Approved changes feed: RSS · Atom

cpe:2.3:a:magento:magento:*:*:*:*:community:*:*:*

part: a version: * update: *

VendorMagento (aa019b60-1c50-5218-ad20-1f4a9a786d94)
ProductMagento (6f0f93c5-be7a-5b05-986f-1521453ea442)
Edition*
Language*
Software editioncommunity
Target software*
Target hardware*
Other*
NotesImported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:github/firegento/magento purl2cpe 2026-06-01 10:18:21.546225
pkg:magento/project-community-edition purl2cpe 2026-06-01 10:18:21.546228

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2020-9632 vulnerable 2026-06-08 05:28:02.482436 Details available
Magento versions 2.3.4 and earlier, 2.2.11 and earlier (see note), 1.14.4.4 and earlier, and 1.9.4.4 and earlier have a security mitigation bypass vulnerability. Successful exploitation could lead to arbitrary code execution.
Published: 2020-06-26T20:20:08.000Z
Updated: 2024-08-04T10:34:39.923Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-9631 vulnerable 2026-06-08 05:28:02.481800 Details available
Magento versions 2.3.4 and earlier, 2.2.11 and earlier (see note), 1.14.4.4 and earlier, and 1.9.4.4 and earlier have a security mitigation bypass vulnerability. Successful exploitation could lead to arbitrary code execution.
Published: 2020-06-26T20:20:35.000Z
Updated: 2024-08-04T10:34:39.871Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-9630 vulnerable 2026-06-08 05:28:02.481079 Details available
Magento versions 2.3.4 and earlier, 2.2.11 and earlier (see note), 1.14.4.4 and earlier, and 1.9.4.4 and earlier have a business logic error vulnerability. Successful exploitation could lead to privilege escalation.
Published: 2020-06-26T20:20:26.000Z
Updated: 2024-08-04T10:34:39.934Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-9591 vulnerable 2026-06-08 05:28:02.393137 Details available
Magento versions 2.3.4 and earlier, 2.2.11 and earlier (see note), 1.14.4.4 and earlier, and 1.9.4.4 and earlier have a defense-in-depth security mitigation vulnerability. Successful exploitation could lead to unauthorized access to admin panel.
Published: 2020-06-26T20:20:16.000Z
Updated: 2024-08-04T10:34:39.565Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-9588 vulnerable 2026-06-08 05:28:02.387710 Details available
Magento versions 2.3.4 and earlier, 2.2.11 and earlier (see note), 1.14.4.4 and earlier, and 1.9.4.4 and earlier have an observable timing discrepancy vulnerability. Successful exploitation could lead to signature verification bypass.
Published: 2020-06-26T20:20:53.000Z
Updated: 2024-08-04T10:34:39.466Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-9587 vulnerable 2026-06-08 05:28:02.386936 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-9585 vulnerable 2026-06-08 05:28:02.378015 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-9584 vulnerable 2026-06-08 05:28:02.377469 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-9583 vulnerable 2026-06-08 05:28:02.376811 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-9582 vulnerable 2026-06-08 05:28:02.376217 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-9581 vulnerable 2026-06-08 05:28:02.375508 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-9580 vulnerable 2026-06-08 05:28:02.374790 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-9579 vulnerable 2026-06-08 05:28:02.374248 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-9578 vulnerable 2026-06-08 05:28:02.373695 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-9577 vulnerable 2026-06-08 05:28:02.372962 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-9576 vulnerable 2026-06-08 05:28:02.368803 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-3758 vulnerable 2026-06-08 05:25:57.668846 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-3719 vulnerable 2026-06-08 05:25:57.618837 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-3718 vulnerable 2026-06-08 05:25:57.618346 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-3717 vulnerable 2026-06-08 05:25:57.617975 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-3716 vulnerable 2026-06-08 05:25:57.617573 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-3715 vulnerable 2026-06-08 05:25:57.614842 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-5301 vulnerable 2026-06-08 05:11:50.584745 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-4010 vulnerable 2026-06-08 05:07:46.407646 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-2212 vulnerable 2026-06-08 05:07:33.683002 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-8707 vulnerable 2026-06-08 05:07:04.750250 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-6497 vulnerable 2026-06-08 05:06:52.569344 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.