CVE-2021-27741

" Security vulnerability in HCL Commerce Management Center allowing XML external entity XXE injection"...

Xxe

" Security vulnerability in HCL Commerce Management Center allowing XML external entity XXE injection"...

CVE-2021-27741

CVE-2021-27741 affects the HCL Commerce Management Center and is caused by an XML External Entity (XXE) injection. According to the stored records, the vulnerability has a CVSS v3.1 base score of 9.1 (CRITICAL) with network attack vector, low attack complexity, no privileges required, and impacts...

CVE-2021-27741

" Security vulnerability in HCL Commerce Management Center allowing XML external entity XXE injection"...

HCL Commerce 代码问题漏洞

HCL Commerce is a software platform framework for e-commerce from HCL India. The software includes marketing, sales, customer and order processing functions in a customizable and integrated package. It is a unified platform that provides the ability to conduct business directly with consumers, wi...

Magento Update Released to Fix Critical Flaws Affecting E-Commerce Sites

Adobe on Tuesday shipped security updates to remediate multiple critical vulnerabilities in its Magento e-commerce platform that could be abused by an attacker to execute arbitrary code and take control of a vulnerable system. The issues affect 2.3.7, 2.4.2-p1, 2.4.2, and earlier versions of...

PT-2021-6290 · Adobe · Magento Commerce

Name of the Vulnerable Software and Affected Versions: Magento Commerce versions 2.4.2 and earlier Magento Commerce versions 2.4.2-p1 and earlier Magento Commerce versions 2.3.7 and earlier Description: The issue exists due to insufficient input validation in the Magento Commerce platform, allowi...

Adobe Magento Improper Input Validation Vulnerability (CNVD-2021-90927)

Magento is an open source e-commerce platform written in PHP by Adobe. Adobe Magento is vulnerable to improper input validation. An attacker can exploit this vulnerability to execute arbitrary code...

Adobe Magento Input Validation Error Vulnerability (CNVD-2021-102805)

Magento is an open source e-commerce platform written in PHP by Adobe. An input validation error vulnerability exists in Adobe Magento. An attacker can exploit this vulnerability to execute arbitrary code...

Adobe Magento Improper Input Validation Vulnerability (CNVD-2021-90928)

Magento is an open source e-commerce platform written in PHP by Adobe. Adobe Magento is vulnerable to improper input validation. An attacker can exploit this vulnerability to execute arbitrary code...

PT-2021-6370 · Adobe · Magento Commerce

Name of the Vulnerable Software and Affected Versions: Magento Commerce versions 2.4.2 and earlier Magento Commerce versions 2.4.2-p1 and earlier Magento Commerce versions 2.3.7 and earlier Description: The issue exists due to insufficient input validation in the Magento Commerce platform, allowi...

Adobe Magento Improper Input Validation Vulnerability (CNVD-2021-90926)

Magento is an open source e-commerce platform written in PHP by Adobe. Adobe Magento is vulnerable to improper input validation. An attacker can exploit this vulnerability to execute arbitrary code...

Adobe Magento Improper Input Validation Vulnerability (CNVD-2021-90925)

Magento is an open source e-commerce platform written in PHP by Adobe. Adobe Magento is vulnerable to improper input validation. An attacker can exploit this vulnerability to execute arbitrary code...

PT-2021-6286 · Adobe · Magento Commerce

Name of the Vulnerable Software and Affected Versions: Magento Commerce versions 2.4.2 and earlier, 2.4.2-p1 and earlier Magento Commerce version 2.3.7 and earlier Description: The issue is related to improper authorization in Magento Commerce, allowing an attacker with admin privileges to...

PT-2021-6352 · Adobe · Magento Commerce

Name of the Vulnerable Software and Affected Versions: Magento Commerce versions 2.4.2 and earlier, 2.4.2-p1 and earlier Magento Commerce version 2.3.7 and earlier Description: The issue is related to an XML Injection vulnerability in the Widgets Update Layout of Magento Commerce. This...

Adobe Magento Input Validation Error Vulnerability (CNVD-2021-102809)

Magento is an open source e-commerce platform written in PHP by Adobe.Adobe Magento is vulnerable to an input validation error. An attacker could exploit the vulnerability to cause a denial of service...

Adobe Magento Input Validation Error Vulnerability (CNVD-2021-102804)

Magento is an open source e-commerce platform written in PHP by Adobe. An input validation error vulnerability exists in Adobe Magento. An attacker can exploit this vulnerability to execute arbitrary code...

PT-2021-6292 · Adobe · Magento Commerce

Name of the Vulnerable Software and Affected Versions: Magento Commerce versions 2.4.2 and earlier Magento Commerce versions 2.4.2-p1 and earlier Magento Commerce versions 2.3.7 and earlier Description: The issue is caused by improper input validation, allowing an attacker with admin privileges t...

Adobe Magento Input Validation Error Vulnerability (CNVD-2021-102806)

Magento is an open source e-commerce platform written in PHP by Adobe. An input validation error vulnerability exists in Adobe Magento. An attacker could exploit this vulnerability to bypass security features...

CVE-2021-36044

Magento Commerce versions 2.4.2 and earlier, 2.4.2-p1 and earlier and 2.3.7 and earlier are affected by an improper input validation vulnerability. An unauthenticated attacker could abuse this vulnerability to cause a server-side denial-of-service using a GraphQL field...