Adobe Systems Incorporated Magento 1
8 vulnérabilités publiées citent ce produit.
Tel que les CNA l’écrivent dans leurs fiches CVE (éditeur et produit) ; les versions sont les leurs.
| CVE | Versions vulnérables | Titre | Sévérité | Publiée | EPSS | Exploitation |
|---|---|---|---|---|---|---|
| CVE-2019-8227 | Magento Open Source prior to 1.9.4.3 ; and Magento Commerce prior to 1.14.4.3 | In Magento prior to 1.9.4.3 and Magento prior to 1.14.4.3, an authenticated user with limited administrative privileges can inject arbitrary | MEDIUM 4.8 | 0.5 % | ||
| CVE-2019-8228 | Magento Open Source prior to 1.9.4.3 ; Magento Commerce prior to 1.14.4.3 | in Magento prior to 1.9.4.3 and Magento prior to 1.14.4.3, an authenticated user with limited administrative privileges can inject arbitrary | MEDIUM 4.8 | 0.5 % | ||
| CVE-2019-8229 | Magento Open Source prior to 1.9.4.3 ; and Magento Commerce prior to 1.14.4.3 | In Magento prior to 1.9.4.3, and Magento prior to 1.14.4.3, an authenticated user with administrative privileges to edit product attributes | HIGH 7.2 | 1.4 % | ||
| CVE-2019-8230 | Magento Open Source prior to 1.9.4.3 ; and Magento Commerce prior to 1.14.4.3 | In Magentoprior to 1.9.4.3, and Magento prior to 1.14.4.3, an authenticated user with administrative privileges to edit configuration settin | HIGH 7.2 | 1.4 % | ||
| CVE-2019-8231 | Magento Open Source prior to 1.9.4.3 ; Magento Commerce prior to 1.14.4.3 | In Magento to 1.9.4.3 and Magento prior to 1.14.4.3, an authenticated user with administrative privileges for editing attribute sets can exe | HIGH 7.2 | 1.4 % | ||
| CVE-2019-8155 | Magento Open Source prior to 1.9.4.3 ; Magento Commerce prior to 1.14.4.3 | Magento prior to 1.9.4.3 and prior to 1.14.4.3 included a user's CSRF token in the URL of a GET request. This could be exploited by an attac | HIGH 7.5 | 0.5 % | ||
| CVE-2019-8125 | Magento Open Source prior to 1.9.4.3, and Magento Commerce prior to 1.14.4.3. | A remote code execution vulnerability exists in Magento 1 prior to 1.9.x and 1.14.x. An authenticated admin user can modify configuration pa | HIGH 7.2 | 1.7 % | ||
| CVE-2019-8091 | Magento Open Source prior to 1.9.4.3 ; and Magento Commerce prior to 1.14.4.3 | A remote code execution vulnerability exists in Magento 1 prior to 1.9.4.3 and 1.14.4.3. An authenticated admin user with privileges to acce | HIGH 7.2 | 1.7 % |