MA
Product
Magento
221
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 31High 69Medium 112Low 4
Watch
Add Magento to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2019-7868 | 4.8 | Aug 2 | A stored cross-site scripting vulnerability exists in the admin panel of Magento 2.1 prior to 2.1.18, Magento 2.2 prior to 2.2.9, Magento 2.3 prior to 2.3.2 Affected: 2.1.0 before 2.1.18; 2.2.0 before 2.2.9; 2.3.0 before 2.3.2 |
| CVE-2019-7867 | 4.8 | Aug 2 | A stored cross-site scripting vulnerability exists in the admin panel of Magento 2.1 prior to 2.1.18, Magento 2.2 prior to 2.2.9, Magento 2.3 prior to 2.3.2 Affected: 2.1.0 before 2.1.18; 2.2.0 before 2.2.9; 2.3.0 before 2.3.2 |
| CVE-2019-7866 | 4.8 | Aug 2 | A stored cross-site scripting vulnerability exists in the admin panel of Magento 2.1 prior to 2.1.18, Magento 2.2 prior to 2.2.9, Magento 2.3 prior to 2.3.2 Affected: 2.1.0 before 2.1.18; 2.2.0 before 2.2.9; 2.3.0 before 2.3.2 |
| CVE-2019-7863 | 4.8 | Aug 2 | A stored cross-site scripting vulnerability exists in the admin panel for Magento 2.1 prior to 2.1.18, Magento 2.2 prior to 2.2.9, Magento 2.3 prior to 2.3.2 Affected: 2.1.0 before 2.1.18; 2.2.0 before 2.2.9; 2.3.0 before 2.3.2 |
| CVE-2019-7862 | 4.8 | Aug 2 | A reflected cross-site scripting vulnerability exists in the Product widget chooser functionality in the admin panel for Magento 2.1 prior to 2.1.18, Magento 2.2 prior to 2.2.9,… Affected: 2.1.0 before 2.1.18; 2.2.0 before 2.2.9; 2.3.0 before 2.3.2 |
| CVE-2019-7853 | 4.8 | Aug 2 | A stored cross-site scripting vulnerability exists in Magento 2.1 prior to 2.1.18, Magento 2.2 prior to 2.2.9, Magento 2.3 prior to 2.3.2 Affected: 2.1.0 before 2.1.18; 2.2.0 before 2.2.9; 2.3.0 before 2.3.2 |
| CVE-2021-21027 | 4.3 | Feb 11 | Magento versions 2.4.1 (and earlier), 2.4.0-p1 (and earlier) and 2.3.6 (and earlier) are affected by a cross-site request forgery (CSRF) vulnerability via the GraphQL API Affected: before 2.3.6; before 2.3.6; 2.3.6; 2.3.6; 2.4.0; 2.4.0; +4 more |
| CVE-2020-24405 | 4.3 | Nov 9 | Magento version 2.4.0 and 2.3.5p1 (and earlier) are affected by an incorrect permissions issue vulnerability in the Inventory module Affected: before 2.3.5; before 2.3.5; 2.3.5; 2.3.5; 2.3.5; 2.3.5; +2 more |
| CVE-2019-7873 | 4.3 | Aug 2 | A cross-site request forgery vulnerability exists in Magento 2.1 prior to 2.1.18, Magento 2.2 prior to 2.2.9, Magento 2.3 prior to 2.3.2 Affected: 2.1.0 before 2.1.18; 2.2.0 before 2.2.9; 2.3.0 before 2.3.2 |
| CVE-2019-7857 | 4.3 | Aug 2 | A cross-site request forgery vulnerability in Magento 2.1 prior to 2.1.18, Magento 2.2 prior to 2.2.9, Magento 2.3 prior to 2.3.2 can cause unwanted items to be added to a… Affected: 2.1.0 before 2.1.18; 2.2.0 before 2.2.9; 2.3.0 before 2.3.2 |
| CVE-2021-28583 | 4.2 | Jun 28 | Magento versions 2.4.2 (and earlier), 2.4.1-p1 (and earlier) and 2.3.6-p1 (and earlier) are affected by a Violation of Secure Design Principles vulnerability in RMA PDF filename… Affected: before 2.3.6; before 2.3.6; 2.3.6; 2.3.6; 2.3.6; 2.3.6; +6 more |
| CVE-2020-9690 | 4.2 | Jul 29 | Magento versions 2.3.5-p1 and earlier, and 2.3.5-p1 and earlier have an observable timing discrepancy vulnerability Affected: before 2.3.5; before 2.3.5; 2.3.5; 2.3.5; 2.3.5; 2.3.5 |