How many CVEs does AbanteCart have?

AbanteCart has 11 published CVE records since 2019, including 4 in the last two years.

How many AbanteCart CVEs are in CISA KEV?

None of AbanteCart's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.

Which AbanteCart products have the most CVEs?

The AbanteCart products with the most published CVEs are AbanteCart, abantecart-src, AbanteCart 1.4.2.

What are the most common weakness types in AbanteCart CVEs?

AbanteCart's CVEs most often map to these CWE weakness types: CWE-89 (Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')), CWE-79 (Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')), CWE-22 (Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')).

Are there public exploits for AbanteCart vulnerabilities?

Yes — 4 of AbanteCart's CVEs have a known public exploit.

How many critical AbanteCart vulnerabilities are there?

AbanteCart has 1 critical and 3 high-severity CVEs.

What is the average severity of AbanteCart CVEs?

The average CVSS base score across AbanteCart's scored CVEs is 6.7.

AbanteCart Vulnerabilities: CVEs, CISA KEV & Security Advisories

Average CVSS: 6.7
Critical / high: 36%
Actively exploited (KEV): 0%
Public exploit available: 36%
Patch available: 45%

AbanteCart Vulnerabilities

Overview

Security scorecard

Severity and exploitation

Most affected products

Common weakness types

CNAs that assign these CVEs

Disclosure activity by year

Latest AbanteCart CVEs

Other vendors

Frequently asked questions

References

Track AbanteCart vulnerabilities