99 CVEs
osCommerce Vulnerabilities
CVE security advisories and vulnerability history for osCommerce.
99
Total CVEs
Published
0
In CISA KEV
Exploited in the wild
44
Public exploits
PoC or exploit code
6.0
Avg CVSS
2005–2026
Overview
osCommerce has 99 published CVE records since 2005, of which 0 are in CISA's Known Exploited Vulnerabilities catalog and 44 have a known public exploit. The average CVSS base score across scored CVEs is 6.0.
This page aggregates every publicly disclosed vulnerability (CVE) affecting osCommerce products, with severity breakdowns, the most-affected products, the most common weakness types, and the latest disclosures.
Security scorecard
A quick read on osCommerce's vulnerability posture, as a share of its 99 published CVEs.