Adobe Systems Incorporated Magento 1
8 CVEs affecting Adobe Systems Incorporated Magento 1. Latest disclosed: 2019-11-06. Critical: 0, High: 6.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2019-8155 | High | 7.5 | 2019-11-06 | Magento prior to 1.9.4.3 and prior to 1.14.4.3 included a user's CSRF token in the URL of a GET request. This could be exploited by an attacker with access to… |
CVE-2019-8231 | High | 7.2 | 2019-11-06 | In Magento to 1.9.4.3 and Magento prior to 1.14.4.3, an authenticated user with administrative privileges for editing attribute sets can execute arbitrary code… |
CVE-2019-8230 | High | 7.2 | 2019-11-06 | In Magentoprior to 1.9.4.3, and Magento prior to 1.14.4.3, an authenticated user with administrative privileges to edit configuration settings can execute arbi… |
CVE-2019-8229 | High | 7.2 | 2019-11-06 | In Magento prior to 1.9.4.3, and Magento prior to 1.14.4.3, an authenticated user with administrative privileges to edit product attributes can execute arbitra… |
CVE-2019-8125 | High | 7.2 | 2019-11-05 | A remote code execution vulnerability exists in Magento 1 prior to 1.9.x and 1.14.x. An authenticated admin user can modify configuration parameters via crafte… |
CVE-2019-8091 | High | 7.2 | 2019-11-05 | A remote code execution vulnerability exists in Magento 1 prior to 1.9.4.3 and 1.14.4.3. An authenticated admin user with privileges to access product attribut… |
CVE-2019-8228 | Medium | 4.8 | 2019-11-06 | in Magento prior to 1.9.4.3 and Magento prior to 1.14.4.3, an authenticated user with limited administrative privileges can inject arbitrary JavaScript code in… |
CVE-2019-8227 | Medium | 4.8 | 2019-11-06 | In Magento prior to 1.9.4.3 and Magento prior to 1.14.4.3, an authenticated user with limited administrative privileges can inject arbitrary JavaScript code vi… |