Approved changes feed: RSS · Atom
cpe:2.3:a:adobe_systems_incorporated:magento_2:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Adobe Systems Incorporated (01c82c24-64de-5c58-a31e-5b02ca0f0e97) |
|---|---|
| Product | Magento 2 (b874c4e5-6b05-5df8-814c-8fd5c1fa597b) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2019-8233 |
vulnerable | 2026-06-08 05:14:23.733000 |
Details available
In Magento 2.2 prior to 2.2.10, Magento 2.3 prior to 2.3.3 or 2.3.2-p1, an unauthenticated user can inject arbitrary JavaScript code as a result of the sanitization engine ignoring HTML comments.
Published: 2019-11-05T23:54:25.000Z
Updated: 2024-08-04T21:10:33.563Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-8159 |
vulnerable | 2026-06-08 05:14:15.116862 |
Details available
A remote code execution vulnerability exists in Magento 2.2 prior to 2.2.10, Magento 2.3 prior to 2.3.3 or 2.3.2-p1. An authenticated user with system data manipulation privileges can execute aribitrary code through arbitrary file deletion and OS command injection.
Published: 2019-11-06T00:01:03.000Z
Updated: 2024-08-04T21:10:33.375Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-8158 |
vulnerable | 2026-06-08 05:14:15.116417 |
Details available
An XPath entity injection vulnerability exists in Magento 2.2 prior to 2.2.10, Magento 2.3 prior to 2.3.3 or 2.3.2-p1. An attacker can craft a GET request to page cache block rendering module that gets passed to XML data processing engine without validation. The crafted key/value GET request data allows an attacker to limited access to underlying XML data.
Published: 2019-11-06T00:03:49.000Z
Updated: 2024-08-04T21:10:33.504Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-8157 |
vulnerable | 2026-06-08 05:14:15.115859 |
Details available
A stored cross-site scripting (XSS) vulnerability exists in Magento 2.2 prior to 2.2.10, Magento 2.3 prior to 2.3.3 or 2.3.2-p1. An authenticated user can manipulate downloadable link and cause an invocation of error handling that acceses user input without sanitization.
Published: 2019-11-06T00:03:03.000Z
Updated: 2024-08-04T21:10:33.550Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-8156 |
vulnerable | 2026-06-08 05:14:15.115379 |
Details available
A server-side request forgery (SSRF) vulnerability exists in Magento 2.2 prior to 2.2.10, Magento 2.3 prior to 2.3.3 or 2.3.2-p1. An authenticated user with admin privileges to modify store configurations can manipulate the connector api endpoint to enable remote code execution.
Published: 2019-11-06T00:01:34.000Z
Updated: 2024-08-04T21:10:33.446Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-8154 |
vulnerable | 2026-06-08 05:14:15.111352 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-8153 |
vulnerable | 2026-06-08 05:14:15.110996 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-8151 |
vulnerable | 2026-06-08 05:14:15.110098 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-8150 |
vulnerable | 2026-06-08 05:14:15.109578 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-8149 |
vulnerable | 2026-06-08 05:14:15.109137 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-8148 |
vulnerable | 2026-06-08 05:14:15.108773 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-8147 |
vulnerable | 2026-06-08 05:14:15.108432 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-8146 |
vulnerable | 2026-06-08 05:14:15.107888 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-8145 |
vulnerable | 2026-06-08 05:14:15.107452 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-8144 |
vulnerable | 2026-06-08 05:14:15.106984 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-8143 |
vulnerable | 2026-06-08 05:14:15.106454 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-8142 |
vulnerable | 2026-06-08 05:14:15.106012 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-8141 |
vulnerable | 2026-06-08 05:14:15.105522 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-8140 |
vulnerable | 2026-06-08 05:14:15.105025 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-8139 |
vulnerable | 2026-06-08 05:14:15.104575 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-8138 |
vulnerable | 2026-06-08 05:14:15.104104 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-8137 |
vulnerable | 2026-06-08 05:14:15.103644 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-8136 |
vulnerable | 2026-06-08 05:14:15.103085 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-8135 |
vulnerable | 2026-06-08 05:14:15.102432 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-8134 |
vulnerable | 2026-06-08 05:14:15.101976 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-8133 |
vulnerable | 2026-06-08 05:14:15.101348 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-8132 |
vulnerable | 2026-06-08 05:14:15.100897 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-8131 |
vulnerable | 2026-06-08 05:14:15.100454 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-8130 |
vulnerable | 2026-06-08 05:14:15.099926 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-8129 |
vulnerable | 2026-06-08 05:14:15.099451 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-8128 |
vulnerable | 2026-06-08 05:14:15.099100 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-8127 |
vulnerable | 2026-06-08 05:14:15.098746 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-8126 |
vulnerable | 2026-06-08 05:14:15.098384 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-8124 |
vulnerable | 2026-06-08 05:14:15.097539 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-8122 |
vulnerable | 2026-06-08 05:14:15.093034 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-8121 |
vulnerable | 2026-06-08 05:14:15.092719 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-8120 |
vulnerable | 2026-06-08 05:14:15.092385 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-8119 |
vulnerable | 2026-06-08 05:14:15.092055 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-8118 |
vulnerable | 2026-06-08 05:14:15.091567 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-8117 |
vulnerable | 2026-06-08 05:14:15.091222 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-8116 |
vulnerable | 2026-06-08 05:14:15.090851 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-8115 |
vulnerable | 2026-06-08 05:14:15.090491 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-8113 |
vulnerable | 2026-06-08 05:14:15.077704 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-8112 |
vulnerable | 2026-06-08 05:14:15.077233 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-8111 |
vulnerable | 2026-06-08 05:14:15.076876 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-8110 |
vulnerable | 2026-06-08 05:14:15.076532 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-8109 |
vulnerable | 2026-06-08 05:14:15.075894 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-8108 |
vulnerable | 2026-06-08 05:14:15.075542 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-8107 |
vulnerable | 2026-06-08 05:14:15.075171 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-8093 |
vulnerable | 2026-06-08 05:14:15.068746 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-8092 |
vulnerable | 2026-06-08 05:14:15.068257 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-8090 |
vulnerable | 2026-06-08 05:14:15.064550 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.