osCommerce ce_phoenix Vulnerabilities
CVE security advisories and vulnerability history for ce_phoenix by osCommerce.
Last updated
Overview
osCommerce ce_phoenix has 3 published CVE records since 2020, of which 0 are in CISA's Known Exploited Vulnerabilities catalog and 2 have a known public exploit. The average CVSS base score across scored CVEs is 6.0.
This page aggregates every publicly disclosed vulnerability (CVE) affecting osCommerce ce_phoenix, with a severity breakdown, the affected and patched versions, the most common weakness types, and the full CVE list.
Severity and exploitation
How the CVSS severity of osCommerce ce_phoenix's CVEs breaks down, plus how many are exploited in the wild or have public exploit code.
In CISA’s Known Exploited Vulnerabilities catalog
0
None of osCommerce ce_phoenix's CVEs are currently listed in CISA's KEV catalog.
Public exploits
2
2 of osCommerce ce_phoenix's CVEs have a known public exploit available.
Affected versions and CVEs
Browse every osCommerce ce_phoenix version named in a CVE, then pick one to see only the CVEs that affect it.
Version ranges
- < 1.0.8.201 CVE
- >= 1.0.8.201 CVE
- 1.0.6.0 <= v <= 1.0.6.01 CVE
Fixed in
- 1.0.8.201 CVE
3 CVEs
- Medium · CVSS 4.8EPSS 0.8% (53th pct)2024-03-12
- High · CVSS 7.2EPSS 27.2% (98th pct)2024-02-16
- Medium vulnerability · 2020-09-03CVE-2020-12058PatchMedium · CVSS 6.1EPSS 1.0% (58th pct)2020-09-03
Common weakness types
The CWE weakness categories most often found in osCommerce ce_phoenix CVEs. Follow any weakness for its full explanation.
Disclosure activity by year
How many osCommerce ce_phoenix CVEs were published each year.
Other osCommerce products
Browse vulnerabilities for other products by osCommerce.
Frequently asked questions
Common questions about osCommerce ce_phoenix vulnerabilities.
- How many CVEs does osCommerce ce_phoenix have?
- osCommerce ce_phoenix has 3 published CVE records since 2020.
- How many osCommerce ce_phoenix CVEs are in CISA KEV?
- None of osCommerce ce_phoenix's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.
- Are there public exploits for osCommerce ce_phoenix vulnerabilities?
- Yes — 2 of osCommerce ce_phoenix's CVEs have a known public exploit.
- Which versions of osCommerce ce_phoenix are affected?
- 4 distinct osCommerce ce_phoenix versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version.
- What are the most common weakness types in osCommerce ce_phoenix CVEs?
- osCommerce ce_phoenix's CVEs most often map to these CWE weakness types: CWE-79 (Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')), CWE-94 (Improper Control of Generation of Code ('Code Injection')).
- What is the average severity of osCommerce ce_phoenix CVEs?
- The average CVSS base score across osCommerce ce_phoenix's scored CVEs is 6.0.
References
- All osCommerce vulnerabilities
- The MITRE CVE Program (opens in a new tab)
- Learn: What is a CVE?
- CWE directory: the weakness types these CVEs map to
Vulnerability data is sourced from the CVE Program; severity, KEV, and exploit signals are aggregated by RadicalNotion.AI.
Track osCommerce ce_phoenix vulnerabilities
Monitor new osCommerce ce_phoenix vulnerabilities as they are disclosed, with AI-written analysis and remediation guidance.