Exposición de Magento
CMS, Ecommerce499
score de exposición
32.588
sitios usan
4
en explotación
39
críticos
CVEs
361 resultadosCVE-2026-77774HIGHAdobe Commerce | Incorrect Authorization (CWE-863)EPSS 0.8%CVE-2026-48416HIGHAdobe Commerce | Incorrect Authorization (CWE-863)EPSS 0.8%CVE-2021-28567MEDIUMMagento Commerce improper authorization allows an authenticated user to perform certain functions without permissionEPSS 0.8%CVE-2026-77108HIGHAdobe Commerce | Incorrect Authorization (CWE-863)EPSS 0.8%CVE-2019-8123—An insufficient logging and monitoring vulnerability exists in Magento 1 prior to 1.9.4.3 and 1.14.4.3, Magento 2.1 prior to 2.1.19, MagentoEPSS 0.8%CVE-2019-7904—Insufficient enforcement of user access controls in Magento 2.1 prior to 2.1.18, Magento 2.2 prior to 2.2.9, Magento 2.3 prior to 2.3.2 coulEPSS 0.8%CVE-2019-7889—An injection vulnerability exists in Magento Open Source prior to 1.9.4.2, and Magento Commerce prior to 1.14.4.2, Magento 2.1 prior to 2.1.EPSS 0.8%CVE-2026-92909CRITICALAdobe Commerce | Incorrect Authorization (CWE-863)EPSS 0.8%CVE-2019-8090—An arbitrary file deletion vulnerability exists in Magento 2.1 prior to 2.1.19, Magento 2.2 prior to 2.2.10, Magento 2.3 prior to 2.3.3. An EPSS 0.8%CVE-2019-8140—An unrestricted file upload vulnerability exists in Magento 2.2 prior to 2.2.10, Magento 2.3 prior to 2.3.3 or 2.3.2-p1. An authenticated adEPSS 0.8%CVE-2026-47988HIGHAdobe Commerce | Incorrect Authorization (CWE-863)EPSS 0.8%CVE-2019-8233—In Magento 2.2 prior to 2.2.10, Magento 2.3 prior to 2.3.3 or 2.3.2-p1, an unauthenticated user can inject arbitrary JavaScript code as a reEPSS 0.7%CVE-2026-76201CRITICALAdobe Commerce | Cross-site Scripting (Stored XSS) (CWE-79)EPSS 0.7%CVE-2026-76200CRITICALAdobe Commerce | Cross-site Scripting (Stored XSS) (CWE-79)EPSS 0.7%CVE-2023-29294MEDIUMBypass Purchase Order Approval using Company User in Adobe Commerce B2BEPSS 0.7%CVE-2019-7858—A cryptographic flaw in Magento 2.1 prior to 2.1.18, Magento 2.2 prior to 2.2.9 and Magento 2.3 prior to 2.3.2 resulted in storage of sensitEPSS 0.7%CVE-2019-7925—An insecure direct object reference (IDOR) vulnerability exists in Magento 2.1 prior to 2.1.18, Magento 2.2 prior to 2.2.9, Magento 2.3 prioEPSS 0.7%CVE-2026-47984HIGHAdobe Commerce | Incorrect Authorization (CWE-863)EPSS 0.7%CVE-2019-8118—Magento 2.1 prior to 2.1.19, Magento 2.2 prior to 2.2.10, Magento 2.3 prior to 2.3.3 uses weak cryptographic function to store the failed loEPSS 0.7%CVE-2026-21360MEDIUMAdobe Commerce | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') (CWE-22)EPSS 0.7%