Login Request a demo
MA
Product
Magento
by Magento · last CVE Sep 6, 2023
221
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Vulnerabilities221In the news0Timeline
Severity mix
Critical 31High 69Medium 112Low 4
Severity
All severities221Critical31High69Medium112Low4
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Magento to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2020-24406
3.7
2%
Nov 9
When in maintenance mode, Magento version 2.4.0 and 2.3.4 (and earlier) are affected by an information disclosure vulnerability that could expose the installation path during…
Affected: through 2.3.4; through 2.3.4; 2.4.0; 2.4.0
CVE-2021-28566
2.7
1%
Sep 8
Magento versions 2.4.2 (and earlier), 2.4.1-p1 (and earlier) and 2.3.6-p1 (and earlier) are vulnerable to an Information Disclosure vulnerability when uploading a modified png…
Affected: through 2.4.2; through 2.4.2
CVE-2020-24404
2.7
2%
Nov 9
Magento version 2.4.0 and 2.3.5p1 (and earlier) are affected by an incorrect permissions vulnerability within the Integrations component
Affected: before 2.3.5; before 2.3.5; 2.3.5; 2.3.5; 2.3.5; 2.3.5; +2 more
CVE-2020-24403
2.7
2%
Nov 9
Magento version 2.4.0 and 2.3.5p1 (and earlier) are affected by an incorrect user permissions vulnerability within the Inventory component
Affected: before 2.3.5; before 2.3.5; 2.3.5; 2.3.5; 2.3.5; 2.3.5; +2 more
Showing 4