Read the docs

Magento

Records224All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical33CVSS 9.0–10.0
CVSS high70CVSS 7.0–8.9

Exploited now

Magento records in CISA KEV

No Magento vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Magento 221 records CRITICAL Advanced Newsletter 1 record MEDIUM Magento2 1 record LOW Upward Connector 1 record LOW Upward Php 1 record LOW

Records

1 record in Magento2 · all components

TI-2016-05559 CVE-2016-6485 · GHSA-h7qw-mxrm-c6h2

The __construct function in Framework/Encryption/Crypt.php in Magento 2 uses the PHP rand…

Priority LOW 34

The __construct function in Framework/Encryption/Crypt.php in Magento 2 uses the PHP rand function to generate a random number for the initialization vector, which makes it easier for remote attackers to defeat cryptogra…

CVSS 3.0HIGH 7.5 Network No auth No interaction EPSS 0.00846 Published 2017-03-01 Fixed in 2.2.6 CWE-327
Open these records in search →