CVE-2023-29295
- EPSS 0.1%
- Veröffentlicht 15.06.2023 19:15:11
- Zuletzt bearbeitet 21.11.2024 07:56:48
Adobe Commerce versions 2.4.6 (and earlier), 2.4.5-p2 (and earlier) and 2.4.4-p3 (and earlier) are affected by an Incorrect Authorization vulnerability that could result in a security feature bypass. A low-privileged attacker could leverage this vuln...
CVE-2023-29296
- EPSS 0.1%
- Veröffentlicht 15.06.2023 19:15:11
- Zuletzt bearbeitet 21.11.2024 07:56:49
Adobe Commerce versions 2.4.6 (and earlier), 2.4.5-p2 (and earlier) and 2.4.4-p3 (and earlier) are affected by an Incorrect Authorization vulnerability that could result in a security feature bypass. A low-privileged attacker could leverage this vuln...
CVE-2023-29297
- EPSS 6.2%
- Veröffentlicht 15.06.2023 19:15:11
- Zuletzt bearbeitet 21.11.2024 07:56:49
Adobe Commerce versions 2.4.6 (and earlier), 2.4.5-p2 (and earlier) and 2.4.4-p3 (and earlier) are affected by a Improper Neutralization of Special Elements Used in a Template Engine vulnerability that could lead to arbitrary code execution by an adm...
CVE-2023-22248
- EPSS 0.15%
- Veröffentlicht 15.06.2023 19:15:10
- Zuletzt bearbeitet 21.11.2024 07:44:23
Adobe Commerce versions 2.4.6 (and earlier), 2.4.5-p2 (and earlier) and 2.4.4-p3 (and earlier) are affected by an Incorrect Authorization vulnerability that could result in a security feature bypass. An attacker could leverage this vulnerability to l...
CVE-2023-29287
- EPSS 0.26%
- Veröffentlicht 15.06.2023 19:15:10
- Zuletzt bearbeitet 21.11.2024 07:56:48
Adobe Commerce versions 2.4.6 (and earlier), 2.4.5-p2 (and earlier) and 2.4.4-p3 (and earlier) are affected by an Information Exposure vulnerability that could lead to a security feature bypass. An attacker could leverage this vulnerability to leak m...
CVE-2023-29288
- EPSS 0.18%
- Veröffentlicht 15.06.2023 19:15:10
- Zuletzt bearbeitet 21.11.2024 07:56:48
Adobe Commerce versions 2.4.6 (and earlier), 2.4.5-p2 (and earlier) and 2.4.4-p3 (and earlier) are affected by an Incorrect Authorization vulnerability that could result in a security feature bypass. A privileged attacker could leverage this vulnerab...
CVE-2023-29289
- EPSS 0.32%
- Veröffentlicht 15.06.2023 19:15:10
- Zuletzt bearbeitet 21.11.2024 07:56:48
Adobe Commerce versions 2.4.6 (and earlier), 2.4.5-p2 (and earlier) and 2.4.4-p3 (and earlier) are affected by an XML Injection vulnerability. An attacker with low privileges can trigger a specially crafted script to a security feature bypass. Exploi...
CVE-2023-29290
- EPSS 0.13%
- Veröffentlicht 15.06.2023 19:15:10
- Zuletzt bearbeitet 21.11.2024 07:56:48
Adobe Commerce versions 2.4.6 (and earlier), 2.4.5-p2 (and earlier) and 2.4.4-p3 (and earlier) are affected by an Incorrect Authorization vulnerability that could result in a security feature bypass. An attacker could leverage this vulnerability to b...
CVE-2023-29291
- EPSS 0.41%
- Veröffentlicht 15.06.2023 19:15:10
- Zuletzt bearbeitet 21.11.2024 07:56:48
Adobe Commerce versions 2.4.6 (and earlier), 2.4.5-p2 (and earlier) and 2.4.4-p3 (and earlier) are affected by a Server-Side Request Forgery (SSRF) vulnerability that could lead to arbitrary file system read. An admin-privilege authenticated attacker...
CVE-2023-29292
- EPSS 0.32%
- Veröffentlicht 15.06.2023 19:15:10
- Zuletzt bearbeitet 21.11.2024 07:56:48
Adobe Commerce versions 2.4.6 (and earlier), 2.4.5-p2 (and earlier) and 2.4.4-p3 (and earlier) are affected by a Server-Side Request Forgery (SSRF) vulnerability that could lead to arbitrary file system read. An admin-privilege authenticated attacker...