Adobe Systems Incorporated Magento 2
52 published vulnerabilities name this product.
As the CNAs write it in their CVE records (vendor and product); the versions are theirs.
| CVE | Vulnerable versions | Title | Severity | Published | EPSS | Exploitation |
|---|---|---|---|---|---|---|
| CVE-2019-8132 | Magento 2.2 prior to 2.2.10 ; Magento 2.3 prior to 2.3.3 or 2.3.2-p1 | A stored cross-site scripting (XSS) vulnerability exists in Magento 2.2 prior to 2.2.10, Magento 2.3 prior to 2.3.3 or 2.3.2-p1. An authenti | MEDIUM 5.4 | 0.6 % | ||
| CVE-2019-8145 | Magento 2.2 prior to 2.2.10 ; Magento 2.3 prior to 2.3.3 or 2.3.2-p1 | A stored cross-site scripting (XSS) vulnerability exists in Magento 2.2 prior to 2.2.10, Magento 2.3 prior to 2.3.3 or 2.3.2-p1. An authenti | MEDIUM 5.4 | 0.6 % | ||
| CVE-2019-8158 | Magento 2.2 prior to 2.2.10 ; Magento 2.3 prior to 2.3.3 or 2.3.2-p1 | An XPath entity injection vulnerability exists in Magento 2.2 prior to 2.2.10, Magento 2.3 prior to 2.3.3 or 2.3.2-p1. An attacker can craft | CRITICAL 9.8 | 1.3 % | ||
| CVE-2019-8157 | Magento 2.2 prior to 2.2.10 ; Magento 2.3 prior to 2.3.3 or 2.3.2-p1 | A stored cross-site scripting (XSS) vulnerability exists in Magento 2.2 prior to 2.2.10, Magento 2.3 prior to 2.3.3 or 2.3.2-p1. An authenti | MEDIUM 5.4 | 0.6 % | ||
| CVE-2019-8156 | Magento 2.2 prior to 2.2.10 ; Magento 2.3 prior to 2.3.3 or 2.3.2-p1 | A server-side request forgery (SSRF) vulnerability exists in Magento 2.2 prior to 2.2.10, Magento 2.3 prior to 2.3.3 or 2.3.2-p1. An authent | HIGH 7.2 | 1.7 % | ||
| CVE-2019-8159 | Magento 2.2 prior to 2.2.10 ; Magento 2.3 prior to 2.3.3 or 2.3.2-p1 | A remote code execution vulnerability exists in Magento 2.2 prior to 2.2.10, Magento 2.3 prior to 2.3.3 or 2.3.2-p1. An authenticated user w | HIGH 8.8 | 3.3 % | ||
| CVE-2019-8233 | Magento 2.2 prior to 2.2.10, Magento 2.3 prior to 2.3.3 or 2.3.2-p1 | In Magento 2.2 prior to 2.2.10, Magento 2.3 prior to 2.3.3 or 2.3.2-p1, an unauthenticated user can inject arbitrary JavaScript code as a re | MEDIUM 6.1 | 0.7 % | ||
| CVE-2019-8154 | Magento 2.2 prior to 2.2.10 ; Magento 2.3 prior to 2.3.3 or 2.3.2-p1 | A remote code execution vulnerability exists in Magento 2.2 prior to 2.2.10, Magento 2.3 prior to 2.3.3 or 2.3.2-p1. An authenticated user w | HIGH 8.8 | 1.9 % | ||
| CVE-2019-8153 | Magento 2.2 prior to 2.2.10 ; Magento 2.3 prior to 2.3.3 or 2.3.2-p1 | A mitigation bypass to prevent cross-site scripting (XSS) exists in Magento 2.2 prior to 2.2.10, Magento 2.3 prior to 2.3.3 or 2.3.2-p1. Suc | MEDIUM 6.1 | 1.5 % | ||
| CVE-2019-8151 | Magento 2.2 prior to 2.2.10 ; Magento 2.3 prior to 2.3.3 or 2.3.2-p1 | A remote code execution vulnerability exists in Magento 2.2 prior to 2.2.10, Magento 2.3 prior to 2.3.3 or 2.3.2-p1. An authenticated user w | HIGH 7.2 | 1.7 % | ||
| CVE-2019-8150 | Magento 2.2 prior to 2.2.10 ; Magento 2.3 prior to 2.3.3 or 2.3.2-p1 | A remote code execution vulnerability exists in Magento 2.2 prior to 2.2.10, Magento 2.3 prior to 2.3.3 or 2.3.2-p1. An authenticated user w | HIGH 8.8 | 1.9 % | ||
| CVE-2019-8149 | Magento 2.2 prior to 2.2.10 ; Magento 2.3 prior to 2.3.3 or 2.3.2-p1 | Insecure authentication and session management vulnerability exists in Magento 2.2 prior to 2.2.10, Magento 2.3 prior to 2.3.3 or 2.3.2-p1. | CRITICAL 9.8 | 2.1 % | ||
| CVE-2019-8148 | Magento 2.3 prior to 2.3.3 or 2.3.2-p1 | A stored cross-site scripting (XSS) vulnerability exists in Magento 2.3 prior to 2.3.3 or 2.3.2-p1. An authenticated admin user can inject a | MEDIUM 4.8 | 0.6 % | ||
| CVE-2019-8147 | Magento 2.2 prior to 2.2.10 ; Magento 2.3 prior to 2.3.3 or 2.3.2-p1 | A stored cross-site scripting (XSS) vulnerability exists in Magento 2.2 prior to 2.2.10, Magento 2.3 prior to 2.3.3 or 2.3.2-p1. An authenti | MEDIUM 5.4 | 0.6 % | ||
| CVE-2019-8146 | Magento 2.2 prior to 2.2.10 ; Magento 2.3 prior to 2.3.3 or 2.3.2-p1 | A stored cross-site scripting (XSS) vulnerability exists in Magento 2.2 prior to 2.2.10, Magento 2.3 prior to 2.3.3 or 2.3.2-p1. An authenti | MEDIUM 5.4 | 0.6 % | ||
| CVE-2019-8144 | Magento 2.3 prior to 2.3.3 or 2.3.2-p1 | A remote code execution vulnerability exists in Magento 2.3 prior to 2.3.3 or 2.3.2-p1. An unauthenticated user can insert a malicious paylo | CRITICAL 9.8 | 2.8 % | ||
| CVE-2019-8143 | Magento 2.2 prior to 2.2.10 ; Magento 2.3 prior to 2.3.3 or 2.3.2-p1 | A SQL injection vulnerability exists in Magento 2.2 prior to 2.2.10, Magento 2.3 prior to 2.3.3 or 2.3.2-p1. An authenticated user with acce | MEDIUM 6.5 | 0.9 % | ||
| CVE-2019-8142 | Magento 2.2 prior to 2.2.10 ; Magento 2.3 prior to 2.3.3 or 2.3.2-p1 | A stored cross-site scripting (XSS) vulnerability exists in Magento 2.2 prior to 2.2.10, Magento 2.3 prior to 2.3.3 or 2.3.2-p1. An authenti | MEDIUM 5.4 | 0.6 % | ||
| CVE-2019-8141 | Magento 2.2 prior to 2.2.10 ; Magento 2.3 prior to 2.3.3 or 2.3.2-p1 | A remote code execution vulnerability exists in Magento 2.1 prior to 2.1.19, Magento 2.2 prior to 2.2.10, Magento 2.3 prior to 2.3.3. An aut | HIGH 7.2 | 2.4 % | ||
| CVE-2019-8140 | Magento 2.2 prior to 2.2.10 ; Magento 2.3 prior to 2.3.3 or 2.3.2-p1 | An unrestricted file upload vulnerability exists in Magento 2.2 prior to 2.2.10, Magento 2.3 prior to 2.3.3 or 2.3.2-p1. An authenticated ad | MEDIUM 4.9 | 0.8 % | ||
| CVE-2019-8139 | Magento 2.3 prior to 2.3.3 or 2.3.2-p1 | A stored cross-site scripting (XSS) vulnerability exists in Magento 2.3 prior to 2.3.3 or 2.3.2-p1. An authenticated user can inject arbitra | MEDIUM 5.4 | 0.6 % | ||
| CVE-2019-8138 | Magento 2.2 prior to 2.2.10 ; Magento 2.3 prior to 2.3.3 or 2.3.2-p1 | A stored cross-site scripting (XSS) vulnerability exists in Magento 2.2 prior to 2.2.10, Magento 2.3 prior to 2.3.3 or 2.3.2-p1. An authenti | MEDIUM 5.4 | 0.6 % | ||
| CVE-2019-8137 | Magento 2.2 prior to 2.2.10 ; Magento 2.3 prior to 2.3.3 or 2.3.2-p1 | A remote code execution vulnerability exists in Magento 2.2 prior to 2.2.10, Magento 2.3 prior to 2.3.3 or 2.3.2-p1. An authenticated user w | HIGH 8.8 | 1.9 % | ||
| CVE-2019-8136 | Magento 2.2 prior to 2.2.10 ; Magento 2.3 prior to 2.3.3 or 2.3.2-p1 | An insecure component vulnerability exists in Magento 2.2 prior to 2.2.10, Magento 2.3 prior to 2.3.3 or 2.3.2-p1. Magento 2 codebase levera | CRITICAL 9.8 | 1.2 % | ||
| CVE-2019-8135 | Magento 2.2 prior to 2.2.10 ; Magento 2.3 prior to 2.3.3 or 2.3.2-p1 | A remote code execution vulnerability exists in Magento 2.2 prior to 2.2.10, Magento 2.3 prior to 2.3.3 or 2.3.2-p1. Dependency injection th | CRITICAL 9.8 | 2.5 % | ||
| CVE-2019-8134 | Magento 2.2 prior to 2.2.10 ; Magento 2.3 prior to 2.3.3 or 2.3.2-p1 | A SQL injection vulnerability exists in Magento 2.2 prior to 2.2.10, Magento 2.3 prior to 2.3.3 or 2.3.2-p1. A user with marketing privilege | HIGH 8.8 | 1.0 % | ||
| CVE-2019-8133 | Magento 2.2 prior to 2.2.10 ; Magento 2.3 prior to 2.3.3 or 2.3.2-p1 | A security bypass vulnerability exists in Magento 2.2 prior to 2.2.10, Magento 2.3 prior to 2.3.3 or 2.3.2-p1. A user with privileges to gen | MEDIUM 6.5 | 1.0 % | ||
| CVE-2019-8131 | Magento 2.2 prior to 2.2.10 ; Magento 2.3 prior to 2.3.3 or 2.3.2-p1 | A stored cross-site scripting (XSS) vulnerability exists in Magento 2.2 prior to 2.2.10, Magento 2.3 prior to 2.3.3 or 2.3.2-p1. An authenti | MEDIUM 5.4 | 0.6 % | ||
| CVE-2019-8130 | Magento 2.2 prior to 2.2.10 ; Magento 2.3 prior to 2.3.3 or 2.3.2-p1 | A SQL injection vulnerability exists in Magento 2.2 prior to 2.2.10, Magento 2.3 prior to 2.3.3 or 2.3.2-p1. A user with store manipulation | HIGH 8.8 | 1.0 % | ||
| CVE-2019-8129 | Magento 2.2 prior to 2.2.10 ; Magento 2.3 prior to 2.3.3 or 2.3.2-p1 | A stored cross-site scripting (XSS) vulnerability exists in Magento 2.2 prior to 2.2.10, Magento 2.3 prior to 2.3.3 or 2.3.2-p1. An authenti | MEDIUM 5.4 | 0.6 % | ||
| CVE-2019-8128 | Magento 2.2 prior to 2.2.10 ; Magento 2.3 prior to 2.3.3 or 2.3.2-p1 | A stored cross-site scripting (XSS) vulnerability exists in Magento 2.2 prior to 2.2.10, Magento 2.3 prior to 2.3.3 or 2.3.2-p1. An authenti | MEDIUM 5.4 | 0.6 % | ||
| CVE-2019-8127 | Magento 2.2 prior to 2.2.10 ; Magento 2.3 prior to 2.3.3 or 2.3.2-p1 | A SQL injection vulnerability exists in Magento 2.2 prior to 2.2.10, Magento 2.3 prior to 2.3.3 or 2.3.2-p1. An authenticated user with priv | HIGH 8.8 | 1.3 % | ||
| CVE-2019-8126 | Magento 2.2 prior to 2.2.10 ; Magento 2.3 prior to 2.3.3 or 2.3.2-p1 | An XML entity injection vulnerability exists in Magento 2.2 prior to 2.2.10, Magento 2.3 prior to 2.3.3 or 2.3.2-p1. An authenticated admin | MEDIUM 4.9 | 0.9 % | ||
| CVE-2019-8124 | Magento 2.2 prior to 2.2.10, Magento 2.3 prior to 2.3.3 or 2.3.2-p2 | An insufficient logging and monitoring vulnerability exists in Magento 2.1 prior to 2.1.19, Magento 2.2 prior to 2.2.10, Magento 2.3 prior t | MEDIUM 4.9 | 1.0 % | ||
| CVE-2019-8122 | Magento 2.2 prior to 2.2.10, Magento 2.3 prior to 2.3.3 or 2.3.2-p2 | A remote code execution vulnerability exists in Magento 2.1 prior to 2.1.19, Magento 2.2 prior to 2.2.10, Magento 2.3 prior to 2.3.3. An aut | HIGH 8.8 | 1.9 % | ||
| CVE-2019-8121 | Magento 2.2 prior to 2.2.10, Magento 2.3 prior to 2.3.3 or 2.3.2-p2 | An insecure component vulnerability exists in Magento 2.1 prior to 2.1.19, Magento 2.2 prior to 2.2.10, Magento 2.3 prior to 2.3.3. Magento | CRITICAL 9.8 | 1.2 % | ||
| CVE-2019-8120 | Magento 2.2 prior to 2.2.10, Magento 2.3 prior to 2.3.3 or 2.3.2-p2 | A stored cross-site scripting (XSS) vulnerability exists in Magento 2.1 prior to 2.1.19, Magento 2.2 prior to 2.2.10, Magento 2.3 prior to 2 | MEDIUM 5.4 | 0.6 % | ||
| CVE-2019-8119 | Magento 2.2 prior to 2.2.10, Magento 2.3 prior to 2.3.3 or 2.3.2-p2 | A remote code execution vulnerability exists in Magento 2.1 prior to 2.1.19, Magento 2.2 prior to 2.2.10, Magento 2.3 prior to 2.3.3. An aut | HIGH 7.2 | 1.9 % | ||
| CVE-2019-8118 | Magento 2.2 prior to 2.2.10, Magento 2.3 prior to 2.3.3 or 2.3.2-p2 | Magento 2.1 prior to 2.1.19, Magento 2.2 prior to 2.2.10, Magento 2.3 prior to 2.3.3 uses weak cryptographic function to store the failed lo | MEDIUM 5.3 | 0.7 % | ||
| CVE-2019-8117 | Magento 2.2 prior to 2.2.10 ; Magento 2.3 prior to 2.3.3 or 2.3.2-p1 | A stored cross-site scripting (XSS) vulnerability exists in Magento 2.2 prior to 2.2.10, Magento 2.3 prior to 2.3.3 or 2.3.2-p1. An authenti | MEDIUM 5.4 | 0.6 % | ||
| CVE-2019-8116 | Magento 2.2 prior to 2.2.10 ; Magento 2.3 prior to 2.3.3 or 2.3.2-p1 | Insecure authentication and session management vulnerability exists in Magento 2.2 prior to 2.2.10, Magento 2.3 prior to 2.3.3 or 2.3.2-p1. | HIGH 7.5 | 1.9 % | ||
| CVE-2019-8115 | Magento 2.2 prior to 2.2.10 ; Magento 2.3 prior to 2.3.3 or 2.3.2-p1 | A reflected cross-site scripting (XSS) vulnerability exists in Magento 2.2 prior to 2.2.10, Magento 2.3 prior to 2.3.3 or 2.3.2-p1. An authe | MEDIUM 4.8 | 0.6 % | ||
| CVE-2019-8113 | Magento 2.2 prior to 2.2.10 ; Magento 2.3 prior to 2.3.3 or 2.3.2-p1 | Magento 2.2 prior to 2.2.10, Magento 2.3 prior to 2.3.3 or 2.3.2-p1 uses cryptographically weak random number generator to brute-force the c | MEDIUM 5.3 | 0.9 % | ||
| CVE-2019-8112 | Magento 2.2 prior to 2.2.10 ; Magento 2.3 prior to 2.3.3 or 2.3.2-p1 | A security bypass vulnerability exists in Magento 2.2 prior to 2.2.10, Magento 2.3 prior to 2.3.3 or 2.3.2-p1. An unauthenticated user can b | HIGH 7.5 | 0.6 % | ||
| CVE-2019-8111 | Magento 2.2 prior to 2.2.10 ; Magento 2.3 prior to 2.3.3 or 2.3.2-p1 | A remote code execution vulnerability exists in Magento 2.2 prior to 2.2.10, Magento 2.3 prior to 2.3.3 or 2.3.2-p1. An authenticated user c | HIGH 8.8 | 1.9 % | ||
| CVE-2019-8110 | Magento 2.2 prior to 2.2.10 ; Magento 2.3 prior to 2.3.3 or 2.3.2-p1 | A remote code execution vulnerability exists in Magento 2.2 prior to 2.2.10, Magento 2.3 prior to 2.3.3 or 2.3.2-p1. An authenticated user c | HIGH 8.8 | 1.9 % | ||
| CVE-2019-8109 | Magento 2.2 prior to 2.2.10 ; Magento 2.3 prior to 2.3.3 or 2.3.2-p1 | A remote code execution vulnerability exists in Magento 2.2 prior to 2.2.10, Magento 2.3 prior to 2.3.3 or 2.3.2-p1. An authenticated user c | HIGH 8.0 | 0.9 % | ||
| CVE-2019-8108 | Magento 2.2 prior to 2.2.10 ; Magento 2.3 prior to 2.3.3 or 2.3.2-p1 | Insecure authentication and session management vulnerability exists in Magento 2.2 prior to 2.2.10, Magento 2.3 prior to 2.3.3 or 2.3.2-p1. | MEDIUM 6.5 | 1.2 % | ||
| CVE-2019-8107 | Magento 2.2 prior to 2.2.10 ; Magento 2.3 prior to 2.3.3 or 2.3.2-p1 | An arbitrary file deletion vulnerability exists in Magento 2.2 prior to 2.2.10, Magento 2.3 prior to 2.3.3 or 2.3.2-p1. An authenticated use | MEDIUM 6.5 | 0.9 % | ||
| CVE-2019-8093 | Magento 2.2 prior to 2.2.10 ; Magento 2.3 prior to 2.3.3 or 2.3.2-p1 | An arbitrary file access vulnerability exists in Magento 2.2 prior to 2.2.10, Magento 2.3 prior to 2.3.3 or 2.3.2-p1. An authenticated user | HIGH 8.8 | 1.3 % | ||
| CVE-2019-8092 | Magento 2.2 prior to 2.2.10 ; Magento 2.3 prior to 2.3.3 or 2.3.2-p1 | A reflected cross-site scripting (XSS) vulnerability exists in Magento 2.2 prior to 2.2.10, Magento 2.3 prior to 2.3.3 or 2.3.2-p1. An authe | MEDIUM 5.4 | 0.6 % | ||
| CVE-2019-8090 | Magento 2.2 prior to 2.2.10, Magento 2.3 prior to 2.3.3 or 2.3.2-p2 | An arbitrary file deletion vulnerability exists in Magento 2.1 prior to 2.1.19, Magento 2.2 prior to 2.2.10, Magento 2.3 prior to 2.3.3. An | MEDIUM 6.5 | 0.8 % |