Adobe

Magento

121 Schwachstellen gefunden.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
8.7

CVE-2025-24417

  • EPSS 0.12%
  • Veröffentlicht 11.02.2025 18:15:43
  • Zuletzt bearbeitet 16.04.2025 17:17:10

Adobe Commerce versions 2.4.8-beta1, 2.4.7-p3, 2.4.6-p8, 2.4.5-p10, 2.4.4-p11 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low-privileged attacker to inject malicious scripts into vulnerable ...

8.7

CVE-2025-24410

  • EPSS 0.12%
  • Veröffentlicht 11.02.2025 18:15:42
  • Zuletzt bearbeitet 16.04.2025 17:15:50

Adobe Commerce versions 2.4.8-beta1, 2.4.7-p3, 2.4.6-p8, 2.4.5-p10, 2.4.4-p11 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low-privileged attacker to inject malicious scripts into vulnerable ...

8.1

CVE-2025-24411

  • EPSS 0.12%
  • Veröffentlicht 11.02.2025 18:15:42
  • Zuletzt bearbeitet 16.04.2025 17:18:03

Adobe Commerce versions 2.4.8-beta1, 2.4.7-p3, 2.4.6-p8, 2.4.5-p10, 2.4.4-p11 and earlier are affected by an Improper Access Control vulnerability that could result in a Security feature bypass. A low-privileged attacker could leverage this vulnerabi...

8.7

CVE-2025-24412

  • EPSS 0.12%
  • Veröffentlicht 11.02.2025 18:15:42
  • Zuletzt bearbeitet 16.04.2025 17:17:56

Adobe Commerce versions 2.4.8-beta1, 2.4.7-p3, 2.4.6-p8, 2.4.5-p10, 2.4.4-p11 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low-privileged attacker to inject malicious scripts into vulnerable ...

8.7

CVE-2025-24413

  • EPSS 0.12%
  • Veröffentlicht 11.02.2025 18:15:42
  • Zuletzt bearbeitet 16.04.2025 17:17:53

Adobe Commerce versions 2.4.8-beta1, 2.4.7-p3, 2.4.6-p8, 2.4.5-p10, 2.4.4-p11 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low-privileged attacker to inject malicious scripts into vulnerable ...

8.7

CVE-2025-24414

  • EPSS 0.12%
  • Veröffentlicht 11.02.2025 18:15:42
  • Zuletzt bearbeitet 16.04.2025 17:17:47

Adobe Commerce versions 2.4.8-beta1, 2.4.7-p3, 2.4.6-p8, 2.4.5-p10, 2.4.4-p11 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low-privileged attacker to inject malicious scripts into vulnerable ...

8.7

CVE-2025-24415

  • EPSS 0.12%
  • Veröffentlicht 11.02.2025 18:15:42
  • Zuletzt bearbeitet 16.04.2025 17:17:27

Adobe Commerce versions 2.4.8-beta1, 2.4.7-p3, 2.4.6-p8, 2.4.5-p10, 2.4.4-p11 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low-privileged attacker to inject malicious scripts into vulnerable ...

7.5

CVE-2025-24406

  • EPSS 0.33%
  • Veröffentlicht 11.02.2025 18:15:41
  • Zuletzt bearbeitet 17.04.2025 16:09:35

Adobe Commerce versions 2.4.8-beta1, 2.4.7-p3, 2.4.6-p8, 2.4.5-p10, 2.4.4-p11 and earlier are affected by an Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability that could lead to a security feature bypass. An...

6.5

CVE-2025-24408

  • EPSS 0.13%
  • Veröffentlicht 11.02.2025 18:15:41
  • Zuletzt bearbeitet 03.03.2025 15:52:41

Adobe Commerce versions 2.4.8-beta1, 2.4.7-p3, 2.4.6-p8, 2.4.5-p10, 2.4.4-p11 and earlier are affected by an Information Exposure vulnerability that could result in privilege escalation. A low-privileged attacker could gain unauthorized access to sen...

8.2

CVE-2025-24409

  • EPSS 0.16%
  • Veröffentlicht 11.02.2025 18:15:41
  • Zuletzt bearbeitet 16.04.2025 17:18:10

Adobe Commerce versions 2.4.8-beta1, 2.4.7-p3, 2.4.6-p8, 2.4.5-p10, 2.4.4-p11 and earlier are affected by an Incorrect Authorization vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to bypas...