CVE-2020-9691

CVE-2020-9691: vulnerability in Adobe Magento

Published · Updated

Follow this CVE+ Monitor Magento+ Monitor magento/community-edition

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

3Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackepss 6.0%
Magento versions 2.3.5-p1 and earlier, and 2.3.5-p1 and earlier have a dom-based cross-site scripting vulnerability. Successful exploitation could lead to arbitrary code execution.
Affected products
Adobe · Magento
Related CVEs — Adobe Magento

In the same product, most dangerous first.

CVE-2020-3716—CVE-2020-3716EPSS 14.0%CVE-2020-9664—CVE-2020-9664EPSS 8.4%CVE-2020-3718—CVE-2020-3718EPSS 7.5%CVE-2020-9631—CVE-2020-9631EPSS 7.4%CVE-2020-9632—CVE-2020-9632EPSS 7.4%CVE-2020-9576—CVE-2020-9576EPSS 5.7%