Filter
AND
Versions
2.4.4
98
2.4.4-p1
90
2.4.5
90
2.4.4-p2
88
2.4.5-p1
88
2.4.3
85
2.4.4-p3
84
2.4.5-p2
84
2.4.6
84
2.4.4-p4
72
2.4.5-p3
72
2.4.6-p1
72
2.4.4-p5
69
2.4.5-p4
69
2.4.5-p5
69
2.4.6-p2
69
2.3.7-p1
61
2.4.0
61
2.3.7-p2
60
2.4.4-p6
60
2.4.6-p3
60
2.3.7
59
2.3.7-p3
58
2.4.7-b1
54
2.4.2
53
2.4.2-ext-1
51
2.4.2-ext-2
51
2.4.3-ext-1
51
2.4.3-ext-2
51
2.3.7-p4
50
2.3.7-p4-ext1
50
2.3.7-p4-ext2
50
2.4.0-ext-1
50
2.4.0-ext-2
50
2.4.1
50
2.4.1-ext-1
50
2.4.1-ext-2
50
2.4.4-p8
46
2.4.5-p7
46
2.4.6-p5
46
2.4.7
46
2.4.4-p7
45
2.4.4-p9
45
2.4.5-p6
45
2.4.5-p8
45
2.4.6-p4
45
2.4.6-p6
45
2.4.7-b2
45
2.4.7-p1
45
2.4.2-ext-3
39
2.4.2-ext-4
39
2.4.3-ext-3
39
2.4.3-ext-4
39
2.3.7-p4-ext3
38
2.3.7-p4-ext4
38
2.4.0-ext-3
38
2.4.0-ext-4
38
2.4.1-ext-3
38
2.4.1-ext-4
38
2.4.3-p1
30
2.4.3-p2
28
2.4.4-p10
22
2.4.5-p9
22
2.4.6-p7
22
2.4.7-p2
22
2.4.2-p1
21
2.4.2-p2
21
2.3.0
7
2.3.6
1
2.4.2-ext-7
1
2.4.3-ext-7
1
Adobe CommerceAdobe Commerce and Magento Open Source Improper Input Validation Vulnerability
First published (updated )
Adobe CommerceAdobe Commerce Stored XSS Arbitrary code execution
10
First published (updated )
Adobe CommerceAdobe Commerce | Improper Access Control (CWE-284)
9.8
First published (updated )
Adobe CommerceAdobe Commerce and Magento Open Source Improper Restriction of XML External Entity Reference (XXE) Vulnerability
First published (updated )
Adobe CommerceAdobe Commerce | Improper Authentication (CWE-287)
9.8
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Adobe CommerceAdobe Commerce Improper Authorization Privilege escalation
9.8
First published (updated )
Adobe Commerce[Adobe Commerce] Stored XSS from low privileged admin user on every admin page, bypassing CVE-2023-29297
9.1
First published (updated )
Adobe CommerceCommand injection in data collector backup due to insufficient patching of CVE-2023-38208
9.1
First published (updated )
Adobe CommerceLarge attack surface through legit webhook usage in Adobe Commerce
9.1
First published (updated )
Adobe Magento Open SourceAdobe Commerce post-auth improper input validation leads to remote code execution
9.1
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Adobe CommerceAdobe Commerce XML Injection Arbitrary code execution
9.1
First published (updated )
Adobe CommerceOS Command Injection, Command Injection
9.1
EPSS
0.06%
First published (updated )
Adobe CommerceAdmin-to-admin stored XSS via cache poisoning
9.1
First published (updated )
Adobe CommerceAdobe Commerce | Unrestricted Upload of File with Dangerous Type (CWE-434)
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Adobe CommerceAdobe Commerce | Improper Authentication (CWE-287)
8.8
First published (updated )
Adobe CommerceAdobe Commerce Improper Limitation of a Pathname to a Restricted Directory Arbitrary code execution
8.8
First published (updated )
Adobe CommerceAdobe Commerce Improper Access Control Privilege escalation
8.8
First published (updated )
Adobe Commerce[CVE-2021-36032] Magento IDOR Leads to Account Takeover
8.8
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Adobe CommerceAdobe Commerce | Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') (CWE-78)
8.4
First published (updated )
Adobe CommerceAdobe Commerce | Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') (CWE-78)
8.4
First published (updated )
Adobe CommerceAdobe Commerce | Improper Authorization (CWE-285)
8.2
First published (updated )
Adobe CommerceCustomer account takeover via web API call & subsequent password reset
8.1
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Adobe CommerceDOM XSS through integrations can impact other admins
8.1
First published (updated )
Adobe CommerceAdobe Commerce | Cross-site Scripting (XSS) (CWE-79)
8.1
First published (updated )
Adobe CommerceAdobe Commerce | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') (CWE-89)
8
First published (updated )
Adobe CommerceAdobe Commerce | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') (CWE-89)
8
First published (updated )
Adobe CommerceAdobe Commerce | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') (CWE-89)
8
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.