Adobe Adobe Commerce

• CVE-2024-45129 Medium 4.3 Adobe Commerce | Improper Access Control (CWE-284) 0.5%
• CVE-2024-45118 Medium 6.5 Adobe Commerce | Improper Access Control (CWE-284) 0.6%
• CVE-2024-45149 Low 2.7 Adobe Commerce | Improper Access Control (CWE-284) 0.5%
• CVE-2024-45125 Medium 4.3 Adobe Commerce | Incorrect Authorization (CWE-863) 0.5%
• CVE-2024-39419 Medium 4.3 A user without ship permissions can ship the orders 0.4%
• CVE-2024-39403 High 7.6 Stored XSS through Webhook module public key configuration 0.5%
• CVE-2024-39418 Medium 5.4 Adobe Commerce | Improper Authorization (CWE-285) 0.4%
• CVE-2024-39413 Medium 4.3 An unauthorized user can export the Invoiced Sales Report 0.4%
• CVE-2024-39399 High 7.7 [Paris] Path Traversal lead to local file read 0.9%
• CVE-2024-39408 Medium 4.3 Adobe Commerce | Cross-Site Request Forgery (CSRF) (CWE-352) 0.5%
• CVE-2024-39417 Medium 4.3 An unauthorized user can export the Shipping Report 0.4%
• CVE-2024-39410 Medium 4.3 Adobe Commerce | Cross-Site Request Forgery (CSRF) (CWE-352) 0.5%
• CVE-2024-39407 Medium 4.3 Adobe Commerce | Improper Authorization (CWE-285) 0.4%
• CVE-2024-39398 High 7.4 OTP 2FA can be bruteforced 0.9%
• CVE-2024-39401 High 8.4 Adobe Commerce | Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') (CWE-78) 1.7%
• CVE-2024-39397 Critical 9.0 Adobe Commerce | Unrestricted Upload of File with Dangerous Type (CWE-434) 1.1%
• CVE-2024-39409 Medium 4.3 Adobe Commerce | Cross-Site Request Forgery (CSRF) (CWE-352) 0.5%
• CVE-2024-39411 Medium 4.3 Adobe Commerce | Improper Authorization (CWE-285) 0.4%
• CVE-2024-39416 Medium 4.3 Unauthorized user can export Orders Sale Report 0.4%
• CVE-2024-39414 Medium 4.3 Being able to import/export tax rates without proper privileges 0.4%
• CVE-2024-39412 Medium 4.3 Adobe Commerce | Improper Authorization (CWE-285) 0.4%
• CVE-2024-39402 High 8.4 Adobe Commerce | Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') (CWE-78) 1.7%
• CVE-2024-39406 Medium 6.8 Adobe Commerce | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') (CWE-22) 0.9%
• CVE-2024-39400 High 8.1 DOM XSS through integrations can impact other admins 0.7%
• CVE-2024-39404 Medium 4.3 A user without Shop Policy Parameters section privilege can alter the shop policy parameters section 0.5%
• CVE-2024-39415 Medium 4.3 An unauthorized user can export the Tax Sales Report 0.4%
• CVE-2024-39405 Medium 4.3 Adobe Commerce | Improper Authorization (CWE-285) 0.4%
• CVE-2024-34106 Medium 5.3 Insecure Direct Object Reference - An attacker can able to erase the victim quote details 0.8%
• CVE-2024-34103 High 8.1 Customer account takeover via web API call & subsequent password reset 0.9%
• CVE-2024-34109 High 7.2 Adobe Commerce | Improper Input Validation (CWE-20) 1.4%
• CVE-2024-34110 High 7.2 RCE in the Adobe Commerce Webhook module through a legit webhook definition 1.4%
• CVE-2024-34111 Medium 6.5 SSRF in service connector 1.3%
• CVE-2024-34107 Medium 5.3 Adobe Commerce | Improper Access Control (CWE-284) 1.1%
• CVE-2024-34105 Medium 4.8 Stored Cross Site Scripting in Order Comment 0.7%
• CVE-2024-34104 High 8.2 Adobe Commerce | Improper Authorization (CWE-285) 0.8%
• CVE-2024-34108 Critical 9.1 Large attack surface through legit webhook usage in Adobe Commerce 1.4%
• CVE-2024-20758 Critical 9.0 Adobe Commerce | Improper Input Validation (CWE-20) 1.4%
• CVE-2024-20759 High 8.1 Adobe Commerce | Cross-site Scripting (Stored XSS) (CWE-79) 1.0%
• CVE-2024-20716 Medium 4.9 Force high-usage of resources by generating unlimited coupons: Adobe Commerce 0.9%
• CVE-2024-20717 Medium 5.4 Stored admin XSS via PayPal authentication certificate 0.4%
• CVE-2024-20718 Medium 4.3 [Spain] CSRF to delete Requisition Lists at Adobe Commerce 0.8%
• CVE-2024-20719 Critical 9.1 [Adobe Commerce] Stored XSS from low privileged admin user on every admin page, bypassing CVE-2023-29297 1.3%
• CVE-2024-20720 Critical 9.1 Command injection in data collector backup due to insufficient patching of CVE-2023-38208 3.7%
• CVE-2023-38251 Medium 5.3 Adobe Commerce | Uncontrolled Resource Consumption (CWE-400) 0.8%
• CVE-2023-38219 High 8.7 Validate Your Inputs | Cross-site Scripting (Stored XSS) (CWE-79) - Customer to Admin stored XSS with Gift wrapping 0.8%
• CVE-2023-38220 High 7.5 Full page cache enumeration via cookie X-Magento-Vary 0.8%
• CVE-2023-26367 Medium 4.9 Error based file extraction via PHP filter chains during product bulk import logic 0.8%
• CVE-2023-26366 Medium 6.8 Validate Your Inputs | Server-Side Request Forgery (SSRF) (CWE-918) 0.9%
• CVE-2023-38218 High 8.8 Incorrect Authorization - Customer account takeover 0.9%
• CVE-2023-38250 High 8.0 Adobe Commerce | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') (CWE-89) 0.8%