Adobe

Commerce

153 Schwachstellen gefunden.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
8.1

CVE-2025-24411

  • EPSS 0.25%
  • Veröffentlicht 11.02.2025 18:15:42
  • Zuletzt bearbeitet 16.04.2025 17:18:03

Adobe Commerce versions 2.4.8-beta1, 2.4.7-p3, 2.4.6-p8, 2.4.5-p10, 2.4.4-p11 and earlier are affected by an Improper Access Control vulnerability that could result in a Security feature bypass. A low-privileged attacker could leverage this vulnerabi...

8.7

CVE-2025-24412

  • EPSS 0.35%
  • Veröffentlicht 11.02.2025 18:15:42
  • Zuletzt bearbeitet 16.04.2025 17:17:56

Adobe Commerce versions 2.4.8-beta1, 2.4.7-p3, 2.4.6-p8, 2.4.5-p10, 2.4.4-p11 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low-privileged attacker to inject malicious scripts into vulnerable ...

8.7

CVE-2025-24413

  • EPSS 0.35%
  • Veröffentlicht 11.02.2025 18:15:42
  • Zuletzt bearbeitet 16.04.2025 17:17:53

Adobe Commerce versions 2.4.8-beta1, 2.4.7-p3, 2.4.6-p8, 2.4.5-p10, 2.4.4-p11 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low-privileged attacker to inject malicious scripts into vulnerable ...

8.7

CVE-2025-24414

  • EPSS 0.35%
  • Veröffentlicht 11.02.2025 18:15:42
  • Zuletzt bearbeitet 16.04.2025 17:17:47

Adobe Commerce versions 2.4.8-beta1, 2.4.7-p3, 2.4.6-p8, 2.4.5-p10, 2.4.4-p11 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low-privileged attacker to inject malicious scripts into vulnerable ...

8.7

CVE-2025-24415

  • EPSS 0.35%
  • Veröffentlicht 11.02.2025 18:15:42
  • Zuletzt bearbeitet 16.04.2025 17:17:27

Adobe Commerce versions 2.4.8-beta1, 2.4.7-p3, 2.4.6-p8, 2.4.5-p10, 2.4.4-p11 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low-privileged attacker to inject malicious scripts into vulnerable ...

7.5

CVE-2025-24406

  • EPSS 1.21%
  • Veröffentlicht 11.02.2025 18:15:41
  • Zuletzt bearbeitet 17.04.2025 16:09:35

Adobe Commerce versions 2.4.8-beta1, 2.4.7-p3, 2.4.6-p8, 2.4.5-p10, 2.4.4-p11 and earlier are affected by an Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability that could lead to a security feature bypass. An...

6.5

CVE-2025-24408

  • EPSS 0.35%
  • Veröffentlicht 11.02.2025 18:15:41
  • Zuletzt bearbeitet 03.03.2025 15:52:41

Adobe Commerce versions 2.4.8-beta1, 2.4.7-p3, 2.4.6-p8, 2.4.5-p10, 2.4.4-p11 and earlier are affected by an Information Exposure vulnerability that could result in privilege escalation. A low-privileged attacker could gain unauthorized access to sen...

8.2

CVE-2025-24409

  • EPSS 0.33%
  • Veröffentlicht 11.02.2025 18:15:41
  • Zuletzt bearbeitet 16.04.2025 17:18:10

Adobe Commerce versions 2.4.8-beta1, 2.4.7-p3, 2.4.6-p8, 2.4.5-p10, 2.4.4-p11 and earlier are affected by an Incorrect Authorization vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to bypas...

7.7

CVE-2024-49521

  • EPSS 0.24%
  • Veröffentlicht 12.11.2024 17:15:08
  • Zuletzt bearbeitet 18.11.2024 18:44:32

Adobe Commerce versions 3.2.5 and earlier are affected by a Server-Side Request Forgery (SSRF) vulnerability that could lead to a security feature bypass. A low privileged attacker could exploit this vulnerability to send crafted requests from the vu...

2.7

CVE-2024-45149

  • EPSS 0.12%
  • Veröffentlicht 10.10.2024 10:15:08
  • Zuletzt bearbeitet 12.12.2024 21:07:55

Adobe Commerce versions 2.4.7-p2, 2.4.6-p7, 2.4.5-p9, 2.4.4-p10 and earlier are affected by an Improper Access Control vulnerability that could result in a Security feature bypass. A high-privileged attacker could leverage this vulnerability to bypas...