deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2020-14477
Published: 2020-06-26
Description: In Philips Ultrasound ClearVue Versions 3.2 and prior, Ultrasound CX Versions 5.0.2 and prior, Ultrasound EPIQ/Affiniti Versions VM5.0 and prior, Ultrasound Sparq Version 3.0.2 and prior and Ultrasound Xperius all versions, an attacker may use an alternate path or channel that does not require authentication of the alternate service login to view or modify information.
CVSS Score: 3.6 (LOW)
CWE: CWE-288, CWE-287
References: https://www.us-cert.gov/ics/advisories/icsma-20-177-01; https://www.us-cert.gov/ics/advisories/icsma-20-177-01
CVE: CVE-2020-14955
Published: 2020-06-26
Description: In Jiangmin Antivirus 16.0.13.129, the driver file (KVFG.sys) allows local users to cause a denial of service (BSOD) or possibly have unspecified other impact because of not validating input values from IOCtl 0x220440.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-20
References: https://github.com/y5s5k5/CVE-2020-14955; https://github.com/y5s5k5/CVE-2020-14955
CVE: CVE-2020-15351
Published: 2020-06-26
Description: IDrive before 6.7.3.19 on Windows installs by default to %PROGRAMFILES(X86)%\IDriveWindows with weak folder permissions granting any user modify permission (i.e., NT AUTHORITY\Authenticated Users:(OI)(CI)(M)) to the contents of the directory and its sub-folders. In addition, the program installs a service called IDriveService that runs as LocalSystem. Thus, any standard user can escalate privileges to NT AUTHORITY\SYSTEM by substituting the service's binary with a malicious one.
CVSS Score: 7.8 (HIGH)
CWE: CWE-276
References: https://github.com/active-labs/Advisories/blob/master/2020/ACTIVE-2020-004.md; https://www.idrive.com/release-info#win; https://github.com/active-labs/Advisories/blob/master/2020/ACTIVE-2020-004.md
CVE: CVE-2020-9047
Published: 2020-06-26
Description: A vulnerability exists that could allow the execution of unauthorized code or operating system commands on systems running exacqVision Web Service versions 20.06.3.0 and prior and exacqVision Enterprise Manager versions 20.06.4.0 and prior. An attacker with administrative privileges could potentially download and run a malicious executable that could allow OS command injection on the system.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-347, CWE-347
References: https://www.johnsoncontrols.com/cyber-solutions/security-advisories; https://www.us-cert.gov/ics/advisories/ICSA-20-170-01; https://www.johnsoncontrols.com/cyber-solutions/security-advisories
CVE: CVE-2013-7489
Published: 2020-06-26
Description: The Beaker library through 1.11.0 for Python is affected by deserialization of untrusted data, which could lead to arbitrary code execution.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-502
References: https://bugzilla.redhat.com/show_bug.cgi?id=1850105; https://github.com/bbangert/beaker/issues/191; https://www.openwall.com/lists/oss-security/2020/05/14/11
CVE: CVE-2020-9586
Published: 2020-06-26
Description: Adobe Character Animator versions 3.2 and earlier have a buffer overflow vulnerability. Successful exploitation could lead to arbitrary code execution.
CVSS Score: 7.8 (HIGH)
CWE: CWE-120
References: https://helpx.adobe.com/security/products/character_animator/apsb20-25.html; https://helpx.adobe.com/security/products/character_animator/apsb20-25.html
CVE: CVE-2020-9589
Published: 2020-06-26
Description: Adobe DNG Software Development Kit (SDK) 1.5 and earlier versions have a heap overflow vulnerability. Successful exploitation could lead to arbitrary code execution.
CVSS Score: 7.8 (HIGH)
CWE: CWE-787
References: https://helpx.adobe.com/security/products/dng-sdk/apsb20-26.html; https://helpx.adobe.com/security/products/dng-sdk/apsb20-26.html
CVE: CVE-2020-9590
Published: 2020-06-26
Description: Adobe DNG Software Development Kit (SDK) 1.5 and earlier versions have a heap overflow vulnerability. Successful exploitation could lead to arbitrary code execution.
CVSS Score: 7.8 (HIGH)
CWE: CWE-787
References: https://helpx.adobe.com/security/products/dng-sdk/apsb20-26.html; https://helpx.adobe.com/security/products/dng-sdk/apsb20-26.html
CVE: CVE-2020-9616
Published: 2020-06-26
Description: Adobe Premiere Pro versions 14.1 and earlier have an out-of-bounds read vulnerability. Successful exploitation could lead to information disclosure.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-125
References: https://helpx.adobe.com/security/products/premiere_pro/apsb20-27.html; https://helpx.adobe.com/security/products/premiere_pro/apsb20-27.html
CVE: CVE-2020-9617
Published: 2020-06-26
Description: Adobe Premiere Rush versions 1.5.8 and earlier have an out-of-bounds read vulnerability. Successful exploitation could lead to information disclosure.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-125
References: https://helpx.adobe.com/security/products/premiere_rush/apsb20-29.html; https://helpx.adobe.com/security/products/premiere_rush/apsb20-29.html
CVE: CVE-2020-9620
Published: 2020-06-26
Description: Adobe DNG Software Development Kit (SDK) 1.5 and earlier versions have a heap overflow vulnerability. Successful exploitation could lead to arbitrary code execution.
CVSS Score: 7.8 (HIGH)
CWE: CWE-787
References: https://helpx.adobe.com/security/products/dng-sdk/apsb20-26.html; https://helpx.adobe.com/security/products/dng-sdk/apsb20-26.html
CVE: CVE-2020-9621
Published: 2020-06-26
Description: Adobe DNG Software Development Kit (SDK) 1.5 and earlier versions have a heap overflow vulnerability. Successful exploitation could lead to arbitrary code execution.
CVSS Score: 7.8 (HIGH)
CWE: CWE-787
References: https://helpx.adobe.com/security/products/dng-sdk/apsb20-26.html; https://helpx.adobe.com/security/products/dng-sdk/apsb20-26.html
CVE: CVE-2020-9622
Published: 2020-06-26
Description: Adobe DNG Software Development Kit (SDK) 1.5 and earlier versions have an out-of-bounds read vulnerability. Successful exploitation could lead to information disclosure.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-125
References: https://helpx.adobe.com/security/products/dng-sdk/apsb20-26.html; https://helpx.adobe.com/security/products/dng-sdk/apsb20-26.html
CVE: CVE-2020-9623
Published: 2020-06-26
Description: Adobe DNG Software Development Kit (SDK) 1.5 and earlier versions have an out-of-bounds read vulnerability. Successful exploitation could lead to information disclosure.
CVSS Score: 7.5 (HIGH)
CWE: CWE-125
References: https://helpx.adobe.com/security/products/dng-sdk/apsb20-26.html; https://helpx.adobe.com/security/products/dng-sdk/apsb20-26.html
CVE: CVE-2020-9624
Published: 2020-06-26
Description: Adobe DNG Software Development Kit (SDK) 1.5 and earlier versions have an out-of-bounds read vulnerability. Successful exploitation could lead to information disclosure.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-125
References: https://helpx.adobe.com/security/products/dng-sdk/apsb20-26.html; https://helpx.adobe.com/security/products/dng-sdk/apsb20-26.html
CVE: CVE-2020-9626
Published: 2020-06-26
Description: Adobe DNG Software Development Kit (SDK) 1.5 and earlier versions have an out-of-bounds read vulnerability. Successful exploitation could lead to information disclosure.
CVSS Score: 3.3 (LOW)
CWE: CWE-125
References: https://helpx.adobe.com/security/products/dng-sdk/apsb20-26.html; https://helpx.adobe.com/security/products/dng-sdk/apsb20-26.html
CVE: CVE-2020-9629
Published: 2020-06-26
Description: Adobe DNG Software Development Kit (SDK) 1.5 and earlier versions have an out-of-bounds read vulnerability. Successful exploitation could lead to information disclosure.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-125
References: https://helpx.adobe.com/security/products/dng-sdk/apsb20-26.html; https://helpx.adobe.com/security/products/dng-sdk/apsb20-26.html
CVE: CVE-2020-3767
Published: 2020-06-26
Description: ColdFusion versions ColdFusion 2016, and ColdFusion 2018 have an insufficient input validation vulnerability. Successful exploitation could lead to application-level denial-of-service (dos).
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-20
References: https://helpx.adobe.com/security/products/coldfusion/apsb20-18.html; https://helpx.adobe.com/security/products/coldfusion/apsb20-18.html
CVE: CVE-2020-3768
Published: 2020-06-26
Description: ColdFusion versions ColdFusion 2016, and ColdFusion 2018 have a dll search-order hijacking vulnerability. Successful exploitation could lead to privilege escalation.
CVSS Score: 7.8 (HIGH)
CWE: CWE-426
References: https://helpx.adobe.com/security/products/coldfusion/apsb20-18.html; https://helpx.adobe.com/security/products/coldfusion/apsb20-18.html
CVE: CVE-2020-3796
Published: 2020-06-26
Description: ColdFusion versions ColdFusion 2016, and ColdFusion 2018 have an improper access control vulnerability. Successful exploitation could lead to system file structure disclosure.
CVSS Score: 6.5 (MEDIUM)
References: https://helpx.adobe.com/security/products/coldfusion/apsb20-18.html; https://helpx.adobe.com/security/products/coldfusion/apsb20-18.html
CVE: CVE-2020-3798
Published: 2020-06-26
Description: Adobe Digital Editions versions 4.5.11.187212 and below have a file enumeration (host or local network) vulnerability. Successful exploitation could lead to information disclosure.
CVSS Score: 6.5 (MEDIUM)
References: https://helpx.adobe.com/security/products/Digital-Editions/apsb20-23.html; https://helpx.adobe.com/security/products/Digital-Editions/apsb20-23.html
CVE: CVE-2020-3809
Published: 2020-06-26
Description: Adobe After Effects versions 17.0.1 and earlier have an out-of-bounds read vulnerability. Successful exploitation could lead to information disclosure .
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-125
References: https://helpx.adobe.com/security/products/after_effects/apsb20-21.html; https://helpx.adobe.com/security/products/after_effects/apsb20-21.html
CVE: CVE-2020-9553
Published: 2020-06-26
Description: Adobe Bridge versions 10.0.1 and earlier version have an out-of-bounds read vulnerability. Successful exploitation could lead to information disclosure.
CVSS Score: 3.3 (LOW)
CWE: CWE-125
References: https://helpx.adobe.com/security/products/bridge/apsb20-19.html; https://helpx.adobe.com/security/products/bridge/apsb20-19.html
CVE: CVE-2020-9554
Published: 2020-06-26
Description: Adobe Bridge versions 10.0.1 and earlier version have an out-of-bounds write vulnerability. Successful exploitation could lead to arbitrary code execution .
CVSS Score: 7.8 (HIGH)
CWE: CWE-787, CWE-787
References: https://helpx.adobe.com/security/products/bridge/apsb20-19.html; https://helpx.adobe.com/security/products/bridge/apsb20-19.html
CVE: CVE-2020-9555
Published: 2020-06-26
Description: Adobe Bridge versions 10.0.1 and earlier version have a stack-based buffer overflow vulnerability. Successful exploitation could lead to arbitrary code execution.
CVSS Score: 7.8 (HIGH)
CWE: CWE-787, CWE-787
References: https://helpx.adobe.com/security/products/bridge/apsb20-19.html; https://helpx.adobe.com/security/products/bridge/apsb20-19.html
CVE: CVE-2020-9556
Published: 2020-06-26
Description: Adobe Bridge versions 10.0.1 and earlier version have an out-of-bounds write vulnerability. Successful exploitation could lead to arbitrary code execution .
CVSS Score: 7.8 (HIGH)
CWE: CWE-787, CWE-787
References: https://helpx.adobe.com/security/products/bridge/apsb20-19.html; https://helpx.adobe.com/security/products/bridge/apsb20-19.html
CVE: CVE-2020-9557
Published: 2020-06-26
Description: Adobe Bridge versions 10.0.1 and earlier version have an out-of-bounds read vulnerability. Successful exploitation could lead to information disclosure.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-125
References: https://helpx.adobe.com/security/products/bridge/apsb20-19.html; https://helpx.adobe.com/security/products/bridge/apsb20-19.html
CVE: CVE-2020-9558
Published: 2020-06-26
Description: Adobe Bridge versions 10.0.1 and earlier version have an out-of-bounds read vulnerability. Successful exploitation could lead to information disclosure.
CVSS Score: 3.3 (LOW)
CWE: CWE-125
References: https://helpx.adobe.com/security/products/bridge/apsb20-19.html; https://helpx.adobe.com/security/products/bridge/apsb20-19.html
CVE: CVE-2020-9559
Published: 2020-06-26
Description: Adobe Bridge versions 10.0.1 and earlier version have an out-of-bounds write vulnerability. Successful exploitation could lead to arbitrary code execution .
CVSS Score: 7.8 (HIGH)
CWE: CWE-787, CWE-787
References: https://helpx.adobe.com/security/products/bridge/apsb20-19.html; https://helpx.adobe.com/security/products/bridge/apsb20-19.html
CVE: CVE-2020-9560
Published: 2020-06-26
Description: Adobe Bridge versions 10.0.1 and earlier version have an out-of-bounds write vulnerability. Successful exploitation could lead to arbitrary code execution .
CVSS Score: 7.8 (HIGH)
CWE: CWE-787, CWE-787
References: https://helpx.adobe.com/security/products/bridge/apsb20-19.html; https://helpx.adobe.com/security/products/bridge/apsb20-19.html
CVE: CVE-2020-9561
Published: 2020-06-26
Description: Adobe Bridge versions 10.0.1 and earlier version have an out-of-bounds write vulnerability. Successful exploitation could lead to arbitrary code execution .
CVSS Score: 7.8 (HIGH)
CWE: CWE-787, CWE-787
References: https://helpx.adobe.com/security/products/bridge/apsb20-19.html; https://helpx.adobe.com/security/products/bridge/apsb20-19.html
CVE: CVE-2020-9562
Published: 2020-06-26
Description: Adobe Bridge versions 10.0.1 and earlier version have a heap overflow vulnerability. Successful exploitation could lead to arbitrary code execution.
CVSS Score: 7.8 (HIGH)
CWE: CWE-787, CWE-787
References: https://helpx.adobe.com/security/products/bridge/apsb20-19.html; https://helpx.adobe.com/security/products/bridge/apsb20-19.html
CVE: CVE-2020-9563
Published: 2020-06-26
Description: Adobe Bridge versions 10.0.1 and earlier version have a heap overflow vulnerability. Successful exploitation could lead to arbitrary code execution.
CVSS Score: 7.8 (HIGH)
CWE: CWE-787, CWE-787
References: https://helpx.adobe.com/security/products/bridge/apsb20-19.html; https://helpx.adobe.com/security/products/bridge/apsb20-19.html
CVE: CVE-2020-9564
Published: 2020-06-26
Description: Adobe Bridge versions 10.0.1 and earlier version have an out-of-bounds write vulnerability. Successful exploitation could lead to arbitrary code execution .
CVSS Score: 7.8 (HIGH)
CWE: CWE-787, CWE-787
References: https://helpx.adobe.com/security/products/bridge/apsb20-19.html; https://helpx.adobe.com/security/products/bridge/apsb20-19.html
CVE: CVE-2020-9565
Published: 2020-06-26
Description: Adobe Bridge versions 10.0.1 and earlier version have an out-of-bounds write vulnerability. Successful exploitation could lead to arbitrary code execution .
CVSS Score: 7.8 (HIGH)
CWE: CWE-787, CWE-787
References: https://helpx.adobe.com/security/products/bridge/apsb20-19.html; https://helpx.adobe.com/security/products/bridge/apsb20-19.html
CVE: CVE-2020-9566
Published: 2020-06-26
Description: Adobe Bridge versions 10.0.1 and earlier version have an use after free vulnerability. Successful exploitation could lead to arbitrary code execution .
CVSS Score: 7.8 (HIGH)
CWE: CWE-416, CWE-416
References: https://helpx.adobe.com/security/products/bridge/apsb20-19.html; https://helpx.adobe.com/security/products/bridge/apsb20-19.html
CVE: CVE-2020-9567
Published: 2020-06-26
Description: Adobe Bridge versions 10.0.1 and earlier version have an use after free vulnerability. Successful exploitation could lead to arbitrary code execution .
CVSS Score: 7.8 (HIGH)
CWE: CWE-416, CWE-416
References: https://helpx.adobe.com/security/products/bridge/apsb20-19.html; https://helpx.adobe.com/security/products/bridge/apsb20-19.html
CVE: CVE-2020-9568
Published: 2020-06-26
Description: Adobe Bridge versions 10.0.1 and earlier version have a memory corruption vulnerability. Successful exploitation could lead to arbitrary code execution .
CVSS Score: 7.8 (HIGH)
CWE: CWE-787, CWE-787
References: https://helpx.adobe.com/security/products/bridge/apsb20-19.html; https://helpx.adobe.com/security/products/bridge/apsb20-19.html
CVE: CVE-2020-9569
Published: 2020-06-26
Description: Adobe Bridge versions 10.0.1 and earlier version have an out-of-bounds write vulnerability. Successful exploitation could lead to arbitrary code execution .
CVSS Score: 7.8 (HIGH)
CWE: CWE-787, CWE-787
References: https://helpx.adobe.com/security/products/bridge/apsb20-19.html; https://helpx.adobe.com/security/products/bridge/apsb20-19.html
CVE: CVE-2020-9570
Published: 2020-06-26
Description: Adobe Illustrator versions 24.0.2 and earlier have a memory corruption vulnerability. Successful exploitation could lead to arbitrary code execution .
CVSS Score: 7.8 (HIGH)
CWE: CWE-787
References: https://helpx.adobe.com/security/products/illustrator/apsb20-20.html; https://helpx.adobe.com/security/products/illustrator/apsb20-20.html
CVE: CVE-2020-9571
Published: 2020-06-26
Description: Adobe Illustrator versions 24.0.2 and earlier have a memory corruption vulnerability. Successful exploitation could lead to arbitrary code execution.
CVSS Score: 7.8 (HIGH)
CWE: CWE-787
References: https://helpx.adobe.com/security/products/illustrator/apsb20-20.html; https://helpx.adobe.com/security/products/illustrator/apsb20-20.html
CVE: CVE-2020-9572
Published: 2020-06-26
Description: Adobe Illustrator versions 24.0.2 and earlier have a memory corruption vulnerability. Successful exploitation could lead to arbitrary code execution.
CVSS Score: 7.8 (HIGH)
CWE: CWE-787
References: https://helpx.adobe.com/security/products/illustrator/apsb20-20.html; https://helpx.adobe.com/security/products/illustrator/apsb20-20.html
CVE: CVE-2020-9573
Published: 2020-06-26
Description: Adobe Illustrator versions 24.0.2 and earlier have a memory corruption vulnerability. Successful exploitation could lead to arbitrary code execution.
CVSS Score: 7.8 (HIGH)
CWE: CWE-787
References: https://helpx.adobe.com/security/products/illustrator/apsb20-20.html; https://helpx.adobe.com/security/products/illustrator/apsb20-20.html
CVE: CVE-2020-9574
Published: 2020-06-26
Description: Adobe Illustrator versions 24.0.2 and earlier have a memory corruption vulnerability. Successful exploitation could lead to arbitrary code execution .
CVSS Score: 7.8 (HIGH)
CWE: CWE-787
References: https://helpx.adobe.com/security/products/illustrator/apsb20-20.html; https://helpx.adobe.com/security/products/illustrator/apsb20-20.html
CVE: CVE-2020-9576
Published: 2020-06-26
Description: Magento versions 2.3.4 and earlier, 2.2.11 and earlier (see note), 1.14.4.4 and earlier, and 1.9.4.4 and earlier have a command injection vulnerability. Successful exploitation could lead to arbitrary code execution.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-77
References: https://helpx.adobe.com/security/products/magento/apsb20-22.html; https://helpx.adobe.com/security/products/magento/apsb20-22.html
CVE: CVE-2020-9577
Published: 2020-06-26
Description: Magento versions 2.3.4 and earlier, 2.2.11 and earlier (see note), 1.14.4.4 and earlier, and 1.9.4.4 and earlier have a stored cross-site scripting vulnerability. Successful exploitation could lead to sensitive information disclosure .
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://helpx.adobe.com/security/products/magento/apsb20-22.html; https://helpx.adobe.com/security/products/magento/apsb20-22.html
CVE: CVE-2020-9578
Published: 2020-06-26
Description: Magento versions 2.3.4 and earlier, 2.2.11 and earlier (see note), 1.14.4.4 and earlier, and 1.9.4.4 and earlier have a command injection vulnerability. Successful exploitation could lead to arbitrary code execution.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-77
References: https://helpx.adobe.com/security/products/magento/apsb20-22.html; https://helpx.adobe.com/security/products/magento/apsb20-22.html
CVE: CVE-2020-9579
Published: 2020-06-26
Description: Magento versions 2.3.4 and earlier, 2.2.11 and earlier (see note), 1.14.4.4 and earlier, and 1.9.4.4 and earlier have a security mitigation bypass vulnerability. Successful exploitation could lead to arbitrary code execution.
CVSS Score: 9.8 (CRITICAL)
References: https://helpx.adobe.com/security/products/magento/apsb20-22.html; https://helpx.adobe.com/security/products/magento/apsb20-22.html
CVE: CVE-2020-9580
Published: 2020-06-26
Description: Magento versions 2.3.4 and earlier, 2.2.11 and earlier (see note), 1.14.4.4 and earlier, and 1.9.4.4 and earlier have a security mitigation bypass vulnerability. Successful exploitation could lead to arbitrary code execution.
CVSS Score: 9.8 (CRITICAL)
References: https://helpx.adobe.com/security/products/magento/apsb20-22.html; https://helpx.adobe.com/security/products/magento/apsb20-22.html
CVE: CVE-2020-9581
Published: 2020-06-26
Description: Magento versions 2.3.4 and earlier, 2.2.11 and earlier (see note), 1.14.4.4 and earlier, and 1.9.4.4 and earlier have a stored cross-site scripting vulnerability. Successful exploitation could lead to sensitive information disclosure.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://helpx.adobe.com/security/products/magento/apsb20-22.html; https://helpx.adobe.com/security/products/magento/apsb20-22.html
CVE: CVE-2020-9582
Published: 2020-06-26
Description: Magento versions 2.3.4 and earlier, 2.2.11 and earlier (see note), 1.14.4.4 and earlier, and 1.9.4.4 and earlier have a command injection vulnerability. Successful exploitation could lead to arbitrary code execution.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-77
References: https://helpx.adobe.com/security/products/magento/apsb20-22.html; https://helpx.adobe.com/security/products/magento/apsb20-22.html
CVE: CVE-2020-9583
Published: 2020-06-26
Description: Magento versions 2.3.4 and earlier, 2.2.11 and earlier (see note), 1.14.4.4 and earlier, and 1.9.4.4 and earlier have a command injection vulnerability. Successful exploitation could lead to arbitrary code execution.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-77
References: https://helpx.adobe.com/security/products/magento/apsb20-22.html; https://helpx.adobe.com/security/products/magento/apsb20-22.html
CVE: CVE-2020-9584
Published: 2020-06-26
Description: Magento versions 2.3.4 and earlier, 2.2.11 and earlier (see note), 1.14.4.4 and earlier, and 1.9.4.4 and earlier have a stored cross-site scripting vulnerability. Successful exploitation could lead to sensitive information disclosure.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://helpx.adobe.com/security/products/magento/apsb20-22.html; https://helpx.adobe.com/security/products/magento/apsb20-22.html
CVE: CVE-2020-9585
Published: 2020-06-26
Description: Magento versions 2.3.4 and earlier, 2.2.11 and earlier (see note), 1.14.4.4 and earlier, and 1.9.4.4 and earlier have a defense-in-depth security mitigation vulnerability. Successful exploitation could lead to arbitrary code execution.
CVSS Score: 9.8 (CRITICAL)
References: https://helpx.adobe.com/security/products/magento/apsb20-22.html; https://helpx.adobe.com/security/products/magento/apsb20-22.html
CVE: CVE-2020-9587
Published: 2020-06-26
Description: Magento versions 2.3.4 and earlier, 2.2.11 and earlier (see note), 1.14.4.4 and earlier, and 1.9.4.4 and earlier have an authorization bypass vulnerability. Successful exploitation could lead to potentially unauthorized product discounts.
CVSS Score: 7.5 (HIGH)
References: https://helpx.adobe.com/security/products/magento/apsb20-22.html; https://helpx.adobe.com/security/products/magento/apsb20-22.html
CVE: CVE-2020-9588
Published: 2020-06-26
Description: Magento versions 2.3.4 and earlier, 2.2.11 and earlier (see note), 1.14.4.4 and earlier, and 1.9.4.4 and earlier have an observable timing discrepancy vulnerability. Successful exploitation could lead to signature verification bypass.
CVSS Score: 7.2 (HIGH)
CWE: CWE-203
References: https://helpx.adobe.com/security/products/magento/apsb20-22.html; https://helpx.adobe.com/security/products/magento/apsb20-22.html
CVE: CVE-2020-9591
Published: 2020-06-26
Description: Magento versions 2.3.4 and earlier, 2.2.11 and earlier (see note), 1.14.4.4 and earlier, and 1.9.4.4 and earlier have a defense-in-depth security mitigation vulnerability. Successful exploitation could lead to unauthorized access to admin panel.
CVSS Score: 7.5 (HIGH)
References: https://helpx.adobe.com/security/products/magento/apsb20-22.html; https://helpx.adobe.com/security/products/magento/apsb20-22.html