Filter
AND
AND
Adobe CommerceAdobe Commerce | Cross-site Scripting (Stored XSS) (CWE-79)
4.8
First published (updated )
Adobe CommerceAdobe Commerce | Incorrect Authorization (CWE-863)
5.4
First published (updated )
Adobe CommerceAdobe Commerce | Cross-site Scripting (Reflected XSS) (CWE-79)
6.1
First published (updated )
Adobe CommerceAdobe Commerce | Improper Access Control (CWE-284)
5.3
First published (updated )
Adobe CommerceAdobe Commerce | Improper Access Control (CWE-284)
4.3
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Adobe CommerceAdobe Commerce | Improper Access Control (CWE-284)
4.3
First published (updated )
Adobe CommerceAdobe Commerce | Time-of-check Time-of-use (TOCTOU) Race Condition (CWE-367)
4.3
First published (updated )
Adobe CommerceAdobe Commerce | Incorrect Authorization (CWE-863)
6.5
First published (updated )
Adobe CommerceAdobe Commerce | Improper Access Control (CWE-284)
4.3
First published (updated )
Adobe CommerceAdobe Commerce | Incorrect Authorization (CWE-863)
5.4
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Adobe CommerceAdobe Commerce | Improper Access Control (CWE-284)
6.5
First published (updated )
Adobe CommerceAdobe Commerce | Improper Access Control (CWE-284)
4.3
First published (updated )
Adobe CommerceAdobe Commerce | Incorrect Authorization (CWE-863)
4.3
First published (updated )
Adobe CommerceInsecure Direct Object Reference - An attacker can able to erase the victim quote details
5.3
First published (updated )
Adobe CommerceStored Cross Site Scripting in Order Comment
4.8
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Adobe CommerceAdobe Commerce | Uncontrolled Resource Consumption (CWE-400)
5.3
First published (updated )
Adobe CommerceError based file extraction via PHP filter chains during product bulk import logic
4.9
First published (updated )
Adobe CommerceValidate Your Inputs | Server-Side Request Forgery (SSRF) (CWE-918)
6.8
First published (updated )
Adobe CommerceAdobe Commerce versions 2.4.6 (and earlier), 2.4.5-p2 (and earlier) and 2.4.4-p3 (and earlier) are a…
6.5
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Adobe CommerceBypass Purchase Order Approval using Company User in Adobe Commerce B2B
4.3
First published (updated )
Adobe CommerceAdobe Commerce | Incorrect Authorization (CWE-863)
4.3
First published (updated )
Adobe Commerce[Cloud] Customer suspects IDOR vulnerability
4.3
First published (updated )
Adobe CommerceInsecure Direct Object Reference (IDOR) in Create Quote Function
4.3
First published (updated )
Adobe CommerceServer Side Request Forgery (SSRF) in USPS carrier integration configuration
4.9
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Adobe CommerceServer Side Request Forgery (SSRF) in FedEx carrier integration configuration
4.9
First published (updated )
Adobe CommerceAdobe Commerce Guest Cart Shipping Address Overwrite IDOR
5.3
First published (updated )