CVE-2024-49521
- EPSS 0.24%
- Published 12.11.2024 17:15:08
- Last modified 18.11.2024 18:44:32
Adobe Commerce versions 3.2.5 and earlier are affected by a Server-Side Request Forgery (SSRF) vulnerability that could lead to a security feature bypass. A low privileged attacker could exploit this vulnerability to send crafted requests from the vu...
CVE-2024-45149
- EPSS 0.15%
- Published 10.10.2024 10:15:08
- Last modified 12.12.2024 21:07:55
Adobe Commerce versions 2.4.7-p2, 2.4.6-p7, 2.4.5-p9, 2.4.4-p10 and earlier are affected by an Improper Access Control vulnerability that could result in a Security feature bypass. A high-privileged attacker could leverage this vulnerability to bypas...
CVE-2024-45132
- EPSS 0.16%
- Published 10.10.2024 10:15:07
- Last modified 14.10.2024 11:15:11
Adobe Commerce versions 2.4.7-p2, 2.4.6-p7, 2.4.5-p9, 2.4.4-p10 and earlier are affected by an Improper Authorization vulnerability that could result in Privilege escalation. A low-privileged attacker could leverage this vulnerability to bypass secur...
CVE-2024-45133
- EPSS 0.15%
- Published 10.10.2024 10:15:07
- Last modified 11.10.2024 22:12:17
Adobe Commerce versions 2.4.7-p2, 2.4.6-p7, 2.4.5-p9, 2.4.4-p10 and earlier are affected by an Information Exposure vulnerability that could result in a security feature bypass. An admin attacker could leverage this vulnerability to have a low impact...
CVE-2024-45134
- EPSS 0.36%
- Published 10.10.2024 10:15:07
- Last modified 11.10.2024 22:12:19
Adobe Commerce versions 2.4.7-p2, 2.4.6-p7, 2.4.5-p9, 2.4.4-p10 and earlier are affected by an Information Exposure vulnerability that could result in a security feature bypass. An admin attacker could leverage this vulnerability to have a low impact...
CVE-2024-45135
- EPSS 0.2%
- Published 10.10.2024 10:15:07
- Last modified 11.10.2024 22:12:21
Adobe Commerce versions 2.4.7-p2, 2.4.6-p7, 2.4.5-p9, 2.4.4-p10 and earlier are affected by an Improper Access Control vulnerability that could result in a Security feature bypass. An admin attacker could leverage this vulnerability to bypass securit...
CVE-2024-45148
- EPSS 0.36%
- Published 10.10.2024 10:15:07
- Last modified 16.10.2024 13:27:46
Adobe Commerce versions 2.4.7-p2, 2.4.6-p7, 2.4.5-p9, 2.4.4-p10 and earlier are affected by an Improper Authentication vulnerability that could result in a security feature bypass. A low-privileged attacker could leverage this vulnerability to gain u...
CVE-2024-45127
- EPSS 0.38%
- Published 10.10.2024 10:15:06
- Last modified 11.10.2024 22:06:10
Adobe Commerce versions 2.4.7-p2, 2.4.6-p7, 2.4.5-p9, 2.4.4-p10 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by an admin attacker to inject malicious scripts into vulnerable form fields. Malicious...
CVE-2024-45128
- EPSS 0.16%
- Published 10.10.2024 10:15:06
- Last modified 14.10.2024 11:15:10
Adobe Commerce versions 2.4.7-p2, 2.4.6-p7, 2.4.5-p9, 2.4.4-p10 and earlier are affected by an Improper Authorization vulnerability that could result in a Security feature bypass. A low-privileged attacker could leverage this vulnerability to bypass ...
CVE-2024-45129
- EPSS 0.12%
- Published 10.10.2024 10:15:06
- Last modified 11.10.2024 22:09:06
Adobe Commerce versions 2.4.7-p2, 2.4.6-p7, 2.4.5-p9, 2.4.4-p10 and earlier are affected by an Improper Access Control vulnerability that could result in Privilege escalation. A low-privileged attacker could leverage this vulnerability to bypass secu...