Adobe

Commerce B2b

72 vulnerabilities found.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
8.1

CVE-2025-24411

  • EPSS 0.12%
  • Published 11.02.2025 18:15:42
  • Last modified 16.04.2025 17:18:03

Adobe Commerce versions 2.4.8-beta1, 2.4.7-p3, 2.4.6-p8, 2.4.5-p10, 2.4.4-p11 and earlier are affected by an Improper Access Control vulnerability that could result in a Security feature bypass. A low-privileged attacker could leverage this vulnerabi...

8.7

CVE-2025-24410

  • EPSS 0.12%
  • Published 11.02.2025 18:15:42
  • Last modified 16.04.2025 17:15:50

Adobe Commerce versions 2.4.8-beta1, 2.4.7-p3, 2.4.6-p8, 2.4.5-p10, 2.4.4-p11 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low-privileged attacker to inject malicious scripts into vulnerable ...

8.7

CVE-2025-24412

  • EPSS 0.12%
  • Published 11.02.2025 18:15:42
  • Last modified 16.04.2025 17:17:56

Adobe Commerce versions 2.4.8-beta1, 2.4.7-p3, 2.4.6-p8, 2.4.5-p10, 2.4.4-p11 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low-privileged attacker to inject malicious scripts into vulnerable ...

8.7

CVE-2025-24413

  • EPSS 0.12%
  • Published 11.02.2025 18:15:42
  • Last modified 16.04.2025 17:17:53

Adobe Commerce versions 2.4.8-beta1, 2.4.7-p3, 2.4.6-p8, 2.4.5-p10, 2.4.4-p11 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low-privileged attacker to inject malicious scripts into vulnerable ...

8.7

CVE-2025-24414

  • EPSS 0.12%
  • Published 11.02.2025 18:15:42
  • Last modified 16.04.2025 17:17:47

Adobe Commerce versions 2.4.8-beta1, 2.4.7-p3, 2.4.6-p8, 2.4.5-p10, 2.4.4-p11 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low-privileged attacker to inject malicious scripts into vulnerable ...

8.7

CVE-2025-24415

  • EPSS 0.12%
  • Published 11.02.2025 18:15:42
  • Last modified 16.04.2025 17:17:27

Adobe Commerce versions 2.4.8-beta1, 2.4.7-p3, 2.4.6-p8, 2.4.5-p10, 2.4.4-p11 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low-privileged attacker to inject malicious scripts into vulnerable ...

8.2

CVE-2025-24409

  • EPSS 0.16%
  • Published 11.02.2025 18:15:41
  • Last modified 16.04.2025 17:18:10

Adobe Commerce versions 2.4.8-beta1, 2.4.7-p3, 2.4.6-p8, 2.4.5-p10, 2.4.4-p11 and earlier are affected by an Incorrect Authorization vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to bypas...

6.5

CVE-2025-24408

  • EPSS 0.13%
  • Published 11.02.2025 18:15:41
  • Last modified 03.03.2025 15:52:41

Adobe Commerce versions 2.4.8-beta1, 2.4.7-p3, 2.4.6-p8, 2.4.5-p10, 2.4.4-p11 and earlier are affected by an Information Exposure vulnerability that could result in privilege escalation. A low-privileged attacker could gain unauthorized access to sen...

7.1

CVE-2025-24407

  • EPSS 0.1%
  • Published 11.02.2025 18:15:41
  • Last modified 16.04.2025 17:18:13

Adobe Commerce versions 2.4.8-beta1, 2.4.7-p3, 2.4.6-p8, 2.4.5-p10, 2.4.4-p11 and earlier are affected by an Incorrect Authorization vulnerability that could result in a security feature bypass. A low privileged attacker could exploit this vulnerabil...

7.5

CVE-2025-24406

  • EPSS 0.33%
  • Published 11.02.2025 18:15:41
  • Last modified 17.04.2025 16:09:35

Adobe Commerce versions 2.4.8-beta1, 2.4.7-p3, 2.4.6-p8, 2.4.5-p10, 2.4.4-p11 and earlier are affected by an Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability that could lead to a security feature bypass. An...