CVE-2025-24425
- EPSS 0.27%
- Veröffentlicht 11.02.2025 18:15:44
- Zuletzt bearbeitet 03.03.2025 15:52:41
Adobe Commerce versions 2.4.8-beta1, 2.4.7-p3, 2.4.6-p8, 2.4.5-p10, 2.4.4-p11 and earlier are affected by a Business Logic Error vulnerability that could result in a security feature bypass. An attacker could exploit this vulnerability to circumvent ...
CVE-2025-24424
- EPSS 0.11%
- Veröffentlicht 11.02.2025 18:15:44
- Zuletzt bearbeitet 16.04.2025 17:16:10
Adobe Commerce versions 2.4.8-beta1, 2.4.7-p3, 2.4.6-p8, 2.4.5-p10, 2.4.4-p11 and earlier are affected by an Improper Access Control vulnerability that could result in a Security feature bypass. A low-privileged attacker could leverage this vulnerabi...
CVE-2025-24423
- EPSS 0.08%
- Veröffentlicht 11.02.2025 18:15:44
- Zuletzt bearbeitet 16.04.2025 17:16:37
Adobe Commerce versions 2.4.8-beta1, 2.4.7-p3, 2.4.6-p8, 2.4.5-p10, 2.4.4-p11 and earlier are affected by an Improper Access Control vulnerability that could result in Privilege escalation. A low-privileged attacker could leverage this vulnerability ...
CVE-2025-24422
- EPSS 0.11%
- Veröffentlicht 11.02.2025 18:15:44
- Zuletzt bearbeitet 16.04.2025 17:16:43
Adobe Commerce versions 2.4.8-beta1, 2.4.7-p3, 2.4.6-p8, 2.4.5-p10, 2.4.4-p11 and earlier are affected by an Improper Access Control vulnerability that could result in a Security feature bypass. A low-privileged attacker could leverage this vulnerabi...
CVE-2025-24421
- EPSS 0.06%
- Veröffentlicht 11.02.2025 18:15:44
- Zuletzt bearbeitet 17.04.2025 15:44:51
Adobe Commerce versions 2.4.8-beta1, 2.4.7-p3, 2.4.6-p8, 2.4.5-p10, 2.4.4-p11 and earlier are affected by an Incorrect Authorization vulnerability that could result in a security feature bypass. A low-privileged attacker could exploit this vulnerabil...
CVE-2025-24420
- EPSS 0.08%
- Veröffentlicht 11.02.2025 18:15:43
- Zuletzt bearbeitet 16.04.2025 17:16:51
Adobe Commerce versions 2.4.8-beta1, 2.4.7-p3, 2.4.6-p8, 2.4.5-p10, 2.4.4-p11 and earlier are affected by an Incorrect Authorization vulnerability that could result in a security feature bypass. A low-privileged attacker could exploit this vulnerabil...
CVE-2025-24419
- EPSS 0.08%
- Veröffentlicht 11.02.2025 18:15:43
- Zuletzt bearbeitet 16.04.2025 17:17:01
Adobe Commerce versions 2.4.8-beta1, 2.4.7-p3, 2.4.6-p8, 2.4.5-p10, 2.4.4-p11 and earlier are affected by an Incorrect Authorization vulnerability that could result in a security feature bypass. A low-privileged attacker could exploit this vulnerabil...
CVE-2025-24418
- EPSS 0.14%
- Veröffentlicht 11.02.2025 18:15:43
- Zuletzt bearbeitet 03.03.2025 15:52:41
Adobe Commerce versions 2.4.8-beta1, 2.4.7-p3, 2.4.6-p8, 2.4.5-p10, 2.4.4-p11 and earlier are affected by an Improper Authorization vulnerability that could result in Privilege escalation. A low-privileged attacker could leverage this vulnerability t...
CVE-2025-24417
- EPSS 0.12%
- Veröffentlicht 11.02.2025 18:15:43
- Zuletzt bearbeitet 16.04.2025 17:17:10
Adobe Commerce versions 2.4.8-beta1, 2.4.7-p3, 2.4.6-p8, 2.4.5-p10, 2.4.4-p11 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low-privileged attacker to inject malicious scripts into vulnerable ...
CVE-2025-24416
- EPSS 0.12%
- Veröffentlicht 11.02.2025 18:15:43
- Zuletzt bearbeitet 16.04.2025 17:17:20
Adobe Commerce versions 2.4.8-beta1, 2.4.7-p3, 2.4.6-p8, 2.4.5-p10, 2.4.4-p11 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low-privileged attacker to inject malicious scripts into vulnerable ...