Adobe Systems Incorporated Magento 1
8 published vulnerabilities name this product.
As the CNAs write it in their CVE records (vendor and product); the versions are theirs.
| CVE | Vulnerable versions | Title | Severity | Published | EPSS | Exploitation |
|---|---|---|---|---|---|---|
| CVE-2019-8227 | Magento Open Source prior to 1.9.4.3 ; and Magento Commerce prior to 1.14.4.3 | In Magento prior to 1.9.4.3 and Magento prior to 1.14.4.3, an authenticated user with limited administrative privileges can inject arbitrary | MEDIUM 4.8 | 0.5 % | ||
| CVE-2019-8228 | Magento Open Source prior to 1.9.4.3 ; Magento Commerce prior to 1.14.4.3 | in Magento prior to 1.9.4.3 and Magento prior to 1.14.4.3, an authenticated user with limited administrative privileges can inject arbitrary | MEDIUM 4.8 | 0.5 % | ||
| CVE-2019-8229 | Magento Open Source prior to 1.9.4.3 ; and Magento Commerce prior to 1.14.4.3 | In Magento prior to 1.9.4.3, and Magento prior to 1.14.4.3, an authenticated user with administrative privileges to edit product attributes | HIGH 7.2 | 1.4 % | ||
| CVE-2019-8230 | Magento Open Source prior to 1.9.4.3 ; and Magento Commerce prior to 1.14.4.3 | In Magentoprior to 1.9.4.3, and Magento prior to 1.14.4.3, an authenticated user with administrative privileges to edit configuration settin | HIGH 7.2 | 1.4 % | ||
| CVE-2019-8231 | Magento Open Source prior to 1.9.4.3 ; Magento Commerce prior to 1.14.4.3 | In Magento to 1.9.4.3 and Magento prior to 1.14.4.3, an authenticated user with administrative privileges for editing attribute sets can exe | HIGH 7.2 | 1.4 % | ||
| CVE-2019-8155 | Magento Open Source prior to 1.9.4.3 ; Magento Commerce prior to 1.14.4.3 | Magento prior to 1.9.4.3 and prior to 1.14.4.3 included a user's CSRF token in the URL of a GET request. This could be exploited by an attac | HIGH 7.5 | 0.5 % | ||
| CVE-2019-8125 | Magento Open Source prior to 1.9.4.3, and Magento Commerce prior to 1.14.4.3. | A remote code execution vulnerability exists in Magento 1 prior to 1.9.x and 1.14.x. An authenticated admin user can modify configuration pa | HIGH 7.2 | 1.7 % | ||
| CVE-2019-8091 | Magento Open Source prior to 1.9.4.3 ; and Magento Commerce prior to 1.14.4.3 | A remote code execution vulnerability exists in Magento 1 prior to 1.9.4.3 and 1.14.4.3. An authenticated admin user with privileges to acce | HIGH 7.2 | 1.7 % |