CVE-2025-43585
- EPSS 0.09%
- Veröffentlicht 10.06.2025 16:15:40
- Zuletzt bearbeitet 23.06.2025 19:22:41
Adobe Commerce versions 2.4.8, 2.4.7-p5, 2.4.6-p10, 2.4.5-p12, 2.4.4-p13 and earlier are affected by an Improper Authorization vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to bypass secur...
CVE-2025-43586
- EPSS 0.08%
- Veröffentlicht 10.06.2025 16:15:40
- Zuletzt bearbeitet 23.06.2025 19:22:26
Adobe Commerce versions 2.4.8, 2.4.7-p5, 2.4.6-p10, 2.4.5-p12, 2.4.4-p13 and earlier are affected by an Improper Access Control vulnerability that could result in privilege escalation. A low privileged attacker could leverage this vulnerability to by...
CVE-2025-27206
- EPSS 0.11%
- Veröffentlicht 10.06.2025 16:15:36
- Zuletzt bearbeitet 23.06.2025 19:25:38
Adobe Commerce versions 2.4.8, 2.4.7-p5, 2.4.6-p10, 2.4.5-p12, 2.4.4-p13 and earlier are affected by an Improper Access Control vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to bypass secu...
CVE-2025-27190
- EPSS 0.12%
- Veröffentlicht 08.04.2025 20:17:12
- Zuletzt bearbeitet 23.06.2025 19:30:03
Adobe Commerce versions 2.4.7-p4, 2.4.6-p9, 2.4.5-p11, 2.4.4-p12, 2.4.8-beta2 and earlier are affected by an Improper Access Control vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to bypass...
CVE-2025-27191
- EPSS 0.12%
- Veröffentlicht 08.04.2025 20:17:11
- Zuletzt bearbeitet 20.05.2025 14:30:41
Adobe Commerce versions 2.4.7-p4, 2.4.6-p9, 2.4.5-p11, 2.4.4-p12, 2.4.8-beta2 and earlier are affected by an Improper Access Control vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to bypass...
CVE-2025-27192
- EPSS 0.08%
- Veröffentlicht 08.04.2025 20:17:10
- Zuletzt bearbeitet 20.05.2025 14:03:00
Adobe Commerce versions 2.4.7-p4, 2.4.6-p9, 2.4.5-p11, 2.4.4-p12, 2.4.8-beta2 and earlier are affected by an Insufficiently Protected Credentials vulnerability that could lead to a security feature bypass. A high privileged attacker could exploit thi...
CVE-2025-27188
- EPSS 0.07%
- Veröffentlicht 08.04.2025 20:17:09
- Zuletzt bearbeitet 01.05.2025 20:00:44
Adobe Commerce versions 2.4.7-p4, 2.4.6-p9, 2.4.5-p11, 2.4.4-p12, 2.4.8-beta2 and earlier are affected by an Improper Authorization vulnerability that could result in Privilege escalation. An attacker could leverage this vulnerability to bypass secur...
CVE-2025-24434
- EPSS 0.29%
- Veröffentlicht 11.02.2025 18:15:46
- Zuletzt bearbeitet 16.04.2025 14:22:46
Adobe Commerce versions 2.4.8-beta1, 2.4.7-p3, 2.4.6-p8, 2.4.5-p10, 2.4.4-p11 and earlier are affected by an Incorrect Authorization vulnerability that could result in Privilege escalation. An attacker could leverage this vulnerability to bypass secu...
CVE-2025-24435
- EPSS 0.09%
- Veröffentlicht 11.02.2025 18:15:46
- Zuletzt bearbeitet 27.02.2025 21:15:41
Adobe Commerce versions 2.4.8-beta1, 2.4.7-p3, 2.4.6-p8, 2.4.5-p10, 2.4.4-p11 and earlier are affected by an Improper Access Control vulnerability that could result in Privilege escalation. A low-privileged attacker could leverage this vulnerability ...
CVE-2025-24436
- EPSS 0.06%
- Veröffentlicht 11.02.2025 18:15:46
- Zuletzt bearbeitet 16.04.2025 14:53:10
Adobe Commerce versions 2.4.7-p3, 2.4.6-p8, 2.4.5-p10, 2.4.4-p11, 2.4.8-beta1 and earlier are affected by an Incorrect Authorization vulnerability that could result in a security feature bypass. A low-privileged attacker could exploit this vulnerabil...