CVE-2020-9587

CVE-2020-9587: vulnerability in Adobe Magento

Published · Updated

Follow this CVE+ Monitor Magento+ Monitor magento/community-edition

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

3Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackepss 5.0%
Magento versions 2.3.4 and earlier, 2.2.11 and earlier (see note), 1.14.4.4 and earlier, and 1.9.4.4 and earlier have an authorization bypass vulnerability. Successful exploitation could lead to potentially unauthorized product discounts.
Affected products
Adobe · Magento
Related CVEs — Adobe Magento

In the same product, most dangerous first.

CVE-2020-3716—CVE-2020-3716EPSS 14.0%CVE-2020-9664—CVE-2020-9664EPSS 8.4%CVE-2020-3718—CVE-2020-3718EPSS 7.5%CVE-2020-9631—CVE-2020-9631EPSS 7.4%CVE-2020-9632—CVE-2020-9632EPSS 7.4%CVE-2020-9691—CVE-2020-9691EPSS 6.0%