Magento

Records224All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical33CVSS 9.0–10.0

CVSS high70CVSS 7.0–8.9

Exploited now

Magento records in CISA KEV

No Magento vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Magento 221 records CRITICAL Advanced Newsletter 1 record MEDIUM Magento2 1 record LOW Upward Connector 1 record LOW Upward Php 1 record LOW

Records

1 record in Advanced Newsletter · all components

TI-2014-01268 CVE-2014-1634 · GHSA-pr7r-fmcf-pf29

SQL Injection exists in Advanced Newsletter Magento extension before 2.3.5 via the…

MEDIUM 45

SQL Injection exists in Advanced Newsletter Magento extension before 2.3.5 via the /store/advancednewsletter/index/subscribeajax/an_category_id/ PATH_INFO.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01446 Published 2020-03-09 No fix listed CWE-89

Open these records in search →

Critical	33
High	70
Medium	117
Low	4
No CVSS	0