CVE-2025-27192
- EPSS 0.08%
- Veröffentlicht 08.04.2025 20:17:10
- Zuletzt bearbeitet 20.05.2025 14:03:00
Adobe Commerce versions 2.4.7-p4, 2.4.6-p9, 2.4.5-p11, 2.4.4-p12, 2.4.8-beta2 and earlier are affected by an Insufficiently Protected Credentials vulnerability that could lead to a security feature bypass. A high privileged attacker could exploit thi...
CVE-2025-27188
- EPSS 0.07%
- Veröffentlicht 08.04.2025 20:17:09
- Zuletzt bearbeitet 01.05.2025 20:00:44
Adobe Commerce versions 2.4.7-p4, 2.4.6-p9, 2.4.5-p11, 2.4.4-p12, 2.4.8-beta2 and earlier are affected by an Improper Authorization vulnerability that could result in Privilege escalation. An attacker could leverage this vulnerability to bypass secur...
CVE-2025-24434
- EPSS 0.61%
- Veröffentlicht 11.02.2025 18:15:46
- Zuletzt bearbeitet 16.04.2025 14:22:46
Adobe Commerce versions 2.4.8-beta1, 2.4.7-p3, 2.4.6-p8, 2.4.5-p10, 2.4.4-p11 and earlier are affected by an Incorrect Authorization vulnerability that could result in Privilege escalation. An attacker could leverage this vulnerability to bypass secu...
CVE-2025-24435
- EPSS 0.18%
- Veröffentlicht 11.02.2025 18:15:46
- Zuletzt bearbeitet 27.02.2025 21:15:41
Adobe Commerce versions 2.4.8-beta1, 2.4.7-p3, 2.4.6-p8, 2.4.5-p10, 2.4.4-p11 and earlier are affected by an Improper Access Control vulnerability that could result in Privilege escalation. A low-privileged attacker could leverage this vulnerability ...
CVE-2025-24436
- EPSS 0.12%
- Veröffentlicht 11.02.2025 18:15:46
- Zuletzt bearbeitet 16.04.2025 14:53:10
Adobe Commerce versions 2.4.7-p3, 2.4.6-p8, 2.4.5-p10, 2.4.4-p11, 2.4.8-beta1 and earlier are affected by an Incorrect Authorization vulnerability that could result in a security feature bypass. A low-privileged attacker could exploit this vulnerabil...
CVE-2025-24437
- EPSS 0.12%
- Veröffentlicht 11.02.2025 18:15:46
- Zuletzt bearbeitet 16.04.2025 14:21:51
Adobe Commerce versions 2.4.7-p3, 2.4.6-p8, 2.4.5-p10, 2.4.4-p11, 2.4.8-beta1 and earlier are affected by an Incorrect Authorization vulnerability that could result in a security feature bypass. A low-privileged attacker could exploit this vulnerabil...
CVE-2025-24438
- EPSS 0.35%
- Veröffentlicht 11.02.2025 18:15:46
- Zuletzt bearbeitet 27.02.2025 21:15:41
Adobe Commerce versions 2.4.8-beta1, 2.4.7-p3, 2.4.6-p8, 2.4.5-p10, 2.4.4-p11 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low-privileged attacker to inject malicious scripts into vulnerable ...
CVE-2025-24427
- EPSS 0.15%
- Veröffentlicht 11.02.2025 18:15:45
- Zuletzt bearbeitet 17.04.2025 15:44:59
Adobe Commerce versions 2.4.8-beta1, 2.4.7-p3, 2.4.6-p8, 2.4.5-p10, 2.4.4-p11 and earlier are affected by an Improper Access Control vulnerability that could result in a Security feature bypass. A low-privileged attacker could leverage this vulnerabi...
CVE-2025-24428
- EPSS 0.24%
- Veröffentlicht 11.02.2025 18:15:45
- Zuletzt bearbeitet 03.03.2025 15:31:07
Adobe Commerce versions 2.4.8-beta1, 2.4.7-p3, 2.4.6-p8, 2.4.5-p10, 2.4.4-p11 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low-privileged attacker to inject malicious scripts into vulnerable ...
CVE-2025-24429
- EPSS 0.13%
- Veröffentlicht 11.02.2025 18:15:45
- Zuletzt bearbeitet 16.04.2025 14:27:27
Adobe Commerce versions 2.4.8-beta1, 2.4.7-p3, 2.4.6-p8, 2.4.5-p10, 2.4.4-p11 and earlier are affected by an Improper Access Control vulnerability that could result in a Security feature bypass allowing read only access. A low-privileged attacker cou...