Known vulnerabilities in Adobe Commerce B2B 1.5.3-alpha1 - page 4

Vendor: Adobe
Version: 1.5.3-alpha1
Software CPE: cpe:2.3:a:adobe:adobe_commerce_b2b:*:*:*:*:*:*:*:*
Total vulnerabilities: 66
Public exploits: 1
Known exploited (KEV): 2
Highest CVSSv4 Score: 9.3

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting Adobe Commerce B2B version 1.5.3-alpha1 Adobe Commerce B2B 1.5.3-alpha1 is affected by 66 vulnerabilities: 1 critical, 10 high, 18 medium, 37 low Critical High Medium Low

Vulnerabilities (66)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU113915 - Improper input validation
CVE-2025-49559
CWE-20 Medium
No
No
1.3.3-p15, 1.3.4-p14, 1.3.5-p12, 1.4.2-p7, 1.5.2-p2, 1.5.3 alpha2 12.08.2025 SB2025081285
#VU113914 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
CVE-2025-49558
CWE-362 Medium
No
No
1.3.3-p15, 1.3.4-p14, 1.3.5-p12, 1.4.2-p7, 1.5.2-p2, 1.5.3 alpha2 12.08.2025 SB2025081285
#VU113913 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2025-49557
CWE-79 Low
No
No
1.3.3-p15, 1.3.4-p14, 1.3.5-p12, 1.4.2-p7, 1.5.2-p2, 1.5.3 alpha2 12.08.2025 SB2025081285
#VU113912 - Incorrect Authorization
CVE-2025-49556
CWE-863 High
No
No
1.3.3-p15, 1.3.4-p14, 1.3.5-p12, 1.4.2-p7, 1.5.2-p2, 1.5.3 alpha2 12.08.2025 SB2025081285
#VU113911 - Cross-Site Request Forgery (CSRF)
CVE-2025-49555
CWE-352 Medium
No
No
1.3.3-p15, 1.3.4-p14, 1.3.5-p12, 1.4.2-p7, 1.5.2-p2, 1.5.3 alpha2 12.08.2025 SB2025081285
#VU113908 - Improper input validation
CVE-2025-49554
CWE-20 Medium
No
No
1.3.3-p15, 1.3.4-p14, 1.3.5-p12, 1.4.2-p7, 1.5.2-p2, 1.5.3 alpha2 12.08.2025 SB2025081285


Showing elements 61 - 80 out of 66