3 matches found
OroCommerce get-totals-for-checkout API endpoint returns unwanted data
Detailed Checkout totals information may be received by Checkout ID...
5.8CVSS6.5AI score0.00491EPSS
SaveExploits0References3Affected Software1
CVE-2020-24677 Insecure Web Service in Symphony Plus
Vulnerabilities in the S+ Operations and S+ Historian web applications can lead to a possible code execution and privilege escalation, redirect the user somewhere else or download unwanted data...
8.8CVSS9AI score0.01387EPSS
SaveExploits0References2
20