Read the docs

PayPal

Records26All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical1CVSS 9.0–10.0
CVSS high2CVSS 7.0–8.9

Exploited now

PayPal records in CISA KEV

No PayPal vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Paypal 3 records LOW Braintree/sanitize-url 2 records LOW Payments Pro 2 records LOW Payments Standard 2 records LOW Php Toolkit 2 records LOW Adaptive Payments Sdk 1 record LOW Instant Payment Notification 1 record LOW Invoicing 1 record LOW

Records

1 record in Instant Payment Notification · all components

TI-2012-04846 CVE-2012-5805 · GHSA-53jj-97mv-rp9x

The PayPal IPN functionality in Zen Cart does not verify that the server hostname matches…

Priority LOW 27

The PayPal IPN functionality in Zen Cart does not verify that the server hostname matches a domain name in the subject's Common Name (CN) or subjectAltName field of the X.509 certificate, which allows man-in-the-middle a…

CVSS 2.0MEDIUM 5.8 Network No auth Interaction — EPSS 0.00566 Published 2012-11-04 No fix listed CWE-20
Open these records in search →