Filter
AND
AND
Adobe CommerceAdobe Commerce | Improper Access Control (CWE-284)
9.8
First published (updated )
Adobe CommerceAdobe Commerce and Magento Open Source Improper Restriction of XML External Entity Reference (XXE) Vulnerability
First published (updated )
Adobe CommerceAdobe Commerce | Improper Authentication (CWE-287)
9.8
First published (updated )
Adobe CommerceLarge attack surface through legit webhook usage in Adobe Commerce
9.1
First published (updated )
Adobe CommerceAdmin-to-admin stored XSS via cache poisoning
9.1
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Adobe CommerceAdobe Commerce | Improper Authentication (CWE-287)
8.8
First published (updated )
Adobe CommerceAdobe Commerce | Improper Authorization (CWE-285)
8.2
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Adobe CommerceCustomer account takeover via web API call & subsequent password reset
8.1
First published (updated )
Adobe CommerceAdobe Commerce | Cross-site Scripting (XSS) (CWE-79)
8.1
First published (updated )
Adobe CommerceAdobe Commerce | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') (CWE-89)
8
First published (updated )
Adobe CommerceAdobe Commerce | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') (CWE-89)
8
First published (updated )
Adobe CommerceAdobe Commerce | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') (CWE-89)
8
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Adobe CommerceAdobe Commerce | Improper Input Validation (CWE-20)
7.6
First published (updated )
Adobe CommerceAdobe Commerce versions 2.4.7-beta1 (and earlier), 2.4.6-p2 (and earlier), 2.4.5-p4 (and earlier) an…
7.5
First published (updated )
Adobe CommerceAdobe Commerce Incorrect Authorization Security feature bypass
7.5
First published (updated )
Adobe CommerceRCE in the Adobe Commerce Webhook module through a legit webhook definition
7.2
First published (updated )
Adobe CommerceAdobe Commerce | Improper Input Validation (CWE-20)
7.2
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Adobe CommerceValidate Your Inputs | Server-Side Request Forgery (SSRF) (CWE-918)
6.8
First published (updated )
Adobe CommerceAdobe Commerce | Incorrect Authorization (CWE-863)
6.5
First published (updated )
Adobe CommerceAdobe Commerce | Improper Access Control (CWE-284)
6.5
First published (updated )
Adobe CommerceAdobe Commerce versions 2.4.6 (and earlier), 2.4.5-p2 (and earlier) and 2.4.4-p3 (and earlier) are a…
6.5
First published (updated )
Adobe CommerceAdobe Commerce | Cross-site Scripting (Reflected XSS) (CWE-79)
6.1
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Adobe CommerceAdobe Commerce | Incorrect Authorization (CWE-863)
5.4
First published (updated )
Adobe CommerceAdobe Commerce | Incorrect Authorization (CWE-863)
5.4
First published (updated )
Adobe CommerceInsecure Direct Object Reference - An attacker can able to erase the victim quote details
5.3
First published (updated )
Adobe CommerceAdobe Commerce | Improper Access Control (CWE-284)
5.3
First published (updated )
Adobe CommerceAdobe Commerce | Uncontrolled Resource Consumption (CWE-400)
5.3
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.