Filter
AND
AND
Adobe CommerceAdobe Commerce | Improper Access Control (CWE-284)
4.3
First published (updated )
Adobe CommerceAdobe Commerce | Server-Side Request Forgery (SSRF) (CWE-918)
4.9
First published (updated )
Adobe CommerceAdobe Commerce | Time-of-check Time-of-use (TOCTOU) Race Condition (CWE-367)
4.3
First published (updated )
Adobe CommerceAdobe Commerce | Cross-Site Request Forgery (CSRF) (CWE-352)
6.3
First published (updated )
Adobe CommerceAdobe Commerce | Cross-Site Request Forgery (CSRF) (CWE-352)
6.3
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Adobe CommerceAdobe Commerce | Cross-Site Request Forgery (CSRF) (CWE-352)
5.5
First published (updated )
Adobe CommerceAdobe Commerce | Improper Authorization (CWE-285)
4.3
First published (updated )
Adobe CommerceAdobe Commerce | Incorrect Authorization (CWE-863)
6.5
First published (updated )
Adobe CommerceAdobe Commerce | Incorrect Authorization (CWE-863)
5.4
First published (updated )
Adobe CommerceAdobe Commerce | Incorrect Authorization (CWE-863)
5.4
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Adobe CommerceAdobe Commerce | Improper Access Control (CWE-284)
4.3
First published (updated )
Adobe CommerceAdobe Commerce | Improper Access Control (CWE-284)
4.3
First published (updated )
Adobe CommerceAdobe Commerce | Cross-site Scripting (Stored XSS) (CWE-79)
4.8
First published (updated )
Adobe CommerceAdobe Commerce | Incorrect Authorization (CWE-863)
4.3
First published (updated )
Adobe CommerceAdobe Commerce | Improper Access Control (CWE-284)
5.3
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Adobe CommerceAdobe Commerce | Improper Access Control (CWE-284)
4.3
First published (updated )
Adobe CommerceAdobe Commerce | Improper Access Control (CWE-284)
6.5
First published (updated )
Adobe CommerceAdobe Commerce | Improper Access Control (CWE-284)
4.3
First published (updated )
Adobe CommerceAdobe Commerce | Cross-site Scripting (Reflected XSS) (CWE-79)
6.1
First published (updated )
Adobe CommerceAdobe Commerce | Incorrect Authorization (CWE-863)
4.3
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Adobe CommerceAdobe Commerce | Uncontrolled Resource Consumption (CWE-400)
5.3
First published (updated )
Adobe CommerceAdobe Commerce | Improper Authorization (CWE-285)
5.4
First published (updated )
Adobe CommerceAdobe Commerce | Improper Authorization (CWE-285)
4.3
First published (updated )
Adobe CommerceAdobe Commerce | Improper Authorization (CWE-285)
4.3
First published (updated )
Adobe CommerceAdobe Commerce | Improper Authorization (CWE-285)
4.3
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Adobe CommerceA user without Shop Policy Parameters section privilege can alter the shop policy parameters section
4.3
First published (updated )
Adobe CommerceAn unauthorized user can export the Invoiced Sales Report
4.3
First published (updated )
Adobe CommerceBeing able to import/export tax rates without proper privileges
4.3
First published (updated )
Adobe CommerceAn unauthorized user can export the Tax Sales Report
4.3
First published (updated )
Adobe CommerceUnauthorized user can export Orders Sale Report
4.3
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.