Adobe

Commerce

153 Schwachstellen gefunden.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
8.8

CVE-2022-42344

  • EPSS 0.41%
  • Veröffentlicht 20.10.2022 17:15:10
  • Zuletzt bearbeitet 21.11.2024 07:24:47

Adobe Commerce versions 2.4.3-p2 (and earlier), 2.3.7-p3 (and earlier) and 2.4.4 (and earlier) are affected by an Incorrect Authorization vulnerability. An authenticated attacker can exploit this vulnerability to achieve information exposure and priv...

5.4

CVE-2022-35698

Warnung
  • EPSS 4.27%
  • Veröffentlicht 14.10.2022 20:15:11
  • Zuletzt bearbeitet 21.11.2024 07:11:30

Adobe Commerce versions 2.4.4-p1 (and earlier) and 2.4.5 (and earlier) are affected by a Stored Cross-site Scripting vulnerability. Exploitation of this issue does not require user interaction and could result in a post-authentication arbitrary code ...

5.3

CVE-2022-35689

  • EPSS 0.34%
  • Veröffentlicht 14.10.2022 20:15:10
  • Zuletzt bearbeitet 21.11.2024 07:11:28

Adobe Commerce versions 2.4.4-p1 (and earlier) and 2.4.5 (and earlier) are affected by an Improper Access Control vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to impact the availability o...

5.3

CVE-2022-35692

  • EPSS 0.73%
  • Veröffentlicht 19.08.2022 23:15:09
  • Zuletzt bearbeitet 21.11.2024 07:11:29

Adobe Commerce versions 2.4.3-p2 (and earlier), 2.3.7-p3 (and earlier) and 2.4.4 (and earlier) are affected by an Improper Access Control vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to l...

8.8

CVE-2022-34254

  • EPSS 0.53%
  • Veröffentlicht 16.08.2022 21:15:10
  • Zuletzt bearbeitet 21.11.2024 07:09:09

Adobe Commerce versions 2.4.3-p2 (and earlier), 2.3.7-p3 (and earlier) and 2.4.4 (and earlier) are affected by an Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability that could be abused by an attacker to inje...

8.8

CVE-2022-34255

  • EPSS 0.57%
  • Veröffentlicht 16.08.2022 21:15:10
  • Zuletzt bearbeitet 21.11.2024 07:09:09

Adobe Commerce versions 2.4.3-p2 (and earlier), 2.3.7-p3 (and earlier) and 2.4.4 (and earlier) are affected by an Improper Access Control vulnerability that could result in Privilege escalation. An attacker with a low privilege account could leverage...

9.8

CVE-2022-34256

  • EPSS 0.41%
  • Veröffentlicht 16.08.2022 21:15:10
  • Zuletzt bearbeitet 21.11.2024 07:09:09

Adobe Commerce versions 2.4.3-p2 (and earlier), 2.3.7-p3 (and earlier) and 2.4.4 (and earlier) are affected by an Improper Authorization vulnerability that could result in Privilege escalation. An attacker could leverage this vulnerability to access ...

6.1

CVE-2022-34257

  • EPSS 0.77%
  • Veröffentlicht 16.08.2022 21:15:10
  • Zuletzt bearbeitet 21.11.2024 07:09:09

Adobe Commerce versions 2.4.3-p2 (and earlier), 2.3.7-p3 (and earlier) and 2.4.4 (and earlier) are affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by an attacker to inject malicious scripts into vulnerable form fiel...

4.8

CVE-2022-34258

  • EPSS 16.18%
  • Veröffentlicht 16.08.2022 21:15:10
  • Zuletzt bearbeitet 21.11.2024 07:09:09

Adobe Commerce versions 2.4.3-p2 (and earlier), 2.3.7-p3 (and earlier) and 2.4.4 (and earlier) are affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by an attacker with admin privileges to inject malicious scripts int...

5.3

CVE-2022-34259

  • EPSS 0.23%
  • Veröffentlicht 16.08.2022 21:15:10
  • Zuletzt bearbeitet 21.11.2024 07:09:10

Adobe Commerce versions 2.4.3-p2 (and earlier), 2.3.7-p3 (and earlier) and 2.4.4 (and earlier) are affected by an Improper Access Control vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to i...