n/a Magento 2

Name: n/a Magento 2
Brand: n/a

productEU

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

KEV-listed

public exploit

EPSS ≥ 10%

critical

by severity

0critical24high29medium0low

updated 2026-10-28

vulnerabilities (53)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2019-7930US	high7.2	2.42% (84th)	—	no fix	2019-08-02	≤ Magento 2.1 prior to 2.1.18, Magento 2.2 prior to 2.2.9, Magento 2.3 prior to 2.3.2
CVE-2019-7950US	high7.5	2.16% (82nd)	—	no fix	2019-08-02	≤ Magento 2.1 prior to 2.1.18, Magento 2.2 prior to 2.2.9, Magento 2.3 prior to 2.3.2
CVE-2019-7903US	high7.2	2.14% (82nd)	—	no fix	2019-08-02	≤ Magento 2.1 prior to 2.1.18, Magento 2.2 prior to 2.2.9, Magento 2.3 prior to 2.3.2
CVE-2019-7861US	high7.5	2.04% (81st)	—	no fix	2019-08-02	≤ Magento 2.1 prior to 2.1.18, Magento 2.2 prior to 2.2.9, Magento 2.3 prior to 2.3.2
CVE-2019-7885US	high8.8	1.95% (80th)	—	no fix	2019-08-02	≤ Magento 2.1 prior to 2.1.18, Magento 2.2 prior to 2.2.9, Magento 2.3 prior to 2.3.2
CVE-2019-7876US	high8.8	1.95% (80th)	—	no fix	2019-08-02	≤ Magento 2.1 prior to 2.1.18, Magento 2.2 prior to 2.2.9, Magento 2.3 prior to 2.3.2
CVE-2019-7942US	high7.2	1.92% (80th)	—	no fix	2019-08-02	≤ Magento 2.1 prior to 2.1.18, Magento 2.2 prior to 2.2.9, Magento 2.3 prior to 2.3.2
CVE-2019-7896US	high7.2	1.92% (80th)	—	no fix	2019-08-02	≤ Magento 2.1 prior to 2.1.18, Magento 2.2 prior to 2.2.9, Magento 2.3 prior to 2.3.2
CVE-2019-7895US	high7.2	1.92% (80th)	—	no fix	2019-08-02	≤ Magento 2.1 prior to 2.1.18, Magento 2.2 prior to 2.2.9, Magento 2.3 prior to 2.3.2
CVE-2019-7892US	high7.2	1.78% (78th)	—	no fix	2019-08-02	≤ Magento 2.1 prior to 2.1.18, Magento 2.2 prior to 2.2.9, Magento 2.3 prior to 2.3.2
CVE-2019-7912US	high7.2	1.58% (75th)	—	no fix	2019-08-02	≤ Magento 2.1 prior to 2.1.18, Magento 2.2 prior to 2.2.9, Magento 2.3 prior to 2.3.2
CVE-2019-7859US	high7.5	1.45% (73rd)	—	no fix	2019-08-02	≤ Magento 2.1 prior to 2.1.18, Magento 2.2 prior to 2.2.9, Magento 2.3 prior to 2.3.2
CVE-2019-7923US	high7.2	1.44% (73rd)	—	no fix	2019-08-02	≤ Magento 2.1 prior to 2.1.18, Magento 2.2 prior to 2.2.9, Magento 2.3 prior to 2.3.2
CVE-2019-7913US	high7.2	1.44% (73rd)	—	no fix	2019-08-02	≤ Magento 2.1 prior to 2.1.18, Magento 2.2 prior to 2.2.9, Magento 2.3 prior to 2.3.2
CVE-2019-7871US	high8.8	1.25% (69th)	—	no fix	2019-08-02	≤ Magento 2.1 prior to 2.1.18, Magento 2.2 prior to 2.2.9, Magento 2.3 prior to 2.3.2
CVE-2019-7881US	medium5.4	1.22% (69th)	—	no fix	2019-08-02	≤ Magento 2.1 prior to 2.1.18, Magento 2.2 prior to 2.2.9, Magento 2.3 prior to 2.3.2
CVE-2019-7951US	high7.5	1.19% (68th)	—	no fix	2019-08-02	≤ Magento 2.1 prior to 2.1.18, Magento 2.2 prior to 2.2.9, Magento 2.3 prior to 2.3.2
CVE-2019-7886US	high7.5OT elevated	1.19% (68th)	—	no fix	2019-08-02	≤ Magento 2.1 prior to 2.1.18, Magento 2.2 prior to 2.2.9, Magento 2.3 prior to 2.3.2
CVE-2019-7860US	high7.5	1.19% (68th)	—	no fix	2019-08-02	≤ Magento 2.1 prior to 2.1.18, Magento 2.2 prior to 2.2.9, Magento 2.3 prior to 2.3.2
CVE-2019-7928US	high7.5	1.18% (67th)	—	no fix	2019-08-02	≤ Magento 2.1 prior to 2.1.18, Magento 2.2 prior to 2.2.9, Magento 2.3 prior to 2.3.2
CVE-2019-7915US	high7.5	1.18% (67th)	—	no fix	2019-08-02	≤ Magento 2.1 prior to 2.1.18, Magento 2.2 prior to 2.2.9, Magento 2.3 prior to 2.3.2
CVE-2019-7929US	medium4.9	1.16% (67th)	—	no fix	2019-08-02	≤ Magento 2.1 prior to 2.1.18, Magento 2.2 prior to 2.2.9, Magento 2.3 prior to 2.3.2
CVE-2019-7854US	high7.5	1.14% (67th)	—	no fix	2019-08-02	≤ Magento 2.1 prior to 2.1.18, Magento 2.2 prior to 2.2.9, Magento 2.3 prior to 2.3.2
CVE-2019-7939US	medium6.1	1.04% (64th)	—	no fix	2019-08-02	≤ Magento 2.1 prior to 2.1.18, Magento 2.2 prior to 2.2.9, Magento 2.3 prior to 2.3.2
CVE-2019-7855US	medium5.3	0.97% (62nd)	—	no fix	2019-08-02	≤ Magento 2.1 prior to 2.1.18, Magento 2.2 prior to 2.2.9, Magento 2.3 prior to 2.3.2
CVE-2019-7888US	medium6.5	0.95% (61st)	—	no fix	2019-08-02	≤ Magento 2.1 prior to 2.1.18, Magento 2.2 prior to 2.2.9, Magento 2.3 prior to 2.3.2
CVE-2019-7852US	medium5.3	0.93% (60th)	—	no fix	2019-08-02	≤ Magento 2.1 prior to 2.1.18, Magento 2.2 prior to 2.2.9, Magento 2.3 prior to 2.3.2
CVE-2019-7872US	medium6.5	0.90% (59th)	—	no fix	2019-08-02	≤ Magento 2.1 prior to 2.1.18, Magento 2.2 prior to 2.2.9, Magento 2.3 prior to 2.3.2
CVE-2019-7864US	medium5.3	0.88% (59th)	—	no fix	2019-08-02	≤ Magento 2.1 prior to 2.1.18, Magento 2.2 prior to 2.2.9, Magento 2.3 prior to 2.3.2
CVE-2019-7877US	medium6.1	0.85% (58th)	—	no fix	2019-08-02	≤ Magento 2.1 prior to 2.1.18, Magento 2.2 prior to 2.2.9, Magento 2.3 prior to 2.3.2
CVE-2019-7890US	high7.3	0.84% (58th)	—	no fix	2019-08-02	≤ Magento 2.1 prior to 2.1.18, Magento 2.2 prior to 2.2.9, Magento 2.3 prior to 2.3.2
CVE-2019-7904US	medium6.5	0.80% (57th)	—	no fix	2019-08-02	≤ Magento 2.1 prior to 2.1.18, Magento 2.2 prior to 2.2.9, Magento 2.3 prior to 2.3.2
CVE-2019-7858US	high7.5OT elevated	0.74% (54th)	—	no fix	2019-08-02	≤ Magento 2.1 prior to 2.1.18, Magento 2.2 prior to 2.2.9, Magento 2.3 prior to 2.3.2
CVE-2019-7925US	medium4.9	0.73% (54th)	—	no fix	2019-08-02	≤ Magento 2.1 prior to 2.1.18, Magento 2.2 prior to 2.2.9, Magento 2.3 prior to 2.3.2
CVE-2019-7921US	medium5.4	0.57% (47th)	—	no fix	2019-08-02	≤ Magento 2.1 prior to 2.1.18, Magento 2.2 prior to 2.2.9, Magento 2.3 prior to 2.3.2
CVE-2019-7937US	medium4.8	0.56% (46th)	—	no fix	2019-08-02	≤ Magento 2.1 prior to 2.1.18, Magento 2.2 prior to 2.2.9, Magento 2.3 prior to 2.3.2
CVE-2019-7936US	medium4.8	0.56% (46th)	—	no fix	2019-08-02	≤ Magento 2.1 prior to 2.1.18, Magento 2.2 prior to 2.2.9, Magento 2.3 prior to 2.3.2
CVE-2019-7927US	medium4.8	0.56% (46th)	—	no fix	2019-08-02	≤ Magento 2.1 prior to 2.1.18, Magento 2.2 prior to 2.2.9, Magento 2.3 prior to 2.3.2
CVE-2019-7926US	medium4.8	0.56% (46th)	—	no fix	2019-08-02	≤ Magento 2.1 prior to 2.1.18, Magento 2.2 prior to 2.2.9, Magento 2.3 prior to 2.3.2
CVE-2019-7908US	medium4.8	0.56% (46th)	—	no fix	2019-08-02	≤ Magento 2.1 prior to 2.1.18, Magento 2.2 prior to 2.2.9, Magento 2.3 prior to 2.3.2
CVE-2019-7880US	medium4.8	0.56% (46th)	—	no fix	2019-08-02	≤ Magento 2.1 prior to 2.1.18, Magento 2.2 prior to 2.2.9, Magento 2.3 prior to 2.3.2
CVE-2019-7869US	medium4.8	0.56% (46th)	—	no fix	2019-08-02	≤ Magento 2.1 prior to 2.1.18, Magento 2.2 prior to 2.2.9, Magento 2.3 prior to 2.3.2
CVE-2019-7868US	medium4.8	0.56% (46th)	—	no fix	2019-08-02	≤ Magento 2.1 prior to 2.1.18, Magento 2.2 prior to 2.2.9, Magento 2.3 prior to 2.3.2
CVE-2019-7867US	medium4.8	0.56% (46th)	—	no fix	2019-08-02	≤ Magento 2.1 prior to 2.1.18, Magento 2.2 prior to 2.2.9, Magento 2.3 prior to 2.3.2
CVE-2019-7866US	medium4.8	0.56% (46th)	—	no fix	2019-08-02	≤ Magento 2.1 prior to 2.1.18, Magento 2.2 prior to 2.2.9, Magento 2.3 prior to 2.3.2
CVE-2019-7863US	medium4.8	0.56% (46th)	—	no fix	2019-08-02	≤ Magento 2.1 prior to 2.1.18, Magento 2.2 prior to 2.2.9, Magento 2.3 prior to 2.3.2
CVE-2019-7862US	medium4.8	0.56% (46th)	—	no fix	2019-08-02	≤ Magento 2.1 prior to 2.1.18, Magento 2.2 prior to 2.2.9, Magento 2.3 prior to 2.3.2
CVE-2019-7853US	medium4.8	0.56% (46th)	—	no fix	2019-08-02	≤ Magento 2.1 prior to 2.1.18, Magento 2.2 prior to 2.2.9, Magento 2.3 prior to 2.3.2
CVE-2019-7865US	high8.8	0.50% (42nd)	—	no fix	2019-08-02	≤ Magento 2.1 prior to 2.1.18, Magento 2.2 prior to 2.2.9, Magento 2.3 prior to 2.3.2
CVE-2019-7874US	medium6.5	0.44% (38th)	—	no fix	2019-08-02	≤ Magento 2.1 prior to 2.1.18, Magento 2.2 prior to 2.2.9, Magento 2.3 prior to 2.3.2

showing 50 of 53

weaknesses (8)

The flaw types (CWEs) most of these CVEs share.

CWE-79Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')19 CVEs
CWE-639Authorization Bypass Through User-Controlled Key6 CVEs
CWE-94Improper Control of Generation of Code ('Code Injection')6 CVEs
CWE-352Cross-Site Request Forgery (CSRF)5 CVEs
CWE-200Exposure of Sensitive Information to an Unauthorized Actor4 CVEs
CWE-918Server-Side Request Forgery (SSRF)4 CVEs
CWE-434Unrestricted Upload of File with Dangerous Type3 CVEs
CWE-22Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')2 CVEs

sources (1)

Which sources assert this record, and when.

EUEU Vulnerability Database (ENISA)53 CVEs

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.

Free scan