MC
Product
Magento Commerce
On CISA KEVExploited in the wild
5
CVEs
1
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 1High 0Medium 4Low 0
Watch
Add Magento Commerce to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2022-24086 In wildKEV | 9.8 | Feb 16 | Adobe Commerce checkout improper input validation leads to remote code execution Affected: through 2.4.3-p1; through 2.3.7-p2; through None |
| CVE-2022-35698 | 5.4 | Oct 14 | Adobe Commerce Stored XSS Arbitrary code execution Affected: through 2.4.5; through 2.4.4-p1; through None |
| CVE-2022-35689 | 5.3 | Oct 14 | Adobe Commerce Improper Access Control Security feature bypass Affected: through 2.4.5; through 2.4.4-p1; through None |
| CVE-2022-35692 | 5.3 | Aug 19 | Adobe Commerce versions 2.4.3-p2 (and earlier), 2.3.7-p3 (and earlier) and 2.4.4 (and earlier) are affected by an Improper Access Control vulnerability that could result in a… Affected: 2.3.7; 2.3.7; 2.3.7; 2.3.7; 2.4.3; 2.4.3; +2 more |
| CVE-2021-21012 | 5.3 | Jan 13 | Magento versions 2.4.1 (and earlier), 2.4.0-p1 (and earlier) and 2.3.6 (and earlier) are vulnerable to an insecure direct object vulnerability (IDOR) in the checkout module Affected: through 2.3.6; 2.4.0; 2.4.0; 2.4.1 |
Showing 5