Approved changes feed: RSS · Atom

cpe:2.3:a:adobe:magento:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorAdobe (fb293c1b-cab3-5565-9184-186e4ece530b)
ProductMagento (1ed7eee9-32a7-5916-bd2b-11f60ced0354)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2025-27192 vulnerable 2026-06-08 07:14:54.444454 Adobe Commerce | Insufficiently Protected Credentials (CWE-522)
LOW (2.7)
Adobe Commerce versions 2.4.7-p4, 2.4.6-p9, 2.4.5-p11, 2.4.4-p12, 2.4.8-beta2 and earlier are affected by an Insufficiently Protected Credentials vulnerability that could lead to a security feature bypass. A high privileged attacker could exploit this vulnerability to gain unauthorized access to protected resources by obtaining sensitive credential information. Exploitation of this issue does not require user interaction.
Published: 2025-04-08T20:17:10.679Z
Updated: 2025-04-08T21:01:36.000Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-9692 vulnerable 2026-06-08 05:28:02.609340 Details available
Magento versions 2.3.5-p1 and earlier, and 2.3.5-p1 and earlier have a security mitigation bypass vulnerability. Successful exploitation could lead to arbitrary code execution.
Published: 2020-07-29T12:20:48.000Z
Updated: 2024-08-04T10:34:39.935Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-9691 vulnerable 2026-06-08 05:28:02.604484 Details available
Magento versions 2.3.5-p1 and earlier, and 2.3.5-p1 and earlier have a dom-based cross-site scripting vulnerability. Successful exploitation could lead to arbitrary code execution.
Published: 2020-07-29T12:20:52.000Z
Updated: 2024-08-04T10:34:39.934Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-9690 vulnerable 2026-06-08 05:28:02.603643 Details available
Magento versions 2.3.5-p1 and earlier, and 2.3.5-p1 and earlier have an observable timing discrepancy vulnerability. Successful exploitation could lead to signature verification bypass.
Published: 2020-07-29T12:20:42.000Z
Updated: 2024-08-04T10:34:39.927Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-9689 vulnerable 2026-06-08 05:28:02.598920 Details available
Magento versions 2.3.5-p1 and earlier, and 2.3.5-p1 and earlier have a path traversal vulnerability. Successful exploitation could lead to arbitrary code execution.
Published: 2020-07-29T12:20:36.000Z
Updated: 2024-08-04T10:34:39.993Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-9665 vulnerable 2026-06-08 05:28:02.535435 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-9664 vulnerable 2026-06-08 05:28:02.534818 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-9632 vulnerable 2026-06-08 05:28:02.482314 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-9631 vulnerable 2026-06-08 05:28:02.481675 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-9630 vulnerable 2026-06-08 05:28:02.480947 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-9591 vulnerable 2026-06-08 05:28:02.393012 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-9588 vulnerable 2026-06-08 05:28:02.387594 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-9587 vulnerable 2026-06-08 05:28:02.386794 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-9585 vulnerable 2026-06-08 05:28:02.377894 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-9584 vulnerable 2026-06-08 05:28:02.377362 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-9583 vulnerable 2026-06-08 05:28:02.376781 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-9582 vulnerable 2026-06-08 05:28:02.376110 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-9581 vulnerable 2026-06-08 05:28:02.375379 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-9580 vulnerable 2026-06-08 05:28:02.374668 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-9579 vulnerable 2026-06-08 05:28:02.374216 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-9578 vulnerable 2026-06-08 05:28:02.373557 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-9577 vulnerable 2026-06-08 05:28:02.372832 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-9576 vulnerable 2026-06-08 05:28:02.367853 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-3758 vulnerable 2026-06-08 05:25:57.668799 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-3719 vulnerable 2026-06-08 05:25:57.618809 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-3718 vulnerable 2026-06-08 05:25:57.618318 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-3717 vulnerable 2026-06-08 05:25:57.617946 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-3716 vulnerable 2026-06-08 05:25:57.617533 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-3715 vulnerable 2026-06-08 05:25:57.614002 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-8235 vulnerable 2026-06-08 05:14:23.737894 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.