CVE-2020-9587

2020-06-2620:19:07

adobe

www.cve.org

7.5 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

35.9%

JSON

Magento versions 2.3.4 and earlier, 2.2.11 and earlier (see note), 1.14.4.4 and earlier, and 1.9.4.4 and earlier have an authorization bypass vulnerability. Successful exploitation could lead to potentially unauthorized product discounts.

CNA Affected

[
  {
    "product": "Magento",
    "vendor": "Adobe",
    "versions": [
      {
        "status": "affected",
        "version": "2.3.4 and earlier, 2.2.11 and earlier  (see note), 1.14.4.4 and earlier, and 1.9.4.4 and earlier versions"
      }
    ]
  }
]