Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
adobeAdobeAPSB20-59
HistoryOct 15, 2020 - 12:00 a.m.

APSB20-59 Security updates available for Magento

2020-10-1500:00:00
helpx.adobe.com
89
magento
updates
vulnerabilities
code execution
security

CVSS2

9

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:S/C:C/I:C/A:C

CVSS3

9.1

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H

EPSS

0.001

Percentile

48.6%

JSON

Magento has released updates for Magento Commerce and Magento Open Source. These updates resolve vulnerabilities rated important and critical. Successful exploitation could lead to arbitrary code execution.

Affected configurations

Vulners
Node
adobemagentoRange≤2.3.5-p1commerce
OR
adobemagentoRange≤2.3.5-p2commerce
OR
adobemagentoRange≤2.4.0commerce
OR
adobemagentoRange≤2.3.5-p1open_source
OR
adobemagentoRange≤2.3.5-p2open_source
OR
adobemagentoRange≤2.4.0open_source
VendorProductVersionCPE
adobemagento*cpe:2.3:a:adobe:magento:*:*:*:*:commerce:*:*:*
adobemagento*cpe:2.3:a:adobe:magento:*:*:*:*:open_source:*:*:*

Related

openvas 1
threatpost 122
nvd 9
cve 9
cvelist 9
osv 27
github 9
prion 9
zdt 1
openvas
openvas
Magento < 2.3.6, 2.4.x < 2.4.1 Multiple Vulnerabilities (APSB20-59)
2020-10-23 00:00:00
threatpost
threatpost
Critical Magento Holes Open Online Shops to Code Execution
2020-10-15 20:59:30
Critical WordPress Plugin Bug Afflicts 700K Sites
2020-02-13 20:21:09
Cisco Webex Bug Allows Remote Code Execution
2020-01-10 17:24:29
nvd
nvd
CVE-2020-24403
2020-11-09 01:15:12
CVE-2020-24406
2020-11-09 01:15:12
CVE-2020-24404
2020-11-09 01:15:12
cve
cve
CVE-2020-24408
2020-10-16 15:15:11
CVE-2020-24404
2020-11-09 01:15:12
CVE-2020-24405
2020-11-09 01:15:12
cvelist
cvelist
CVE-2020-24408 Stored XSS in customer address upload feature
2020-10-16 14:03:11
CVE-2020-24403 Incorrect permissions could lead to unauthorized modification of inventory source data via REST API
2020-11-09 00:39:38
CVE-2020-24401 Incorrect permissions following the deletion of a user role or deactivation of a user
2020-11-09 00:39:29
osv
osv
CVE-2020-24405
2020-11-09 01:15:12
BIT-magento-2020-24401
2024-03-06 11:08:28
BIT-magento-2020-24403
2024-03-06 11:08:04
github
github
Magento incorrect permissions vulnerability in the Inventory module
2022-05-24 17:33:56
Magento 2 Community Edition XSS Vulnerability
2022-05-24 17:31:03
Magento incorrect user permissions vulnerability within the Inventory component
2022-05-24 17:33:55
prion
prion
Spoofing
2020-11-09 01:15:00
Authorization
2020-11-09 01:15:00
Design/Logic Flaw
2020-11-09 01:15:00
zdt
zdt
Magento 2.4.0 / 2.3.5p1 (and earlier) Arbitrary Code Execution 0day Exploit
2021-03-24 00:00:00

CVSS2

9

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:S/C:C/I:C/A:C

CVSS3

9.1

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H

EPSS

0.001

Percentile

48.6%

JSON
Related for APSB20-59
openvas1threatpost122nvd9cve9cvelist9osv27github9prion9zdt1