Adobe

Commerce

153 Schwachstellen gefunden.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
6.5

CVE-2024-20718

  • EPSS 0.12%
  • Veröffentlicht 15.02.2024 14:15:45
  • Zuletzt bearbeitet 21.11.2024 08:53:00

Adobe Commerce versions 2.4.6-p3, 2.4.5-p5, 2.4.4-p6 and earlier are affected by a Cross-Site Request Forgery (CSRF) vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to trick a victim into pe...

6.6

CVE-2023-38249

  • EPSS 1.68%
  • Veröffentlicht 13.10.2023 07:15:41
  • Zuletzt bearbeitet 21.11.2024 08:13:10

Adobe Commerce versions 2.4.7-beta1 (and earlier), 2.4.6-p2 (and earlier), 2.4.5-p4 (and earlier) and 2.4.4-p5 (and earlier) are affected by an Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability that co...

6.6

CVE-2023-38250

  • EPSS 1.68%
  • Veröffentlicht 13.10.2023 07:15:41
  • Zuletzt bearbeitet 21.11.2024 08:13:10

Adobe Commerce versions 2.4.7-beta1 (and earlier), 2.4.6-p2 (and earlier), 2.4.5-p4 (and earlier) and 2.4.4-p5 (and earlier) are affected by an Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability that co...

5.3

CVE-2023-38251

  • EPSS 0.23%
  • Veröffentlicht 13.10.2023 07:15:41
  • Zuletzt bearbeitet 21.11.2024 08:13:11

Adobe Commerce versions 2.4.7-beta1 (and earlier), 2.4.6-p2 (and earlier), 2.4.5-p4 (and earlier) and 2.4.4-p5 (and earlier) are affected by a Uncontrolled Resource Consumption vulnerability that could lead in minor application denial-of-service. Exp...

8.8

CVE-2023-38218

  • EPSS 0.69%
  • Veröffentlicht 13.10.2023 07:15:40
  • Zuletzt bearbeitet 21.11.2024 08:13:06

Adobe Commerce versions 2.4.7-beta1 (and earlier), 2.4.6-p2 (and earlier), 2.4.5-p4 (and earlier) and 2.4.4-p5 (and earlier) are affected by an Incorrect Authorization . An authenticated attacker can exploit this to achieve information exposure and p...

8.7

CVE-2023-38219

  • EPSS 1.52%
  • Veröffentlicht 13.10.2023 07:15:40
  • Zuletzt bearbeitet 21.11.2024 08:13:06

Adobe Commerce versions 2.4.7-beta1 (and earlier), 2.4.6-p2 (and earlier), 2.4.5-p4 (and earlier) and 2.4.4-p5 (and earlier) are affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low-privileged attacker to inject...

7.5

CVE-2023-38220

  • EPSS 0.15%
  • Veröffentlicht 13.10.2023 07:15:40
  • Zuletzt bearbeitet 21.11.2024 08:13:06

Adobe Commerce versions 2.4.7-beta1 (and earlier), 2.4.6-p2 (and earlier), 2.4.5-p4 (and earlier) and 2.4.4-p5 (and earlier) are affected by an Improper Authorization vulnerability that could lead in a security feature bypass in a way that an attacke...

6.6

CVE-2023-38221

  • EPSS 1.68%
  • Veröffentlicht 13.10.2023 07:15:40
  • Zuletzt bearbeitet 21.11.2024 08:13:07

Adobe Commerce versions 2.4.7-beta1 (and earlier), 2.4.6-p2 (and earlier), 2.4.5-p4 (and earlier) and 2.4.4-p5 (and earlier) are affected by an Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability that co...

4.9

CVE-2023-26367

  • EPSS 0.33%
  • Veröffentlicht 13.10.2023 07:15:39
  • Zuletzt bearbeitet 21.11.2024 07:51:12

Adobe Commerce versions 2.4.7-beta1 (and earlier), 2.4.6-p2 (and earlier), 2.4.5-p4 (and earlier) and 2.4.4-p5 (and earlier) are affected by an Improper Input Validation vulnerability that could lead to arbitrary file system read by an admin-privileg...

6.8

CVE-2023-26366

  • EPSS 0.32%
  • Veröffentlicht 13.10.2023 07:15:38
  • Zuletzt bearbeitet 21.11.2024 07:51:12

Adobe Commerce versions 2.4.7-beta1 (and earlier), 2.4.6-p2 (and earlier), 2.4.5-p4 (and earlier) and 2.4.4-p5 (and earlier) are affected by a Server-Side Request Forgery (SSRF) vulnerability that could lead to arbitrary file system read. A high-priv...