Vulnerabilities > Adobe > Magento Open Source > Medium

DATE CVE VULNERABILITY TITLE RISK
2021-09-01 CVE-2021-36038 Improper Input Validation vulnerability in Adobe Commerce and Magento Open Source
Magento Commerce versions 2.4.2 (and earlier), 2.4.2-p1 (and earlier) and 2.3.7 (and earlier) are affected by an improper input validation vulnerability in the Multishipping Module.
network
low complexity
adobe CWE-20
6.5
6.5
2021-09-01 CVE-2021-36039 Incorrect Authorization vulnerability in Adobe Commerce and Magento Open Source
Magento Commerce versions 2.4.2 (and earlier), 2.4.2-p1 (and earlier) and 2.3.7 (and earlier) are affected by an improper input validation vulnerability via the `quoteId` parameter.
network
low complexity
adobe CWE-863
6.5
6.5
2021-09-01 CVE-2021-36043 Server-Side Request Forgery (SSRF) vulnerability in Adobe Commerce and Magento Open Source
Magento Commerce versions 2.4.2 (and earlier), 2.4.2-p1 (and earlier) and 2.3.7 (and earlier) are affected by a blind SSRF vulnerability in the bundled dotmailer extension.
network
high complexity
adobe CWE-918
6.6
6.6