CVE-2020-9576

CVE-2020-9576: vulnerability in Adobe Magento

Published · Updated

Follow this CVE+ Monitor Magento+ Monitor magento/community-edition

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

3Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackepss 5.7%
Magento versions 2.3.4 and earlier, 2.2.11 and earlier (see note), 1.14.4.4 and earlier, and 1.9.4.4 and earlier have a command injection vulnerability. Successful exploitation could lead to arbitrary code execution.
Affected products
Adobe · Magento
Related CVEs — Adobe Magento

In the same product, most dangerous first.

CVE-2020-3716—CVE-2020-3716EPSS 14.0%CVE-2020-9664—CVE-2020-9664EPSS 8.4%CVE-2020-3718—CVE-2020-3718EPSS 7.5%CVE-2020-9631—CVE-2020-9631EPSS 7.4%CVE-2020-9632—CVE-2020-9632EPSS 7.4%CVE-2020-9691—CVE-2020-9691EPSS 6.0%