CVE-2020-9630

2020-06-2620:20:26

adobe

www.cve.org

AI Score

9.4

Confidence

High

EPSS

0.001

Percentile

43.5%

JSON

Magento versions 2.3.4 and earlier, 2.2.11 and earlier (see note), 1.14.4.4 and earlier, and 1.9.4.4 and earlier have a business logic error vulnerability. Successful exploitation could lead to privilege escalation.

CNA Affected

[
  {
    "product": "Magento",
    "vendor": "Adobe",
    "versions": [
      {
        "status": "affected",
        "version": "2.3.4 and earlier, 2.2.11 and earlier  (see note), 1.14.4.4 and earlier, and 1.9.4.4 and earlier versions"
      }
    ]
  }
]

References

helpx.adobe.com/security/products/magento/apsb20-22.html