OpenMage

Records27All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical3CVSS 9.0–10.0

CVSS high15CVSS 7.0–8.9

Exploited now

OpenMage records in CISA KEV

No OpenMage vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Magento 18 records HIGH Openmage 4 records MEDIUM Openmage Long Term Support 1 record LOW

Records

1 record in Openmage Long Term Support · all components

TI-2020-11923 CVE-2020-15151 · GHSA-crf2-xm6x-46p6

Observable Timing Discrepancy in OpenMage LTS

LOW 37

OpenMage LTS before versions 19.4.6 and 20.0.2 allows attackers to circumvent the `fromkey protection` in the Admin Interface and increases the attack surface for Cross Site Request Forgery attacks.

CVSS 3.1HIGH 8.0 Network No auth User interaction EPSS 0.00931 Published 2020-08-19 Fixed in 20.0.2, 19.4.6 CWE-203

Open these records in search →

Critical	3
High	15
Medium	8
Low	1
No CVSS	0