Login Request a demo
E4
Product
EC-CUBE 4 series
by EC-CUBE CO.,LTD. · last CVE Jul 30, 2024
5
CVEs
0
On KEV
7.2
Max CVSS
0
New 30D
Vulnerabilities5In the news0Timeline
Severity mix
Critical 0High 2Medium 3Low 0
Severity
All severities5Critical0High2Medium3Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add EC-CUBE 4 series to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2024-41924
7.2
0%
Jul 30
Acceptance of extraneous untrusted data with trusted data vulnerability exists in EC-CUBE 4 series
Affected: 4.0.0 to 4.0.6-p4; 4.1.0 to 4.1.2-p3; and 4.2.0 to 4.2.3
CVE-2023-46845
7.2
2%
Nov 7
EC-CUBE 3 series (3.0.0 to 3.0.18-p6) and 4 series (4.0.0 to 4.0.6-p3, 4.1.0 to 4.1.2-p2, and 4.2.0 to 4.2.2) contain an arbitrary code execution vulnerability due to improper…
Affected: 4.0.0 to 4.0.6-p3; 4.1.0 to 4.1.2-p2; and 4.2.0 to 4.2.2
CVE-2023-22838
5.4
1%
Mar 5
Cross-site scripting vulnerability in Product List Screen and Product Detail Screen of EC-CUBE 4.0.0 to 4.0.6-p2, EC-CUBE 4.1.0 to 4.1.2-p1, and EC-CUBE 4.2.0 allows a remote…
Affected: EC-CUBE 4.0.0 to 4.0.6-p2, EC-CUBE 4.1.0 to 4.1.2-p1, and EC-CUBE 4.2.0
CVE-2023-25077
5.4
1%
Mar 5
Cross-site scripting vulnerability in Authentication Key Settings of EC-CUBE 4.0.0 to 4.0.6-p2, EC-CUBE 4.1.0 to 4.1.2-p1, and EC-CUBE 4.2.0 allows a remote authenticated attacker…
Affected: EC-CUBE 4.0.0 to 4.0.6-p2, EC-CUBE 4.1.0 to 4.1.2-p1, and EC-CUBE 4.2.0
CVE-2022-38975
5.4
1%
Sep 27
DOM-based cross-site scripting vulnerability in EC-CUBE 4 series (EC-CUBE 4.0.0 to 4.1.2) allows a remote attacker to inject an arbitrary script by having an administrative user…
Affected: EC-CUBE 4.0.0 to 4.1.2
Showing 5