CO
E-commerce
Commerce
On CISA KEVExploited in the wild
251
CVEs
6
On KEV
10.0
Max CVSS
11
New 30D
Severity mix
Critical 23High 104Medium 110Low 14
Watch
Add Commerce to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2021-36028 | 7.2 | Sep 1 | Magento Commerce versions 2.4.2 (and earlier), 2.4.2-p1 (and earlier) and 2.3.7 (and earlier) are affected by an XML Injection vulnerability when saving a configurable product Affected: 2.3.0 through 2.3.7; 2.4.0 through 2.4.2; 2.4.2 |
| CVE-2021-36025 | 7.2 | Sep 1 | Magento Commerce versions 2.4.2 (and earlier), 2.4.2-p1 (and earlier) and 2.3.7 (and earlier) are affected by an improper input validation vulnerability while saving a customer's… Affected: 2.3.0 through 2.3.7; 2.4.0 through 2.4.2; 2.4.2 |
| CVE-2021-36024 | 7.2 | Sep 1 | Magento Commerce versions 2.4.2 (and earlier), 2.4.2-p1 (and earlier) and 2.3.7 (and earlier) are affected by an Improper Neutralization of Special Elements Used In A Command via… Affected: 2.3.0 through 2.3.7; 2.4.0 through 2.4.2; 2.4.2 |
| CVE-2021-36022 | 7.2 | Sep 1 | Magento Commerce versions 2.4.2 (and earlier), 2.4.2-p1 (and earlier) and 2.3.7 (and earlier) are affected by an XML Injection vulnerability in the Widgets Update Layout Affected: 2.3.0 through 2.3.7; 2.4.0 through 2.4.2; 2.4.2 |