Vulnerabilities > Shopware > Shopware > 4.0.8

DATE CVE VULNERABILITY TITLE RISK
2022-03-09 CVE-2022-24744 Insufficient Session Expiration vulnerability in Shopware
Shopware is an open commerce platform based on the Symfony php Framework and the Vue javascript framework.
network
shopware CWE-613
3.5
2022-03-09 CVE-2022-24745 Session Fixation vulnerability in Shopware
Shopware is an open commerce platform based on the Symfony php Framework and the Vue javascript framework.
network
shopware CWE-384
5.8
2022-03-09 CVE-2022-24746 Cross-site Scripting vulnerability in Shopware
Shopware is an open commerce platform based on the Symfony php Framework and the Vue javascript framework.
network
shopware CWE-79
4.3
2022-03-09 CVE-2022-24747 Exposure of Resource to Wrong Sphere vulnerability in Shopware
Shopware is an open commerce platform based on the Symfony php Framework and the Vue javascript framework.
network
low complexity
shopware CWE-668
5.3
2022-03-09 CVE-2022-24748 Incorrect Authorization vulnerability in Shopware
Shopware is an open commerce platform based on the Symfony php Framework and the Vue javascript framework.
network
low complexity
shopware CWE-863
7.5
2021-10-26 CVE-2021-41188 Cross-site Scripting vulnerability in Shopware
Shopware is open source e-commerce software.
network
shopware CWE-79
3.5
2021-08-16 CVE-2021-37710 Cross-site Scripting vulnerability in Shopware
Shopware is an open source eCommerce platform.
network
shopware CWE-79
3.5
2021-08-16 CVE-2021-37709 Authorization Bypass Through User-Controlled Key vulnerability in Shopware
Shopware is an open source eCommerce platform.
network
low complexity
shopware CWE-639
4.0
2021-06-24 CVE-2021-32710 Session Fixation vulnerability in Shopware
Shopware is an open source eCommerce platform.
network
low complexity
shopware CWE-384
5.0
2021-06-24 CVE-2021-32711 Information Exposure vulnerability in Shopware
Shopware is an open source eCommerce platform.
network
low complexity
shopware CWE-200
5.0