CVE-2025-24430
- EPSS 0.28%
- Veröffentlicht 11.02.2025 18:15:45
- Zuletzt bearbeitet 16.04.2025 14:25:10
Adobe Commerce versions 2.4.8-beta1, 2.4.7-p3, 2.4.6-p8, 2.4.5-p10, 2.4.4-p11 and earlier are affected by a Time-of-check Time-of-use (TOCTOU) Race Condition vulnerability that could result in a security feature bypass. An attacker could exploit this...
CVE-2025-24429
- EPSS 0.13%
- Veröffentlicht 11.02.2025 18:15:45
- Zuletzt bearbeitet 16.04.2025 14:27:27
Adobe Commerce versions 2.4.8-beta1, 2.4.7-p3, 2.4.6-p8, 2.4.5-p10, 2.4.4-p11 and earlier are affected by an Improper Access Control vulnerability that could result in a Security feature bypass allowing read only access. A low-privileged attacker cou...
CVE-2025-24428
- EPSS 0.24%
- Veröffentlicht 11.02.2025 18:15:45
- Zuletzt bearbeitet 03.03.2025 15:31:07
Adobe Commerce versions 2.4.8-beta1, 2.4.7-p3, 2.4.6-p8, 2.4.5-p10, 2.4.4-p11 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low-privileged attacker to inject malicious scripts into vulnerable ...
CVE-2025-24427
- EPSS 0.15%
- Veröffentlicht 11.02.2025 18:15:45
- Zuletzt bearbeitet 17.04.2025 15:44:59
Adobe Commerce versions 2.4.8-beta1, 2.4.7-p3, 2.4.6-p8, 2.4.5-p10, 2.4.4-p11 and earlier are affected by an Improper Access Control vulnerability that could result in a Security feature bypass. A low-privileged attacker could leverage this vulnerabi...
CVE-2025-24426
- EPSS 0.21%
- Veröffentlicht 11.02.2025 18:15:45
- Zuletzt bearbeitet 16.04.2025 17:16:04
Adobe Commerce versions 2.4.8-beta1, 2.4.7-p3, 2.4.6-p8, 2.4.5-p10, 2.4.4-p11 and earlier are affected by an Improper Access Control vulnerability that could result in a Security feature bypass. A low-privileged attacker could leverage this vulnerabi...
CVE-2025-24423
- EPSS 0.15%
- Veröffentlicht 11.02.2025 18:15:44
- Zuletzt bearbeitet 16.04.2025 17:16:37
Adobe Commerce versions 2.4.8-beta1, 2.4.7-p3, 2.4.6-p8, 2.4.5-p10, 2.4.4-p11 and earlier are affected by an Improper Access Control vulnerability that could result in Privilege escalation. A low-privileged attacker could leverage this vulnerability ...
CVE-2025-24424
- EPSS 0.24%
- Veröffentlicht 11.02.2025 18:15:44
- Zuletzt bearbeitet 16.04.2025 17:16:10
Adobe Commerce versions 2.4.8-beta1, 2.4.7-p3, 2.4.6-p8, 2.4.5-p10, 2.4.4-p11 and earlier are affected by an Improper Access Control vulnerability that could result in a Security feature bypass. A low-privileged attacker could leverage this vulnerabi...
CVE-2025-24425
- EPSS 0.74%
- Veröffentlicht 11.02.2025 18:15:44
- Zuletzt bearbeitet 03.03.2025 15:52:41
Adobe Commerce versions 2.4.8-beta1, 2.4.7-p3, 2.4.6-p8, 2.4.5-p10, 2.4.4-p11 and earlier are affected by a Business Logic Error vulnerability that could result in a security feature bypass. An attacker could exploit this vulnerability to circumvent ...
CVE-2025-24422
- EPSS 0.21%
- Veröffentlicht 11.02.2025 18:15:44
- Zuletzt bearbeitet 16.04.2025 17:16:43
Adobe Commerce versions 2.4.8-beta1, 2.4.7-p3, 2.4.6-p8, 2.4.5-p10, 2.4.4-p11 and earlier are affected by an Improper Access Control vulnerability that could result in a Security feature bypass. A low-privileged attacker could leverage this vulnerabi...
CVE-2025-24421
- EPSS 0.12%
- Veröffentlicht 11.02.2025 18:15:44
- Zuletzt bearbeitet 17.04.2025 15:44:51
Adobe Commerce versions 2.4.8-beta1, 2.4.7-p3, 2.4.6-p8, 2.4.5-p10, 2.4.4-p11 and earlier are affected by an Incorrect Authorization vulnerability that could result in a security feature bypass. A low-privileged attacker could exploit this vulnerabil...