Adobe Magento
29 vulnérabilités publiées citent ce produit.
Tel que les CNA l’écrivent dans leurs fiches CVE (éditeur et produit) ; les versions sont les leurs.
| CVE | Versions vulnérables | Titre | Sévérité | Publiée | EPSS | Exploitation |
|---|---|---|---|---|---|---|
| CVE-2020-9691 | 2.3.5-p1 and earlier, and 2.3.5-p1 and earlier versions | Magento versions 2.3.5-p1 and earlier, and 2.3.5-p1 and earlier have a dom-based cross-site scripting vulnerability. Successful exploitation | CRITICAL 9.6 | 6.0 % | ||
| CVE-2020-9692 | 2.3.5-p1 and earlier, and 2.3.5-p1 and earlier versions | Magento versions 2.3.5-p1 and earlier, and 2.3.5-p1 and earlier have a security mitigation bypass vulnerability. Successful exploitation cou | MEDIUM 6.5 | 3.8 % | ||
| CVE-2020-9690 | 2.3.5-p1 and earlier, and 2.3.5-p1 and earlier versions | Magento versions 2.3.5-p1 and earlier, and 2.3.5-p1 and earlier have an observable timing discrepancy vulnerability. Successful exploitation | MEDIUM 4.2 | 1.6 % | ||
| CVE-2020-9689 | 2.3.5-p1 and earlier, and 2.3.5-p1 and earlier versions | Magento versions 2.3.5-p1 and earlier, and 2.3.5-p1 and earlier have a path traversal vulnerability. Successful exploitation could lead to a | MEDIUM 6.5 | 4.1 % | ||
| CVE-2020-9664 | 1.14.4.5 and earlier, and 1.9.4.5 and earlier versions | Magento versions 1.14.4.5 and earlier, and 1.9.4.5 and earlier have a php object injection vulnerability. Successful exploitation could lead | CRITICAL 9.8 | 8.4 % | ||
| CVE-2020-9665 | 1.14.4.5 and earlier, and 1.9.4.5 and earlier versions | Magento versions 1.14.4.5 and earlier, and 1.9.4.5 and earlier have a stored cross-site scripting vulnerability. Successful exploitation cou | MEDIUM 6.1 | 1.4 % | ||
| CVE-2020-9577 | 2.3.4 and earlier, 2.2.11 and earlier (see note), 1.14.4.4 and earlier, and 1.9.4.4 and earlier versions | Magento versions 2.3.4 and earlier, 2.2.11 and earlier (see note), 1.14.4.4 and earlier, and 1.9.4.4 and earlier have a stored cross-site sc | MEDIUM 6.1 | 1.5 % | ||
| CVE-2020-9576 | 2.3.4 and earlier, 2.2.11 and earlier (see note), 1.14.4.4 and earlier, and 1.9.4.4 and earlier versions | Magento versions 2.3.4 and earlier, 2.2.11 and earlier (see note), 1.14.4.4 and earlier, and 1.9.4.4 and earlier have a command injection vu | CRITICAL 9.8 | 5.7 % | ||
| CVE-2020-9588 | 2.3.4 and earlier, 2.2.11 and earlier (see note), 1.14.4.4 and earlier, and 1.9.4.4 and earlier versions | Magento versions 2.3.4 and earlier, 2.2.11 and earlier (see note), 1.14.4.4 and earlier, and 1.9.4.4 and earlier have an observable timing d | HIGH 7.2 | 2.9 % | ||
| CVE-2020-9578 | 2.3.4 and earlier, 2.2.11 and earlier (see note), 1.14.4.4 and earlier, and 1.9.4.4 and earlier versions | Magento versions 2.3.4 and earlier, 2.2.11 and earlier (see note), 1.14.4.4 and earlier, and 1.9.4.4 and earlier have a command injection vu | CRITICAL 9.8 | 5.7 % | ||
| CVE-2020-9631 | 2.3.4 and earlier, 2.2.11 and earlier (see note), 1.14.4.4 and earlier, and 1.9.4.4 and earlier versions | Magento versions 2.3.4 and earlier, 2.2.11 and earlier (see note), 1.14.4.4 and earlier, and 1.9.4.4 and earlier have a security mitigation | CRITICAL 9.8 | 7.4 % | ||
| CVE-2020-9630 | 2.3.4 and earlier, 2.2.11 and earlier (see note), 1.14.4.4 and earlier, and 1.9.4.4 and earlier versions | Magento versions 2.3.4 and earlier, 2.2.11 and earlier (see note), 1.14.4.4 and earlier, and 1.9.4.4 and earlier have a business logic error | CRITICAL 9.8 | 4.0 % | ||
| CVE-2020-9591 | 2.3.4 and earlier, 2.2.11 and earlier (see note), 1.14.4.4 and earlier, and 1.9.4.4 and earlier versions | Magento versions 2.3.4 and earlier, 2.2.11 and earlier (see note), 1.14.4.4 and earlier, and 1.9.4.4 and earlier have a defense-in-depth sec | HIGH 7.5 | 3.4 % | ||
| CVE-2020-9632 | 2.3.4 and earlier, 2.2.11 and earlier (see note), 1.14.4.4 and earlier, and 1.9.4.4 and earlier versions | Magento versions 2.3.4 and earlier, 2.2.11 and earlier (see note), 1.14.4.4 and earlier, and 1.9.4.4 and earlier have a security mitigation | CRITICAL 9.8 | 7.4 % | ||
| CVE-2020-9580 | 2.3.4 and earlier, 2.2.11 and earlier (see note), 1.14.4.4 and earlier, and 1.9.4.4 and earlier versions | Magento versions 2.3.4 and earlier, 2.2.11 and earlier (see note), 1.14.4.4 and earlier, and 1.9.4.4 and earlier have a security mitigation | CRITICAL 9.8 | 5.0 % | ||
| CVE-2020-9581 | 2.3.4 and earlier, 2.2.11 and earlier (see note), 1.14.4.4 and earlier, and 1.9.4.4 and earlier versions | Magento versions 2.3.4 and earlier, 2.2.11 and earlier (see note), 1.14.4.4 and earlier, and 1.9.4.4 and earlier have a stored cross-site sc | MEDIUM 6.1 | 1.5 % | ||
| CVE-2020-9582 | 2.3.4 and earlier, 2.2.11 and earlier (see note), 1.14.4.4 and earlier, and 1.9.4.4 and earlier versions | Magento versions 2.3.4 and earlier, 2.2.11 and earlier (see note), 1.14.4.4 and earlier, and 1.9.4.4 and earlier have a command injection vu | CRITICAL 9.8 | 5.7 % | ||
| CVE-2020-9583 | 2.3.4 and earlier, 2.2.11 and earlier (see note), 1.14.4.4 and earlier, and 1.9.4.4 and earlier versions | Magento versions 2.3.4 and earlier, 2.2.11 and earlier (see note), 1.14.4.4 and earlier, and 1.9.4.4 and earlier have a command injection vu | CRITICAL 9.8 | 5.7 % | ||
| CVE-2020-9587 | 2.3.4 and earlier, 2.2.11 and earlier (see note), 1.14.4.4 and earlier, and 1.9.4.4 and earlier versions | Magento versions 2.3.4 and earlier, 2.2.11 and earlier (see note), 1.14.4.4 and earlier, and 1.9.4.4 and earlier have an authorization bypas | HIGH 7.5 | 5.0 % | ||
| CVE-2020-9584 | 2.3.4 and earlier, 2.2.11 and earlier (see note), 1.14.4.4 and earlier, and 1.9.4.4 and earlier versions | Magento versions 2.3.4 and earlier, 2.2.11 and earlier (see note), 1.14.4.4 and earlier, and 1.9.4.4 and earlier have a stored cross-site sc | MEDIUM 5.4 | 1.2 % | ||
| CVE-2020-9579 | 2.3.4 and earlier, 2.2.11 and earlier (see note), 1.14.4.4 and earlier, and 1.9.4.4 and earlier versions | Magento versions 2.3.4 and earlier, 2.2.11 and earlier (see note), 1.14.4.4 and earlier, and 1.9.4.4 and earlier have a security mitigation | CRITICAL 9.8 | 5.0 % | ||
| CVE-2020-9585 | 2.3.4 and earlier, 2.2.11 and earlier (see note), 1.14.4.4 and earlier, and 1.9.4.4 and earlier versions | Magento versions 2.3.4 and earlier, 2.2.11 and earlier (see note), 1.14.4.4 and earlier, and 1.9.4.4 and earlier have a defense-in-depth sec | CRITICAL 9.8 | 4.9 % | ||
| CVE-2020-3758 | 2.3.3 and earlier ; 2.2.10 and earlier ; 1.14.4.3 and earlier ; … | Magento versions 2.3.3 and earlier, 2.2.10 and earlier, 1.14.4.3 and earlier, and 1.9.4.3 and earlier have a stored cross-site scripting vul | MEDIUM 6.1 | 1.8 % | ||
| CVE-2020-3719 | 2.3.3 and earlier ; 2.2.10 and earlier ; 1.14.4.3 and earlier ; … | Magento versions 2.3.3 and earlier, 2.2.10 and earlier, 1.14.4.3 and earlier, and 1.9.4.3 and earlier have an sql injection vulnerability. S | HIGH 7.5 | 3.2 % | ||
| CVE-2020-3718 | 2.3.3 and earlier ; 2.2.10 and earlier ; 1.14.4.3 and earlier ; … | Magento versions 2.3.3 and earlier, 2.2.10 and earlier, 1.14.4.3 and earlier, and 1.9.4.3 and earlier have a security bypass vulnerability. | CRITICAL 9.8 | 7.5 % | ||
| CVE-2020-3717 | 2.3.3 and earlier ; 2.2.10 and earlier ; 1.14.4.3 and earlier ; … | Magento versions 2.3.3 and earlier, 2.2.10 and earlier, 1.14.4.3 and earlier, and 1.9.4.3 and earlier have a path traversal vulnerability. S | MEDIUM 5.3 | 3.2 % | ||
| CVE-2020-3716 | 2.3.3 and earlier ; 2.2.10 and earlier ; 1.14.4.3 and earlier ; … | Magento versions 2.3.3 and earlier, 2.2.10 and earlier, 1.14.4.3 and earlier, and 1.9.4.3 and earlier have a deserialization of untrusted da | CRITICAL 9.8 | 14 % | ||
| CVE-2020-3715 | 2.3.3 and earlier ; 2.2.10 and earlier ; 1.14.4.3 and earlier ; … | Magento versions 2.3.3 and earlier, 2.2.10 and earlier, 1.14.4.3 and earlier, and 1.9.4.3 and earlier have a stored cross-site scripting vul | MEDIUM 6.1 | 1.8 % | ||
| CVE-2019-8235 | 2.3 prior to 2.3.1 ; 2.2 prior to 2.2.8 ; 2.1 prior to 2.1.17 | An insecure direct object reference (IDOR) vulnerability exists in Magento 2.3 prior to 2.3.1, 2.2 prior to 2.2.8, and 2.1 prior to 2.1.17 v | MEDIUM 6.5 | 1.9 % |