Filter
AND
AND
Adobe Magento CommerceAdobe Commerce | Time-of-check Time-of-use (TOCTOU) Race Condition (CWE-367)
4.3
First published (updated )
Adobe Magento CommerceAdobe Commerce | Incorrect Authorization (CWE-863)
6.5
First published (updated )
Adobe Magento CommerceAdobe Commerce | Incorrect Authorization (CWE-863)
5.4
First published (updated )
Adobe Magento CommerceAdobe Commerce | Incorrect Authorization (CWE-863)
5.4
First published (updated )
Adobe Magento CommerceAdobe Commerce | Improper Access Control (CWE-284)
4.3
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Adobe Magento CommerceAdobe Commerce | Improper Access Control (CWE-284)
4.3
First published (updated )
Adobe Magento CommerceAdobe Commerce | Cross-site Scripting (Stored XSS) (CWE-79)
4.8
First published (updated )
Adobe Magento CommerceAdobe Commerce | Incorrect Authorization (CWE-863)
4.3
First published (updated )
Adobe Magento CommerceAdobe Commerce | Improper Access Control (CWE-284)
5.3
First published (updated )
Adobe Magento CommerceAdobe Commerce | Improper Access Control (CWE-284)
4.3
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Adobe Magento CommerceAdobe Commerce | Improper Access Control (CWE-284)
6.5
First published (updated )
Adobe Magento CommerceAdobe Commerce | Improper Access Control (CWE-284)
4.3
First published (updated )
Adobe Magento CommerceAdobe Commerce | Cross-site Scripting (Reflected XSS) (CWE-79)
6.1
First published (updated )
Adobe Magento CommerceAdobe Commerce | Incorrect Authorization (CWE-863)
4.3
First published (updated )
Adobe Magento CommerceAdobe Commerce | Uncontrolled Resource Consumption (CWE-400)
5.3
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Adobe Magento CommerceAdobe Commerce Improper Access Control Security feature bypass
5.3
First published (updated )
Adobe Magento CommerceAdobe Commerce Stored XSS Arbitrary code execution
6.1
First published (updated )
Adobe Magento CommerceAdobe Commerce Improper Access Control Security feature bypass
5.3
First published (updated )
Adobe Magento CommerceMagento Commerce Insecure Direct Object Reference Vulnerability Could Lead To Sensitive Information Disclosure
5.3
First published (updated )
Adobe Magento CommerceAdobe Commerce Stored XSS Arbitrary code execution
5.5
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Adobe Magento CommerceInsecure Direct Object Reference - An attacker can able to erase the victim quote details
5.3
First published (updated )
Adobe Magento CommerceStored Cross Site Scripting in Order Comment
4.8
First published (updated )
Adobe Magento CommerceInsecure Direct Object Reference (IDOR) in Create Quote Function
4.3
First published (updated )
Adobe Magento CommerceAdobe Commerce Guest Cart Shipping Address Overwrite IDOR
5.3
First published (updated )
Adobe Magento CommerceBypass Purchase Order Approval using Company User in Adobe Commerce B2B
4.3
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Adobe Magento Commerce[Cloud] Customer suspects IDOR vulnerability
4.3
First published (updated )
Adobe Magento CommerceServer Side Request Forgery (SSRF) in USPS carrier integration configuration
4.9
First published (updated )
Adobe Magento CommerceServer Side Request Forgery (SSRF) in FedEx carrier integration configuration
4.9
First published (updated )
Adobe Magento CommerceError based file extraction via PHP filter chains during product bulk import logic
4.9
First published (updated )
Adobe Magento CommerceValidate Your Inputs | Server-Side Request Forgery (SSRF) (CWE-918)
6.8
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.