Broadleafcommerce

Records2All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

Broadleafcommerce records in CISA KEV

No Broadleafcommerce vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Broadleaf Commerce 2 records LOW

Records

2 records in Broadleaf Commerce · all components

TI-2020-14024 CVE-2020-21266 · GHSA-45hj-7274-8m7f

Broadleaf Commerce 5.1.14-GA is affected by cross-site scripting (XSS) due to a slow HTTP post vulnerability.

LOW 29

Broadleaf Commerce 5.1.14-GA is affected by cross-site scripting (XSS) due to a slow HTTP post vulnerability.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00766 Published 2020-10-29 No fix listed CWE-79

TI-2023-16654 CVE-2023-33725 · GHSA-3862-fmr3-4f3h

Broadleaf 5.x and 6.x (including 5.2.25-GA and 6.2.6-GA) was discovered to contain a…

LOW 28

Broadleaf 5.x and 6.x (including 5.2.25-GA and 6.2.6-GA) was discovered to contain a cross-site scripting (XSS) vulnerability via a customer signup with a crafted email address.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00498 Published 2023-06-21 Fixed in 6.2.7-GA CWE-79

Open these records in search →

Critical	0
High	0
Medium	2
Low	0
No CVSS	0