Vulnerabilities > Shopware > Shopware > 6.4.19.0

DATE CVE VULNERABILITY TITLE RISK
2024-01-16 CVE-2024-22406 SQL Injection vulnerability in Shopware
Shopware is an open headless commerce platform.
network
low complexity
shopware CWE-89
critical
 9.8
9.8
2024-01-16 CVE-2024-22407 Improper Access Control vulnerability in Shopware
Shopware is an open headless commerce platform.
network
low complexity
shopware CWE-284
6.5
6.5
2024-01-16 CVE-2024-22408 Server-Side Request Forgery (SSRF) vulnerability in Shopware
Shopware is an open headless commerce platform.
network
low complexity
shopware CWE-918
8.1
8.1