CVE-2022-35698: Adobe Commerce Stored XSS Arbitrary code execution
First published: Fri Oct 14 2022(Updated: )
Adobe Commerce versions 2.4.4-p1 (and earlier) and 2.4.5 (and earlier) are affected by a Stored Cross-site Scripting vulnerability. Exploitation of this issue does not require user interaction and could result in a post-authentication arbitrary code execution.
Credit: psirt@adobe.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Adobe Commerce | <2.4.4 | |
| Adobe Commerce | =2.4.4 | |
| Adobe Commerce | =2.4.4-p1 | |
| Adobe Commerce | =2.4.5 | |
| Adobe Magento Open Source | <2.4.4 | |
| Adobe Magento Open Source | =2.4.4 | |
| Adobe Magento Open Source | =2.4.4-p1 | |
| Adobe Magento Open Source | =2.4.5 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Frequently Asked Questions
What is the vulnerability ID for this Adobe Commerce issue?
The vulnerability ID for this Adobe Commerce issue is CVE-2022-35698.
Which versions of Adobe Commerce are affected by this vulnerability?
Adobe Commerce versions 2.4.4-p1 (and earlier) and 2.4.5 (and earlier) are affected.
What is the severity level of CVE-2022-35698?
CVE-2022-35698 has a severity level of 5.4 (Critical).
Is user interaction required to exploit this vulnerability?
No, exploitation of this vulnerability does not require user interaction.
What is the impact of CVE-2022-35698?
Exploiting this vulnerability could result in post-authentication arbitrary code execution.
- collector/nvd-index
- agent/type
- agent/softwarecombine
- collector/mitre-cve
- source/MITRE
- agent/remedy
- agent/title
- agent/references
- agent/weakness
- agent/last-modified-date
- agent/severity
- agent/author
- agent/description
- agent/tags
- agent/first-publish-date
- agent/event
- vendor/adobe
- canonical/adobe commerce
- version/adobe commerce/2.4.4
- version/adobe commerce/2.4.4-p1
- version/adobe commerce/2.4.5
- canonical/adobe magento open source
- version/adobe magento open source/2.4.4
- version/adobe magento open source/2.4.4-p1
- version/adobe magento open source/2.4.5