Vulnerabilities in oroinc
12 resultsVexday analysis
A Oro Inc apresenta 12 vulnerabilidades catalogadas na base Vexday, nenhuma delas em exploração ativa no momento. A fraqueza dominante é controle de acesso inadequado (CWE-284), indicando problemas estruturais em mecanismos de autorização. A ausência de publicações recentes sugere que o risco atual é estável, mas a natureza das falhas requer atenção contínua em avaliações de segurança.
CVE-2021-43852HIGHJavaScript Prototype Pollution in oro/platformEPSS 1.1%CVE-2022-41951HIGHOroPlatform vulnerable to path traversal during temporary file manipulationsEPSS 0.9%CVE-2021-41236MEDIUMXSS vulnerability in oro/platformEPSS 0.7%CVE-2023-32063MEDIUMOroCRMCallBundle has incorrect call view page visibilityEPSS 0.5%CVE-2023-32062MEDIUMOroCalendarBundle has incorrect system calendar events visibilityEPSS 0.5%CVE-2023-32064MEDIUMOroCommerce Customer Portal Incorrect Customer and Customer Group Frontend Menus pages visibilityEPSS 0.5%CVE-2023-32065MEDIUMOroCommerce get-totals-for-checkout API endpoint returns unwanted dataEPSS 0.5%CVE-2022-31037MEDIUMOroCommerce vulnerable to Cross-site Scripting via Shipping rule editing pageEPSS 0.4%CVE-2023-45824MEDIUMOroPlatform's pinned entity creation form shows pages of other usersEPSS 0.4%CVE-2023-48296MEDIUMOroPlatform's storefront user can access history and most viewed data from matching back-office user with the same IDEPSS 0.4%CVE-2022-35950MEDIUMOroCommerce Cross-site Scripting vulnerability in add note dialog of Shopping List line itemEPSS 0.4%CVE-2021-39198MEDIUMThe disqualify lead action may be executed without CSRF token checkEPSS 0.3%