What’s Vulnerable › Products
Adobe Commerce vulnerabilities
23 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 0 published in the last 12 months.
Check whether your Adobe Commerce version is affected
Latest Adobe Commerce vulnerabilities
- CVE-2021-36044 — Magento Commerce GraphQL Improper Input Validation Could Lead To Denial Of Service (CVSS 5.0)
- CVE-2021-36043 — Magento Commerce Authenticated Blind SSRF Could Lead To Remote Code Execution (CVSS 6.6)
- CVE-2021-36042 — Magento Commerce API File Option Upload Extension Improper Input Validation Vulnerability Could Lead To Remote Code Execution (CVSS 7.2)
- CVE-2021-36041 — Magento Commerce Improper Input Validation Could Lead To Remote Code Execution (CVSS 7.2)
- CVE-2021-36040 — Magento Commerce Improper Input Validation Could Lead To Remote Code Execution (CVSS 7.2)
- CVE-2021-36039 — Magento Commerce `quoteId` parameter Incorrect Authorization Vulnerability Could Lead To Information Disclosure (CVSS 4.0)
- CVE-2021-36038 — Magento Commerce Multishipping Module Improper Input Validation Could Lead To Information Exposure (CVSS 4.0)
- CVE-2021-36037 — Magento Commerce Improper Authorization Vulnerability Could Lead To Information Exposure (CVSS 4.0)
- CVE-2021-36035 — Magento Commerce Stock Media Improper Input Validation Could Lead To Remote Code Execution (CVSS 7.2)
- CVE-2021-36034 — Magento Commerce Improper Input Validation Could Lead To Remote Code Execution (CVSS 7.2)
- CVE-2021-36033 — Magento Commerce Widgets Module XML Injection Vulnerability Could Lead To Remote Code Execution (CVSS 7.2)
- CVE-2021-36032 — Magento Commerce Improper Input Validation Could Lead To Information Exposure and Privilege Escalation (CVSS 8.8)
- CVE-2021-36031 — Magento Commerce Path Traversal In `theme[preview_image]` Parameter Could Lead To Remote Code Execution (CVSS 6.5)
- CVE-2021-36030 — Magento Commerce Improper Input Validation During Checkout Process Could Lead To Privilege Escalation (CVSS 7.5)
- CVE-2021-36029 — Magento Commerce Improper Authorization Vulnerability Could Lead To Remote Code Execution (CVSS 7.2)
- CVE-2021-36028 — Magento Commerce XML Injection Vulnerability Could Lead To Remote Code Execution (CVSS 7.2)
- CVE-2021-36027 — Magento Commerce Stored Cross-site Scripting Vulnerability (CVSS 6.1)
- CVE-2021-36026 — Magento Commerce Stored Cross-site Scripting Vulnerability (CVSS 6.1)
- CVE-2021-36025 — Magento Commerce Customer Edition Improper Input Validation Could Lead To Remote Code Execution (CVSS 7.2)
- CVE-2021-36024 — Magento Commerce Improper Neutralization of Special Elements Used In A Command (CVSS 7.2)
- CVE-2021-36022 — Magento Commerce Widgets Update Layout XML Injection Vulnerability Could Lead To Remote Code Execution (CVSS 7.2)
- CVE-2021-36020 — Magento Commerce XML Injection Vulnerability In The 'City' Field Could Lead To Remote Code Execution (CVSS 9.8)
- CVE-2021-36012 — Magento Commerce Gift Card Business Logic Error (CVSS 4.0)