Adobe Magento Commerce

• CVE-2021-36033 Critical 9.1 Magento Commerce Widgets Module XML Injection Vulnerability Could Lead To Remote Code Execution 3.1%
• CVE-2021-36037 Medium 6.5 Magento Commerce Improper Authorization Vulnerability Could Lead To Information Exposure 1.8%
• CVE-2021-36012 Medium 6.5 Magento Commerce Gift Card Business Logic Error 2.0%
• CVE-2021-28584 Medium 5.4 Magento Commerce path traversal vulnerability in child theme store creation 1.8%
• CVE-2021-28585 Medium 5.3 Magento Commerce improper input validation in customer customer webapi 1.6%
• CVE-2021-28583 High 7.5 Magento Commerce insecure storage of sensitive documentation 1.9%
• CVE-2021-28563 Medium 6.5 Magento Commerce improper Authorization via the 'Create Customer' endpoint 1.4%
• CVE-2021-28556 Medium 6.9 Magento Commerce DOM-based cross-site scripting (XSS) could lead to arbitrary javascript execution 1.4%
• CVE-2021-21064 Medium 4.9 Magento UPWARD-php Path traversal vulnerability via UPWARD Connector 8.5%
• CVE-2021-21014 Critical 9.1 Magento Commerce Arbitrary Folder Empty Could Lead To Arbitrary Code Execution 4.4%
• CVE-2021-21016 Critical 9.1 Magento Commerce Unauthorized Data Modification Could Lead to Arbitrary Code Execution 5.1%
• CVE-2021-21025 Critical 9.1 Magento Commerce XML Injection Could Lead To Arbitrary Code Execution 3.4%
• CVE-2021-21018 Critical 9.1 Magnto Commerce Unauthorized Data Modification Could Lead To Arbitrary Code Execution 4.2%
• CVE-2021-21032 Medium 5.6 Magento Commerce Failure To Invalidate User Session Could Lead To Unauthorized Access 1.6%
• CVE-2021-21029 Medium 4.8 Magento Commerce Reflected Cross-site Scripting Vulnerability Could Lead To Arbitrary JavaScript Execution 84.6%
• CVE-2021-21015 High 8.0 Magento Commerce Unauthorized Data Modification Could Lead to Arbitrary Code Execution 3.1%
• CVE-2021-21019 Critical 9.1 Magento Commerce XML Injection Could Lead To Remote Code Execution 3.8%
• CVE-2021-21020 Medium 5.3 Magento Commerce Improper Access Control Vulnerability 2.4%
• CVE-2021-21024 Critical 9.1 Magento Commerce Blind SQL Injection Could Lead To Unauthorized Access 2.8%
• CVE-2021-21026 Medium 5.3 Magento Commerce Incorrect permissions Could Lead To Unauthorized Access 1.8%
• CVE-2021-21023 Medium 4.8 Magento Commerce Stored Cross Site Scripting Vulnerability Could Lead To Arbitrary Code Execution 1.7%
• CVE-2021-21022 Medium 5.3 Magento Commerce Incorrect permissions Could Lead To Unauthorized Access 2.2%
• CVE-2021-21030 High 8.1 Magento Commerce Stored Cross-site Scripting Could Lead To Arbitrary Javascript Execution 5.9%
• CVE-2021-21027 Medium 4.3 Magento Commerce Cross-Site Request Forgery (CSRF) Could Lead To Unauthorized Data Modification 1.7%
• CVE-2021-21013 High 8.1 Magento Commerce Insecure Direct Object Reference Could Lead To Information Disclosure 3.2%
• CVE-2021-21012 Medium 5.3 Magento Commerce Insecure Direct Object Reference Vulnerability Could Lead To Sensitive Information Disclosure 4.0%
• CVE-2020-24404 Low 2.7 Incorrect permissions in Integrations component could lead to unauthorized deletion of cmsPages via REST API 1.9%
• CVE-2020-24407 Critical 9.1 Arbitrary code execution via file import functionality 5.3%
• CVE-2020-24406 Low 3.7 Document root path disclosure on Maintenance page 2.1%
• CVE-2020-24405 Medium 4.3 Incorrect permissions in Inventory module could lead to unauthorized modification of inventory stock data 1.5%
• CVE-2020-24403 Low 2.7 Incorrect permissions could lead to unauthorized modification of inventory source data via REST API 1.6%
• CVE-2020-24401 Medium 6.5 Incorrect permissions following the deletion of a user role or deactivation of a user 2.3%
• CVE-2020-24402 Medium 4.9 Incorrect permissions in the Integrations component could lead to unauthorized deletion of customer details via REST API 1.7%
• CVE-2020-24400 High 7.1 SQL injection allows arbitrary read from database 2.3%
• CVE-2020-24408 Medium 6.1 Stored XSS in customer address upload feature 1.7%