Filter
Adobe CommerceInsecure Direct Object Reference - An attacker can able to erase the victim quote details
5.3
First published (updated )
Adobe CommerceCustomer account takeover via web API call & subsequent password reset
8.1
First published (updated )
Adobe CommerceAdobe Commerce | Improper Input Validation (CWE-20)
7.2
First published (updated )
Adobe CommerceRCE in the Adobe Commerce Webhook module through a legit webhook definition
7.2
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Adobe CommerceAdobe Commerce | Improper Access Control (CWE-284)
9.8
First published (updated )
Adobe CommerceStored Cross Site Scripting in Order Comment
4.8
First published (updated )
Adobe CommerceAdobe Commerce | Improper Authorization (CWE-285)
8.2
First published (updated )
Adobe CommerceAdobe Commerce and Magento Open Source Improper Restriction of XML External Entity Reference (XXE) Vulnerability
First published (updated )
Adobe CommerceLarge attack surface through legit webhook usage in Adobe Commerce
9.1
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.