Magento Luki w zabezpieczeniach

Oś czasu

Ostatni rok

Wersja

2.3.0193
2.3.1193
2.2.0148
2.2.1148
2.2.2148

Przeciwdziałanie

Official Fix188
Temporary Fix0
Workaround0
Unavailable1
Not Defined58

Wykorzystywanie

High2
Functional0
Proof-of-Concept0
Unproven2
Not Defined243

Wektor dostępu

Not Defined0
Physical0
Local1
Adjacent5
Network241

Uwierzytelnianie

Not Defined0
High39
Low112
None96

Interakcja z użytkownikiem

Not Defined0
Required91
None156

C3BM Index

Ostatni rok

CVSSv3 Base

≤10
≤20
≤32
≤45
≤583
≤650
≤751
≤845
≤910
≤101

CVSSv3 Temp

≤10
≤20
≤32
≤425
≤565
≤649
≤757
≤838
≤910
≤101

VulDB

≤10
≤20
≤35
≤451
≤566
≤631
≤763
≤830
≤90
≤101

NVD

≤10
≤20
≤30
≤40
≤533
≤632
≤725
≤846
≤915
≤1023

CNA

≤10
≤20
≤30
≤40
≤51
≤61
≤71
≤83
≤91
≤104

Sprzedawca

≤10
≤20
≤30
≤40
≤50
≤61
≤70
≤80
≤90
≤101

Research

≤10
≤20
≤30
≤40
≤50
≤60
≤70
≤80
≤90
≤100

Exploit 0-day

<1k53
<2k110
<5k74
<10k10
<25k0
<50k0
<100k0
≥100k0

Wykorzystaj dzisiaj

<1k246
<2k1
<5k0
<10k0
<25k0
<50k0
<100k0
≥100k0

Wykorzystaj wielkość rynku

Ostatni rok

🔴 CTI Zajęcia

Affected Versions (135): 1.0, 1.1, 1.2, 1.2.1.1, 1.3, 1.4, 1.5, 1.5.1, 1.5.2, 1.6, 1.6.2, 1.7, 1.8, 1.9, 1.9.1, 1.9.2, 1.9.2.1, 1.9.2.2, 1.9.3, 1.9.4, 1.9.4.1, 1.9.4.2, 1.9.4.3, 1.9.4.4, 1.10, 1.11, 1.12, 1.13, 1.14, 1.14.1, 1.14.2, 1.14.2.1, 1.14.2.2, 1.14.3, 1.14.4, 1.14.4.1, 1.14.4.2, 1.14.4.3, 1.14.4.4, 1.14.4.5, 2, 2.0, 2.0.1, 2.0.2, 2.0.3, 2.0.4, 2.0.5, 2.0.6, 2.0.7, 2.0.8, 2.0.9, 2.0.11, 2.0.12, 2.0.13, 2.0.14, 2.0.15, 2.0.16, 2.0.17, 2.1, 2.1.1, 2.1.2, 2.1.3, 2.1.4, 2.1.5, 2.1.6, 2.1.7, 2.1.8, 2.1.9, 2.1.11, 2.1.12, 2.1.13, 2.1.14, 2.1.15, 2.1.16, 2.1.17, 2.1.18, 2.2, 2.2.1, 2.2.2, 2.2.3, 2.2.4, 2.2.5, 2.2.6, 2.2.7, 2.2.8, 2.2.9, 2.2.11, 2.3, 2.3.1, 2.3.2, 2.3.3, 2.3.4, 2.3.5, 2.3.5-p1, 2.3.5p1, 2.3.6, 2.3.6-p1, 2.3.7, 2.3.7p1, 2.4, 2.4.0-p1, 2.4.1, 2.4.1-p1, 2.4.2, 2.4.2-p1, 2.4.2-p2, 2.4.3, 2.4.4, 2.4.4-p1, 2.4.5, 19.4, 19.4.1, 19.4.2, 19.4.3, 19.4.4, 19.4.5, 19.4.6, 19.4.7, 19.4.8, 19.4.9, 19.4.11, 19.4.12, 19.4.13, 19.4.14, 20.0.1, 20.0.2, 20.0.3, 20.0.4, 20.0.5, 20.0.6, 20.0.7, 20.0.8, 20.0.9, 20.0.11, 20.0.12

Link to Product Website: https://www.adobe.com/

OpublikowanoBaseTempSłaby punkt0dayDzisiajWykPrzCTICVE
2023-09-066.96.8Adobe Magento CMS Page Scheduled Update privilege escalation$0-$5k$0-$5kNot DefinedOfficial Fix0.03CVE-2021-36021
2023-09-066.96.8Adobe Magento Media Gallery Upload privilege escalation$0-$5k$0-$5kNot DefinedOfficial Fix0.00CVE-2021-36036
2023-09-067.06.9Adobe Magento Commerce privilege escalation$0-$5k$0-$5kNot DefinedOfficial Fix0.04CVE-2021-36023
2023-06-066.36.1Cart2Cart Magento to WooCommerce Migration Plugin setToken privilege escalation$0-$5k$0-$5kNot DefinedNot Defined0.00CVE-2023-34379
2023-01-276.36.2Magento Composer privilege escalation$0-$5k$0-$5kNot DefinedOfficial Fix0.00CVE-2021-39217
2023-01-275.35.3Magento Composer denial of service$0-$5k$0-$5kNot DefinedOfficial Fix0.00CVE-2023-23617
2023-01-276.36.2Magento denial of service$0-$5k$0-$5kNot DefinedOfficial Fix0.00CVE-2021-41143
2023-01-277.57.4Magento Layout Update privilege escalation$0-$5k$0-$5kNot DefinedOfficial Fix0.00CVE-2021-41144
2023-01-276.76.6Magento Dataflow privilege escalation$0-$5k$0-$5kNot DefinedOfficial Fix0.05CVE-2021-41231
2022-10-115.35.2Adobe Commerce/Magento Open Source privilege escalation$5k-$25k$0-$5kNot DefinedOfficial Fix0.03CVE-2022-35689
2022-10-117.47.4Adobe Commerce/Magento Open Source cross site scripting$0-$5k$0-$5kNot DefinedOfficial Fix0.04CVE-2022-35698
2021-10-155.45.3Adobe Commerce/Magento cross site request forgery$0-$5k$0-$5kNot DefinedOfficial Fix0.02CVE-2021-39864
2021-09-095.04.8Adobe Magento Customers Module privilege escalation$5k-$25k$0-$5kNot DefinedOfficial Fix0.00CVE-2021-28567
2021-09-094.34.1Adobe Magento PNG Upload information disclosure$0-$5k$0-$5kNot DefinedOfficial Fix0.00CVE-2021-28566
2021-09-024.34.1Adobe Magento Commerce Form Field cross site scripting$0-$5k$0-$5kNot DefinedOfficial Fix0.00CVE-2021-36027
2021-09-024.34.1Adobe Magento Commerce Customer Address Upload cross site scripting$0-$5k$0-$5kNot DefinedOfficial Fix0.00CVE-2021-36026
2021-09-025.35.1Adobe Magento Commerce GraphQL denial of service$0-$5k$0-$5kNot DefinedOfficial Fix0.00CVE-2021-36044
2021-09-026.36.0Adobe Magento Commerce me privilege escalation$5k-$25k$0-$5kNot DefinedOfficial Fix0.00CVE-2021-36032
2021-09-025.45.2Adobe Magento Commerce Checkout privilege escalation$5k-$25k$0-$5kNot DefinedOfficial Fix0.00CVE-2021-36030
2021-09-025.45.2Adobe Magento Commerce Order privilege escalation$5k-$25k$0-$5kNot DefinedOfficial Fix0.00CVE-2021-36012
2021-09-024.34.1Adobe Magento Commerce privilege escalation$5k-$25k$0-$5kNot DefinedOfficial Fix0.00CVE-2021-36039
2021-09-024.34.1Adobe Magento Commerce Multishipping Module information disclosure$0-$5k$0-$5kNot DefinedOfficial Fix0.00CVE-2021-36038
2021-09-024.34.1Adobe Magento Commerce privilege escalation$5k-$25k$0-$5kNot DefinedOfficial Fix0.00CVE-2021-36037
2021-09-024.13.9Adobe Magento Commerce Dotmailer Extension privilege escalation$0-$5k$0-$5kNot DefinedOfficial Fix0.02CVE-2021-36043
2021-09-024.74.5Adobe Magento Commerce File Upload privilege escalation$0-$5k$0-$5kNot DefinedOfficial Fix0.00CVE-2021-36042

222 więcej wpisów nie jest pokazywanych

Might our Artificial Intelligence support you?

Check our Alexa App!