What’s Vulnerable › Products

oroinc orocommerce vulnerabilities

4 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 0 published in the last 12 months.

Check whether your oroinc orocommerce version is affected

Latest oroinc orocommerce vulnerabilities

• CVE-2023-32065 — OroCommerce get-totals-for-checkout API endpoint returns unwanted data (CVSS 5.8)
• CVE-2023-32064 — OroCommerce Customer Portal Incorrect Customer and Customer Group Frontend Menus pages visibility (CVSS 4.3)
• CVE-2022-35950 — OroCommerce Cross-site Scripting vulnerability in add note dialog of Shopping List line item (CVSS 4.8)
• CVE-2022-31037 — OroCommerce vulnerable to Cross-site Scripting via Shipping rule editing page (CVSS 5.4)