Lead To Remote Code Execution 3.1%
• CVE-2021-36039 Medium 6.5 Magento Commerce `quoteId` parameter Incorrect Authorization Vulnerability Could Lead To Information Disclosure 1.7%
• CVE-2021-36029 Critical 9.1 Magento Commerce Improper Authorization Vulnerability Could Lead To Remote Code Execution 2.5%
• CVE-2021-36026 Medium 6.5 Magento Commerce Stored Cross-site Scripting Vulnerability 1.7%
• CVE-2021-36032 High 8.3 Magento Commerce Improper Input Validation Could Lead To Information Exposure and Privilege Escalation 2.2%
• CVE-2021-36038 Medium 6.5 Magento Commerce Multishipping Module Improper Input Validation Could Lead To Information Exposure 1.8%
• CVE-2021-36028 Critical 9.1 Magento Commerce XML Injection Vulnerability Could Lead To Remote Code Execution 2.9%
• CVE-2021-36034 Critical 9.1 Magento Commerce Improper Input Validation Could Lead To Remote Code Execution 2.4%
• CVE-2021-36022 Critical 9.1 Magento Commerce Widgets Update Layout XML Injection Vulnerability Could Lead To Remote Code Execution 3.4%