Oroinc

    Dashboard / Vendors

    Products: 3
    Vulnerabilities: 13
    Known Exploited: 0
    0
    Critical Level Threats
    2
    High Level Threats
    11
    Medium Level Threats
    0
    Low Level Threats

    Vulnerabilities

    100806040200
    JanFebMarAprMayJunJulAugSepOctNovDec
    Critical Level Threats
    High Level Threats
    Medium Level Threats
    Low Level Threats

    Products Security index

    Actions
    Items Per Page

    Vulnerabilities

    CVE-2024-50677

    A cross-site scripting (XSS) vulnerability in OroPlatform CMS v5.1 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Search parameter.

    Last Modified: Jun 13, 2025
    Published: Dec 06, 2024

    CVE-2023-48296

    OroPlatform's storefront user can access history and most viewed data from matching back-office user with the same ID

    Last Modified: Mar 10, 2025
    Published: Mar 25, 2024

    CVE-2023-45824

    OroPlatform's pinned entity creation form shows pages of other users

    Last Modified: Mar 10, 2025
    Published: Mar 25, 2024

    CVE-2023-32065

    OroCommerce get-totals-for-checkout API endpoint returns unwanted data

    Last Modified: Nov 21, 2024
    Published: Nov 28, 2023

    CVE-2023-32064

    OroCommerce Customer Portal Incorrect Customer and Customer Group Frontend Menus pages visibility

    Last Modified: Nov 21, 2024
    Published: Nov 28, 2023
    Items Per Page
    Oroinc Vulnerabilities & Security CVEs | CVE-DB