business_logic vulnerabilities
business_logic in numbers
sbomify tracks 1,404 business_logic vulnerabilities. Most are found in web application (43%), cms plugin (18%) and server software (15%).
How to fix business_logic vulnerabilities
Most exploited business_logic vulnerabilities
- CVE-2019-6223 Apple iOS and macOS Group Facetime
- CVE-2025-43200 Apple Multiple Products Unspecified
- CVE-2001-0981 Business logic in n/a
- CVE-2000-0253 Business logic in n/a
- CVE-2025-68667 Conduit-derived homeservers are affected by a Confused Deputy and Improper Input Validation issue
- CVE-2024-21669 Hyperledger Aries Cloud Agent Python result of presentation verification not checked for LDP-VC
- CVE-2022-1680 Business logic in GitLab
- CVE-2020-15860 Business logic in n/a
- CVE-2026-71644 Business logic in n/a
- CVE-2026-14205 WP Events Manager < 2.2.5 - Subscriber+ Payment Bypass via 'qty' Parameter
- CVE-2026-68079 Apache CXF: DefaultEncryptingCodeDataProvider allows unlimited authorization code replay
- CVE-2026-15043 DBI::SQL::Nano versions from 1.42 before 1.651 for Perl have inverted <= and >= SQL operators on text
Recently published
- CVE-2026-106014 Gateway for Vantiv on WC <= 1.0.1 - Unauthenticated Order Payment Completion via Payment Callback Forgery
- CVE-2026-110034 Salon Booking System < 10.31.11 - Unauthenticated Negative Booking Total via Discount Code
- CVE-2026-112285 Thelia before 3.1.5 and 3.2.4 Coupon Usage Limit Bypass via Pay-Later Orders
- CVE-2026-112295 FlyCms through commit edfdf724 Mass Assignment via /ucenter/account_update
- CVE-2026-86791 iPOSpays Payment Gateway for WooCommerce < 1.4.7 - Unauthenticated Payment Confirmation Forgery
- CVE-2026-94273 Snap Finance <= 3.11.0 - Unauthenticated Payment Confirmation Forgery via snap_finance_complete_payment
Other types of vulnerability
- Cross-site scripting54,178
- Memory corruption53,628
- Denial of service36,532
- 35,428
- Missing authorization28,513
- SQL injection23,565
- Path traversal19,236
- 16,160
Find these in your own software.
Upload an SBOM and sbomify checks it against every vulnerability here, every day.