- How many CVEs does osCommerce have?
- osCommerce has 103 published CVE records since 2005, including 10 in the last two years.
- How many osCommerce CVEs are in CISA KEV?
- None of osCommerce's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.
- Which osCommerce products have the most CVEs?
- The osCommerce products with the most published CVEs are osCommerce, Os Commerce, osCommerce2, Online Merchant, ce_phoenix.
- What are the most common weakness types in osCommerce CVEs?
- osCommerce's CVEs most often map to these CWE weakness types: CWE-79 (Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')), CWE-94 (Improper Control of Generation of Code ('Code Injection')), CWE-89 (Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')), CWE-20 (Improper Input Validation).
- Are there public exploits for osCommerce vulnerabilities?
- Yes — 80 of osCommerce's CVEs have a known public exploit.
- How many critical osCommerce vulnerabilities are there?
- osCommerce has 7 critical and 18 high-severity CVEs.
- What is the average severity of osCommerce CVEs?
- The average CVSS base score across osCommerce's scored CVEs is 6.0.