Questions tagged [security-scan-tool]

Used for magento's new security tool related questions.

Filter by
Sorted by
Tagged with
2 votes
1 answer
22 views

How to Configure Magento 2 Security Scan?

Can anyone please explain STEP-BY-STEP PROCESS TO CONFIGURE MAGENTO 2 SECURITY SCAN? Thanks
user avatar
0 votes
1 answer
194 views

Magento scanner error can't reach base URL

A couple of days ago I started to get this error.. Security Tool was unable to reach the base URL. Any ideas? No changes have been made Thanks
user avatar
  • 1
0 votes
1 answer
104 views

PRODSECBUG-2403 RCE Vulnerability patch has not been detected! (500) get in magneto 2.4.0 security scan

i am using magneto 2.4.0 . While run magento security scan get this message FAIL | Patch | RCE Vulnerability | PRODSECBUG-2403 RCE Vulnerability patch has not been detected! (500) when try to fin ...
user avatar
1 vote
1 answer
129 views

Magento 2 Outdated JS Libraries - Failed. Outdated AngularJS library found Issue

We are using magento ver 2.2.4 and after run magento security scan tool, In generated report we found following error:- Outdated JS Libraries - Failed.Outdated AngularJS library found, response ...
user avatar
  • 771
-1 votes
2 answers
36 views

Need magento 1.9.3.3 to apply patch

I want to know list of patches for my website which is in 1.9.3.3 version of magento please suggest.
user avatar
1 vote
1 answer
219 views

Magento Security Scan Erroneous Results (falses positive)?

The Magento Security Scan returned this vulnerability: API ACL - Failed. API ACL Patch not detected (APPSEC-1679) Apply the Magento 2.0.14/2.1.7 Security Update immediately. However, my site is ...
user avatar
  • 206
0 votes
1 answer
221 views

Magento 2: Spam Customer Accounts Created Automatically

I am using Magento 2.2.4 for my e-commerce website. From last few days, customer accounts creating automatically on my website without the proper information. I already installed Mageplaza Security ...
user avatar
  • 492
2 votes
0 answers
192 views

What does "We were unable to check for API ACL" in the Magento security check report mean?

We did the Magento security scan. And got unknown | Patch API ACL | We were unable to check for API ACL Please check out our Security Best Practices What is that supposed to mean? Which security ...
user avatar
  • 14.7k
0 votes
2 answers
619 views

Magento 2, XSS Patch not detected (APPSEC-2143)

In Magento security scan I got the below message for my Magento instance: XS Vulnerability - Failed. XSS Patch not detected (APPSEC-2143) I am using Magento 2.2.3 How could I resolve this? Is ...
user avatar
  • 1,187
1 vote
1 answer
193 views

Outdated AngularJS library found in magento2

What is solution below Error? Any One Can Help?: Status: FAIL Group: Vulnerability Scan Name: Magento Js Libraries Scan Details: Outdated JS Libraries - Failed. Outdated AngularJS library found, ...
user avatar
  • 1,175
1 vote
0 answers
48 views

Magento 2: Is there any site which is showing missing security patch?

Is there any website which is provide a report about missing security patch or which need to install ? I just need to install patch in magento 2.1.9.
user avatar
  • 1,002
0 votes
2 answers
185 views

Magento 2 security scan failed AngularJS and XS Vulnerability

Our Magento 2 site failed the AngularJS and XS Vulnerability checks. Does anyone know how this can be fixed.
user avatar
  • 61
0 votes
2 answers
244 views

Magento Security Scan fails AngularJS version

The Magento security scan tool failed our website after we upgraded to Magento 2.1.18. Outdated JS Libraries - Failed. Outdated AngularJS library found, response body contains unexpected '...
user avatar
  • 4,613
0 votes
0 answers
47 views

Issues on blocking magento website

Is there any way where a magento website is enabled and opens even if teh internal IT firewall blocks it. Also no one blocked my website in the office. Still i am not able to open it in the office ...
user avatar
2 votes
2 answers
2k views

Document root change help

I am using Magento 2.3.1 Open Source. I installed it from the .zip file in the public_html folder (I didn't know any better at the time) in my account at my web host, running on Apache. I did the ...
user avatar
  • 167
4 votes
1 answer
384 views

Magento 1.9.4.1 - SUPEE-10975 - Failed. Outdated JQuery library v.1.12.0 found

I have upgrade version and during Magento security scan I got this error. I have removed old Jquery and added v.1.12.1 I replaced it in all page.xml. When I tried to check Jquery version of my store ...
user avatar
  • 1,677
2 votes
2 answers
714 views

Is there something mad going on with Magento critical vulnerability scanner

I upgraded my site to Magento2.3 a few hours back, but I am getting emails every few minutes from other peoples servers telling me to install SUPEE-5344 which I thought was years old, is there some ...
user avatar
  • 21
2 votes
1 answer
260 views

Security Scan supee-10415 false positive?

Magento 1 supee-10415 installed in my magento but when i checked that in magereports it's show safe and checked in magento security scan tool it's show " SUPEE-10415 has not been detected!". Any one ...
user avatar
  • 1,265
2 votes
0 answers
80 views

Security Scan returning an empty report

I'm running 1.9.3.9 and have successfully configured Magento Security Scan. The scan runs and reports no problems, but no report details are available. The "View Report" page on magento.com is empty (...
user avatar
0 votes
1 answer
136 views

Getting errors in Magento 1.9.3 SECURITY SCAN - Total four error critical error

I checked my site in Magento SECURITY SCAN and found these result. Magento Brute Force Magento SUPEE 5994 Magento SUPEE 6285 SSL TLS I tried to solve these but not getting success. What I can do ...
user avatar
1 vote
0 answers
311 views

Having issue with Magento 2 security scan. Magento Compromise Injection

I have checked with my all the sites with the bundle and merge js I am getting the same issue for all the sites i.e. Magento Compromise Injection. When I remove bundle and merge js then security scan ...
user avatar
0 votes
2 answers
215 views

Magento 2 : Security Check Can Not be Verified!

I use magento 2.2.2. I try to have a security check provided by Magento at https://account.magento.com/scanner/index/form/ I add confirmation code, I check it in source of my site, but when I try to ...
user avatar
3 votes
1 answer
541 views

Magento Security Tool False Positive? prototype.js identified as compromise injection

Is anyone else having issues with Magento Security Tool Scanner? https://account.magento.com/scanner/ Your site is compromised with injected JavaScript. (79) The malicious code signature(s) has been ...
user avatar
3 votes
2 answers
581 views

Magento Security Scanner does not detect SUPEE-8788

I am trying the Magento Security Scanner in our projects however the scanner fails to detect that SUPEE-8788 is applied. We are using Magento 1.9.3.7 installed via composer with a clean install. ...
user avatar
3 votes
1 answer
184 views

Magento Security Scan : some of results are UNKNOWN

I am trying magento's New Magento Security Scan and find out some of Unidentified Results. Status of results are UNKNOWN. How can i completely scan my website.
user avatar
9 votes
6 answers
2k views

Magento Security Scan not able to verify site

I am trying magento's New Magento Security Tool with below url https://account.magento.com/scanner/index/form/ But i can not Verify Site Ownership, every time when i click on Verify Confirmation ...
user avatar