Filter
AND
AND
Adobe CommerceValidate Your Inputs | Server-Side Request Forgery (SSRF) (CWE-918)
6.8
First published (updated )
Adobe Commerce[Spain] CSRF to delete Requisition Lists at Adobe Commerce
6.5
First published (updated )
Adobe CommerceAdobe Commerce | Incorrect Authorization (CWE-863)
6.5
First published (updated )
Adobe CommerceAdobe Commerce | Improper Access Control (CWE-284)
6.5
First published (updated )
Adobe CommerceAdobe Commerce versions 2.4.6-p1 (and earlier), 2.4.5-p3 (and earlier) and 2.4.4-p4 (and earlier) ar…
6.5
EPSS
0.05%
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Adobe CommerceAdobe Commerce versions 2.4.6 (and earlier), 2.4.5-p2 (and earlier) and 2.4.4-p3 (and earlier) are a…
6.5
First published (updated )
Adobe CommerceAdobe Commerce | Cross-Site Request Forgery (CSRF) (CWE-352)
6.3
First published (updated )
Adobe CommerceAdobe Commerce | Cross-Site Request Forgery (CSRF) (CWE-352)
6.3
First published (updated )
Adobe CommerceAdobe Commerce | Cross-site Scripting (Reflected XSS) (CWE-79)
6.1
First published (updated )
Adobe CommerceAdobe Commerce | Cross-Site Request Forgery (CSRF) (CWE-352)
5.5
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Adobe CommerceStored admin XSS via PayPal authentication certificate
5.4
First published (updated )
Adobe CommerceAdobe Commerce | Improper Authorization (CWE-285)
5.4
First published (updated )
Adobe CommerceAdobe Commerce | Incorrect Authorization (CWE-863)
5.4
First published (updated )
Adobe CommerceAdobe Commerce | Incorrect Authorization (CWE-863)
5.4
First published (updated )
Adobe CommerceInsecure Direct Object Reference - An attacker can able to erase the victim quote details
5.3
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Adobe CommerceAdobe Commerce | Improper Access Control (CWE-284)
5.3
First published (updated )
Adobe CommerceAdobe Commerce | Uncontrolled Resource Consumption (CWE-400)
5.3
First published (updated )
Adobe CommerceAdobe Commerce Guest Cart Shipping Address Overwrite IDOR
5.3
First published (updated )
Adobe CommerceForce high-usage of resources by generating unlimited coupons: Adobe Commerce
4.9
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Adobe CommerceAdobe Commerce | Server-Side Request Forgery (SSRF) (CWE-918)
4.9
First published (updated )
Adobe CommerceError based file extraction via PHP filter chains during product bulk import logic
4.9
First published (updated )
Adobe CommerceServer Side Request Forgery (SSRF) in USPS carrier integration configuration
4.9
First published (updated )
Adobe CommerceServer Side Request Forgery (SSRF) in FedEx carrier integration configuration
4.9
First published (updated )
Adobe CommerceStored Cross Site Scripting in Order Comment
4.8
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Adobe CommerceAdobe Commerce | Cross-site Scripting (Stored XSS) (CWE-79)
4.8
First published (updated )
Adobe CommerceAdobe Commerce | Improper Authorization (CWE-285)
4.3
First published (updated )
Adobe CommerceA user without ship permissions can ship the orders
4.3
First published (updated )
Adobe CommerceAn unauthorized user can export the Tax Sales Report
4.3
First published (updated )
Adobe CommerceBeing able to import/export tax rates without proper privileges
4.3
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.