Approved changes feed: RSS · Atom
cpe:2.3:a:n/a:magento_2:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | N/A (22f567d3-1203-528c-8f0e-3eb9c2f6ca78) |
|---|---|
| Product | Magento 2 (23450c19-7ef3-58f2-895c-e48172bf17e5) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2019-7951 |
vulnerable | 2026-06-08 05:14:14.889844 |
Details available
An information leakage vulnerability exists in Magento 2.1 prior to 2.1.18, Magento 2.2 prior to 2.2.9, Magento 2.3 prior to 2.3.2. A SOAP web service endpoint does not properly enforce parameters related to access control. This could be abused to leak customer information via crafted SOAP requests.
Published: 2019-08-02T21:36:12.000Z
Updated: 2024-08-04T21:02:19.405Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-7950 |
vulnerable | 2026-06-08 05:14:14.889433 |
Details available
An access control bypass vulnerability exists in Magento 2.1 prior to 2.1.18, Magento 2.2 prior to 2.2.9, Magento 2.3 prior to 2.3.2. An unauthenticated user can bypass access controls via REST API calls to assign themselves to an arbitrary company, thereby gaining read access to potentially confidental information.
Published: 2019-08-02T21:35:49.000Z
Updated: 2024-08-04T21:02:19.442Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-7942 |
vulnerable | 2026-06-08 05:14:14.888111 |
Details available
A remote code execution vulnerability exists in Magento 2.1 prior to 2.1.18, Magento 2.2 prior to 2.2.9, Magento 2.3 prior to 2.3.2. An authenticated user with admin privileges to create or edit a product can execute arbitrary code via malicious XML layout updates.
Published: 2019-08-02T21:34:07.000Z
Updated: 2024-08-04T21:02:19.368Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-7939 |
vulnerable | 2026-06-08 05:14:14.887058 |
Details available
A reflected cross-site scripting vulnerability exists on the customer cart checkout page of Magento 2.1 prior to 2.1.18, Magento 2.2 prior to 2.2.9, Magento 2.3 prior to 2.3.2. This could be exploited by sending a victim a crafted URL that results in malicious javascript execution in the victim's browser.
Published: 2019-08-02T21:33:20.000Z
Updated: 2024-08-04T21:02:19.432Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-7937 |
vulnerable | 2026-06-08 05:14:14.886358 |
Details available
A stored cross-site scripting vulnerability exists in the admin panel of Magento 2.1 prior to 2.1.18, Magento 2.2 prior to 2.2.9, Magento 2.3 prior to 2.3.2. This could be exploited by an authenticated user with privileges to store product attributes to inject malicious javascript.
Published: 2019-08-02T21:32:35.000Z
Updated: 2024-08-04T21:02:19.410Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-7936 |
vulnerable | 2026-06-08 05:14:14.886067 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-7930 |
vulnerable | 2026-06-08 05:14:14.875687 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-7929 |
vulnerable | 2026-06-08 05:14:14.875405 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-7928 |
vulnerable | 2026-06-08 05:14:14.875120 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-7927 |
vulnerable | 2026-06-08 05:14:14.874819 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-7926 |
vulnerable | 2026-06-08 05:14:14.874426 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-7925 |
vulnerable | 2026-06-08 05:14:14.874019 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-7923 |
vulnerable | 2026-06-08 05:14:14.873716 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-7921 |
vulnerable | 2026-06-08 05:14:14.873283 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-7915 |
vulnerable | 2026-06-08 05:14:14.866123 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-7913 |
vulnerable | 2026-06-08 05:14:14.865841 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-7912 |
vulnerable | 2026-06-08 05:14:14.865553 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-7908 |
vulnerable | 2026-06-08 05:14:14.864489 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-7904 |
vulnerable | 2026-06-08 05:14:14.864216 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-7903 |
vulnerable | 2026-06-08 05:14:14.863831 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-7896 |
vulnerable | 2026-06-08 05:14:14.862423 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-7895 |
vulnerable | 2026-06-08 05:14:14.862132 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-7892 |
vulnerable | 2026-06-08 05:14:14.861838 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-7890 |
vulnerable | 2026-06-08 05:14:14.861336 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-7888 |
vulnerable | 2026-06-08 05:14:14.860665 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-7886 |
vulnerable | 2026-06-08 05:14:14.859882 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-7885 |
vulnerable | 2026-06-08 05:14:14.859499 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-7881 |
vulnerable | 2026-06-08 05:14:14.858674 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-7880 |
vulnerable | 2026-06-08 05:14:14.858409 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-7877 |
vulnerable | 2026-06-08 05:14:14.858116 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-7876 |
vulnerable | 2026-06-08 05:14:14.857828 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-7874 |
vulnerable | 2026-06-08 05:14:14.857074 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-7873 |
vulnerable | 2026-06-08 05:14:14.856774 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-7872 |
vulnerable | 2026-06-08 05:14:14.856466 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-7871 |
vulnerable | 2026-06-08 05:14:14.856138 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-7869 |
vulnerable | 2026-06-08 05:14:14.851190 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-7868 |
vulnerable | 2026-06-08 05:14:14.850920 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-7867 |
vulnerable | 2026-06-08 05:14:14.850657 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-7866 |
vulnerable | 2026-06-08 05:14:14.850381 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-7865 |
vulnerable | 2026-06-08 05:14:14.850098 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-7864 |
vulnerable | 2026-06-08 05:14:14.849830 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-7863 |
vulnerable | 2026-06-08 05:14:14.849562 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-7862 |
vulnerable | 2026-06-08 05:14:14.849276 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-7861 |
vulnerable | 2026-06-08 05:14:14.849004 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-7860 |
vulnerable | 2026-06-08 05:14:14.848727 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-7859 |
vulnerable | 2026-06-08 05:14:14.848441 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-7858 |
vulnerable | 2026-06-08 05:14:14.848032 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-7857 |
vulnerable | 2026-06-08 05:14:14.847754 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-7855 |
vulnerable | 2026-06-08 05:14:14.847475 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-7854 |
vulnerable | 2026-06-08 05:14:14.847192 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-7853 |
vulnerable | 2026-06-08 05:14:14.846882 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-7852 |
vulnerable | 2026-06-08 05:14:14.846439 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-7851 |
vulnerable | 2026-06-08 05:14:14.846027 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.