CVE-2020-9591

CVE-2020-9591 concerns Magento’s defense-in-depth security mitigation vulnerability that could allow unauthorized access to the admin panel. Affected versions include Magento 2.3.4 and earlier, 2.2.11 and earlier, 1.14.4.4 and earlier, and 1.9.4.4 and earlier. The connected documents consistently...

CVE-2020-9632

This CVE affects Magento: versions 2.3.4 and earlier, 2.2.11 and earlier, 1.14.4.4 and earlier, and 1.9.4.4 and earlier. It describes a security mitigation bypass that could lead to arbitrary code execution if exploited. Impact is rated CRITICAL by CVSS. Advisories reference an Adobe Magento advi...

CVE-2020-9632

Magento versions 2.3.4 and earlier, 2.2.11 and earlier see note, 1.14.4.4 and earlier, and 1.9.4.4 and earlier have a security mitigation bypass vulnerability. Successful exploitation could lead to arbitrary code execution...

CVE-2020-9580

Magento versions 2.3.4 and earlier, 2.2.11 and earlier see note, 1.14.4.4 and earlier, and 1.9.4.4 and earlier have a security mitigation bypass vulnerability. Successful exploitation could lead to arbitrary code execution...

CVE-2020-9580

This CVE (CVE-2020-9580) affects Magento software and is described across multiple sources as a security mitigation bypass vulnerability that could allow arbitrary code execution. Affected versions (as reported) include Magento 2.3.4 and earlier, 2.2.11 and earlier, 1.14.4.4 and earlier, and 1.9....

CVE-2020-9581

Magento versions 2.3.4 and earlier, 2.2.11 and earlier see note, 1.14.4.4 and earlier, and 1.9.4.4 and earlier have a stored cross-site scripting vulnerability. Successful exploitation could lead to sensitive information disclosure...

CVE-2020-9581

CVE-2020-9581 affects Magento: versions 2.3.4 and earlier, 2.2.11 and earlier, 1.14.4.4 and earlier, and 1.9.4.4 and earlier. The issue is a stored cross-site scripting (XSS) vulnerability that could allow an attacker to disclose sensitive information upon successful exploitation. Multiple connec...

CVE-2020-9582

CVE-2020-9582 concerns Magento command injection. Affected versions: Magento 2.3.4 and earlier, 2.2.11 and earlier (see note), 1.14.4.4 and earlier, and 1.9.4.4 and earlier. Description: these versions have a command-injection vulnerability that could lead to arbitrary code execution if exploited...

CVE-2020-9582

Magento versions 2.3.4 and earlier, 2.2.11 and earlier see note, 1.14.4.4 and earlier, and 1.9.4.4 and earlier have a command injection vulnerability. Successful exploitation could lead to arbitrary code execution...

CVE-2020-9583

Magento versions 2.3.4 and earlier, 2.2.11 and earlier, 1.14.4.4 and earlier, and 1.9.4.4 and earlier contain a command injection vulnerability that could lead to arbitrary code execution if exploited. The connected documents corroborate this CVE-2020-9583 across multiple registries (OSV, NVD, CV...

CVE-2020-9583

Magento versions 2.3.4 and earlier, 2.2.11 and earlier see note, 1.14.4.4 and earlier, and 1.9.4.4 and earlier have a command injection vulnerability. Successful exploitation could lead to arbitrary code execution...

CVE-2020-9587

CVE-2020-9587 corresponds to an authorization bypass vulnerability in Adobe Magento. According to the connected records, affected Magento versions are 2.3.4 and earlier, 2.2.11 and earlier (see note), 1.14.4.4 and earlier, and 1.9.4.4 and earlier. Successful exploitation could lead to unauthorize...

CVE-2020-9587

Magento versions 2.3.4 and earlier, 2.2.11 and earlier see note, 1.14.4.4 and earlier, and 1.9.4.4 and earlier have an authorization bypass vulnerability. Successful exploitation could lead to potentially unauthorized product discounts...

CVE-2020-9584

Magento versions 2.3.4 and earlier, 2.2.11 and earlier see note, 1.14.4.4 and earlier, and 1.9.4.4 and earlier have a stored cross-site scripting vulnerability. Successful exploitation could lead to sensitive information disclosure...

CVE-2020-9584

CVE-2020-9584 is a stored cross-site scripting vulnerability in Magento. Connected sources confirm that Magento versions 2.3.4 and earlier, 2.2.11 and earlier, 1.14.4.4 and earlier, and 1.9.4.4 and earlier are affected, with exploitation potentially leading to sensitive information disclosure . T...

CVE-2020-9579

Magento CVE-2020-9579 affects Magento versions 2.3.4 and earlier, 2.2.11 and earlier, 1.14.4.4 and earlier, and 1.9.4.4 and earlier. The issue is a security mitigation bypass that could allow arbitrary code execution upon successful exploitation. The connected records corroborate the vulnerabilit...

CVE-2020-9579

Magento versions 2.3.4 and earlier, 2.2.11 and earlier see note, 1.14.4.4 and earlier, and 1.9.4.4 and earlier have a security mitigation bypass vulnerability. Successful exploitation could lead to arbitrary code execution...

CVE-2020-9585

CVE-2020-9585 affects Magento: versions 2.3.4 and earlier, 2.2.11 and earlier, 1.14.4.4 and earlier, and 1.9.4.4 and earlier are affected by a defense-in-depth security mitigation vulnerability. Successful exploitation could lead to arbitrary code execution. The linked sources (NVD entry and OSV/...

CVE-2020-9585

Magento versions 2.3.4 and earlier, 2.2.11 and earlier see note, 1.14.4.4 and earlier, and 1.9.4.4 and earlier have a defense-in-depth security mitigation vulnerability. Successful exploitation could lead to arbitrary code execution...

PT-2020-6322 · Adobe · Magento

Name of the Vulnerable Software and Affected Versions: Magento versions 2.3.4 and earlier Magento versions 2.2.11 and earlier Magento versions 1.14.4.4 and earlier Magento versions 1.9.4.4 and earlier Description: The issue is related to the lack of protection of the web page structure in Magento...