[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fjqd1p5d_lhnsLlZJOg-BHW1ZEr66fiNP_ls13gPrOwk":3,"g5a-ex:adobe\u002Fmagento_open_source@*":117,"g5a-family:adobe\u002Fmagento_open_source":119},{"success":4,"data":5},true,{"product":6,"versions":34,"topVulnerabilitiesByEpss":42,"kevVulnerabilities":94,"seoMetadata":95,"meta":114},{"vendorName":7,"productName":8,"versionCount":9,"totalCves":10,"kevCount":11,"lastCveUpdate":12,"versions":13,"description":33},"adobe","magento_open_source",7,32,0,"2023-09-12",[14,18,21,23,26,28,31],{"version":15,"cve_count":16,"kev_count":11,"has_kev":17},"2.3.7",2,false,{"version":19,"cve_count":20,"kev_count":11,"has_kev":17},"2.4.0",1,{"version":22,"cve_count":20,"kev_count":11,"has_kev":17},"2.4.1",{"version":24,"cve_count":25,"kev_count":11,"has_kev":17},"2.4.2",24,{"version":27,"cve_count":16,"kev_count":11,"has_kev":17},"2.4.3",{"version":29,"cve_count":30,"kev_count":11,"has_kev":17},"2.4.4",6,{"version":32,"cve_count":30,"kev_count":11,"has_kev":17},"2.4.5","Magento Open Source by Adobe is a technology product with 7 tracked versions and 32 known security vulnerabilities. Get comprehensive security analysis, vulnerability tracking, and threat intelligence for this product.",[35,36,37,38,39,40,41],{"version":15,"cve_count":16,"kev_count":11,"has_kev":17},{"version":19,"cve_count":20,"kev_count":11,"has_kev":17},{"version":22,"cve_count":20,"kev_count":11,"has_kev":17},{"version":24,"cve_count":25,"kev_count":11,"has_kev":17},{"version":27,"cve_count":16,"kev_count":11,"has_kev":17},{"version":29,"cve_count":30,"kev_count":11,"has_kev":17},{"version":32,"cve_count":30,"kev_count":11,"has_kev":17},[43,51,57,64,71,75,79,83,86,90],{"cveId":44,"description":45,"publishedDate":46,"cvssScore":47,"cvssVersion":48,"severity":49,"isKev":17,"epssScore":50},"CVE-2023-22249","Adobe Commerce versions 2.4.4-p2 (and earlier) and 2.4.5-p1 (and earlier) are affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a high-privileged attacker to inject malicious scripts into vulnerable form fields. Malicious JavaScript may be executed in a victim’s browser when they browse to the page containing the vulnerable field.","2023-03-27",4.8,"v3.1","Medium",0.57424,{"cveId":52,"description":53,"publishedDate":54,"cvssScore":55,"cvssVersion":48,"severity":49,"isKev":17,"epssScore":56},"CVE-2022-35698","Adobe Commerce versions 2.4.4-p1 (and earlier) and 2.4.5 (and earlier) are affected by a Stored Cross-site Scripting vulnerability. Exploitation of this issue does not require user interaction and could result in a post-authentication arbitrary code execution.","2022-10-14",5.4,0.09722,{"cveId":58,"description":59,"publishedDate":60,"cvssScore":61,"cvssVersion":62,"severity":49,"isKev":17,"epssScore":63},"CVE-2021-21012","Magento versions 2.4.1 (and earlier), 2.4.0-p1 (and earlier) and 2.3.6 (and earlier) are vulnerable to an insecure direct object vulnerability (IDOR) in the checkout module. Successful exploitation could lead to sensitive information disclosure.","2021-01-13",5.3,"v3.0",0.03951,{"cveId":65,"description":66,"publishedDate":67,"cvssScore":68,"cvssVersion":48,"severity":69,"isKev":17,"epssScore":70},"CVE-2021-36022","Magento Commerce versions 2.4.2 (and earlier), 2.4.2-p1 (and earlier) and 2.3.7 (and earlier) are affected by an XML Injection vulnerability in the Widgets Update Layout. An attacker with admin privileges can trigger a specially crafted script to achieve remote code execution.","2021-09-01",7.2,"High",0.0344,{"cveId":72,"description":73,"publishedDate":67,"cvssScore":68,"cvssVersion":48,"severity":69,"isKev":17,"epssScore":74},"CVE-2021-36033","Magento Commerce versions 2.4.2 (and earlier), 2.4.2-p1 (and earlier) and 2.3.7 (and earlier) are affected by an XML Injection vulnerability in the Widgets Module. An attacker with admin privileges can trigger a specially crafted script to achieve remote code execution.",0.03122,{"cveId":76,"description":77,"publishedDate":67,"cvssScore":68,"cvssVersion":48,"severity":69,"isKev":17,"epssScore":78},"CVE-2021-36031","Magento Commerce versions 2.4.2 (and earlier), 2.4.2-p1 (and earlier) and 2.3.7 (and earlier) are affected by a Path Traversal vulnerability via the `theme[preview_image]` parameter. An attacker with admin privileges could leverage this vulnerability to achieve remote code execution.",0.03116,{"cveId":80,"description":81,"publishedDate":67,"cvssScore":68,"cvssVersion":48,"severity":69,"isKev":17,"epssScore":82},"CVE-2021-36028","Magento Commerce versions 2.4.2 (and earlier), 2.4.2-p1 (and earlier) and 2.3.7 (and earlier) are affected by an XML Injection vulnerability when saving a configurable product. An attacker with admin privileges can trigger a specially crafted script to achieve remote code execution.",0.02894,{"cveId":84,"description":85,"publishedDate":67,"cvssScore":68,"cvssVersion":48,"severity":69,"isKev":17,"epssScore":82},"CVE-2021-36024","Magento Commerce versions 2.4.2 (and earlier), 2.4.2-p1 (and earlier) and 2.3.7 (and earlier) are affected by an Improper Neutralization of Special Elements Used In A Command via the Data collection endpoint. An attacker with admin privileges can upload a specially crafted file to achieve remote code execution.",{"cveId":87,"description":88,"publishedDate":67,"cvssScore":68,"cvssVersion":48,"severity":69,"isKev":17,"epssScore":89},"CVE-2021-36040","Magento Commerce versions 2.4.2 (and earlier), 2.4.2-p1 (and earlier) and 2.3.7 (and earlier) are affected by an improper input validation vulnerability. An attacker with admin privileges can upload a specially crafted file to bypass file extension restrictions and could lead to remote code execution.",0.02867,{"cveId":91,"description":92,"publishedDate":67,"cvssScore":68,"cvssVersion":48,"severity":69,"isKev":17,"epssScore":93},"CVE-2021-36025","Magento Commerce versions 2.4.2 (and earlier), 2.4.2-p1 (and earlier) and 2.3.7 (and earlier) are affected by an improper input validation vulnerability while saving a customer's details with a specially crafted file. An authenticated attacker with admin privileges can leverage this vulnerability to achieve remote code execution.",0.02807,[],{"title":96,"metaDescription":97,"keywords":98,"structuredData":99},"Magento Open Source by Adobe - Security Vulnerabilities & Analysis | EdgeProtect","Comprehensive security analysis for Magento Open Source by Adobe covering 7 versions with 32 tracked vulnerabilities. Real-time threat intelligence, CVE tracking, and security recommendations.","Magento Open Source vulnerabilities, Magento Open Source security, Magento Open Source CVE, Adobe Magento Open Source, Magento Open Source threat intelligence, Adobe security, product security analysis, cybersecurity threats, vulnerability management, CVE tracking",{"@context":100,"@type":101,"name":102,"description":97,"url":103,"manufacturer":104,"applicationCategory":108,"softwareVersion":109,"mainEntity":110},"https:\u002F\u002Fschema.org","SoftwareApplication","Magento Open Source","https:\u002F\u002Fedgeprotect.io\u002Fvulnerabilities\u002Ftechnologies\u002Fvendors\u002Fadobe\u002Fmagento_open_source",{"@type":105,"name":106,"url":107},"Organization","Adobe","https:\u002F\u002Fedgeprotect.io\u002Fvendors\u002Fadobe","Security Software","7 versions tracked",{"@type":111,"name":112,"description":113,"vulnerabilityCount":10,"dateModified":12},"SecurityVulnerability","Magento Open Source Security Vulnerabilities","Security vulnerabilities affecting Magento Open Source by Adobe",{"totalVersions":9,"totalVulnerabilities":10,"kevVulnerabilities":11,"lastUpdated":12,"generatedAt":115,"apiVersion":116},"2026-10-28T15:41:53.229Z","3.0",{"rows":118,"total":11,"capped":17,"failed":11},[],[]]