Adobe

Commerce B2b

77 Schwachstellen gefunden.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
4.3

CVE-2025-24420

  • EPSS 0.15%
  • Veröffentlicht 11.02.2025 18:15:43
  • Zuletzt bearbeitet 16.04.2025 17:16:51

Adobe Commerce versions 2.4.8-beta1, 2.4.7-p3, 2.4.6-p8, 2.4.5-p10, 2.4.4-p11 and earlier are affected by an Incorrect Authorization vulnerability that could result in a security feature bypass. A low-privileged attacker could exploit this vulnerabil...

4.3

CVE-2025-24419

  • EPSS 0.15%
  • Veröffentlicht 11.02.2025 18:15:43
  • Zuletzt bearbeitet 16.04.2025 17:17:01

Adobe Commerce versions 2.4.8-beta1, 2.4.7-p3, 2.4.6-p8, 2.4.5-p10, 2.4.4-p11 and earlier are affected by an Incorrect Authorization vulnerability that could result in a security feature bypass. A low-privileged attacker could exploit this vulnerabil...

8.1

CVE-2025-24418

  • EPSS 0.25%
  • Veröffentlicht 11.02.2025 18:15:43
  • Zuletzt bearbeitet 03.03.2025 15:52:41

Adobe Commerce versions 2.4.8-beta1, 2.4.7-p3, 2.4.6-p8, 2.4.5-p10, 2.4.4-p11 and earlier are affected by an Improper Authorization vulnerability that could result in Privilege escalation. A low-privileged attacker could leverage this vulnerability t...

8.7

CVE-2025-24417

  • EPSS 0.35%
  • Veröffentlicht 11.02.2025 18:15:43
  • Zuletzt bearbeitet 16.04.2025 17:17:10

Adobe Commerce versions 2.4.8-beta1, 2.4.7-p3, 2.4.6-p8, 2.4.5-p10, 2.4.4-p11 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low-privileged attacker to inject malicious scripts into vulnerable ...

8.7

CVE-2025-24416

  • EPSS 0.35%
  • Veröffentlicht 11.02.2025 18:15:43
  • Zuletzt bearbeitet 16.04.2025 17:17:20

Adobe Commerce versions 2.4.8-beta1, 2.4.7-p3, 2.4.6-p8, 2.4.5-p10, 2.4.4-p11 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low-privileged attacker to inject malicious scripts into vulnerable ...

8.7

CVE-2025-24412

  • EPSS 0.35%
  • Veröffentlicht 11.02.2025 18:15:42
  • Zuletzt bearbeitet 16.04.2025 17:17:56

Adobe Commerce versions 2.4.8-beta1, 2.4.7-p3, 2.4.6-p8, 2.4.5-p10, 2.4.4-p11 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low-privileged attacker to inject malicious scripts into vulnerable ...

8.7

CVE-2025-24410

  • EPSS 0.35%
  • Veröffentlicht 11.02.2025 18:15:42
  • Zuletzt bearbeitet 16.04.2025 17:15:50

Adobe Commerce versions 2.4.8-beta1, 2.4.7-p3, 2.4.6-p8, 2.4.5-p10, 2.4.4-p11 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low-privileged attacker to inject malicious scripts into vulnerable ...

8.1

CVE-2025-24411

  • EPSS 0.25%
  • Veröffentlicht 11.02.2025 18:15:42
  • Zuletzt bearbeitet 16.04.2025 17:18:03

Adobe Commerce versions 2.4.8-beta1, 2.4.7-p3, 2.4.6-p8, 2.4.5-p10, 2.4.4-p11 and earlier are affected by an Improper Access Control vulnerability that could result in a Security feature bypass. A low-privileged attacker could leverage this vulnerabi...

8.7

CVE-2025-24413

  • EPSS 0.35%
  • Veröffentlicht 11.02.2025 18:15:42
  • Zuletzt bearbeitet 16.04.2025 17:17:53

Adobe Commerce versions 2.4.8-beta1, 2.4.7-p3, 2.4.6-p8, 2.4.5-p10, 2.4.4-p11 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low-privileged attacker to inject malicious scripts into vulnerable ...

8.7

CVE-2025-24414

  • EPSS 0.35%
  • Veröffentlicht 11.02.2025 18:15:42
  • Zuletzt bearbeitet 16.04.2025 17:17:47

Adobe Commerce versions 2.4.8-beta1, 2.4.7-p3, 2.4.6-p8, 2.4.5-p10, 2.4.4-p11 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low-privileged attacker to inject malicious scripts into vulnerable ...