Known vulnerabilities in Adobe Commerce B2B 1.5.3-alpha3 - page 2
Vendor:
Adobe
Software:
Adobe Commerce B2B
Version:
1.5.3-alpha3
Software CPE:
cpe:2.3:a:adobe:adobe_commerce_b2b:*:*:*:*:*:*:*:*
Website:
https://www.adobe.com
Total vulnerabilities:
63
Public exploits:
1
Known exploited (KEV):
2
Vulnerabilities by Severity
1.3.3-2026-sep
1.3.4-2026-sep
1.4.2-2026-sep
1.5.2-2026-sep
1.5.3-2026-sep
1.3.3-2026-aug
1.3.4-2026-aug
1.4.2-2026-aug
1.5.2-2026-aug
1.5.3-2026-aug
1.3.3-2026-jul
1.3.4-2026-jul
1.4.2-2026-jul
1.5.2-2026-jul
1.5.3-2026-jul
1.3.3-p18
1.3.4-p17
1.4.2-p10
1.5.3
1.5.2-p5
1.3.3‑p17
1.3.5‑p14
1.4.2‑p9
1.5.3-beta1
1.5.2-p4
1.3.4-p16
1.5.3-alpha3
1.5.2-p3
1.4.2-p8
1.3.5-p13
1.3.4-p15
1.3.3-p16
1.5.3-alpha2
1.5.2-p2
1.4.2-p7
1.3.5-p12
1.3.4-p14
1.3.3-p15
1.3.3-p14
1.3.4-p13
1.4.2-p6
1.5.2-p1
1.5.3-alpha1
1.5.2
1.3.3-p13
1.4.2-p5
1.3.5-p10
1.3.4-p12
1.3.3-p12
1.3.4-p11
1.3.5-p9
1.4.2-p4
1.5.1
1.5.0
1.3.5-p6
1.3.5-p5
1.3.5-p4
1.3.5-p3
1.3.5-p2
1.3.5-p1
1.3.4-p9
1.3.4-p8
1.3.4-p7
1.3.4-p6
1.3.4-p5
1.3.4-p4
1.3.4-p3
1.3.4-p2
1.3.4-p1
1.3.3-p11
1.3.3-p10
1.3.3-p9
1.3.3-p8
1.3.3-p7
1.3.3-p6
1.3.3-p5
1.3.3-p4
1.3.3-p3
1.3.3-p2
1.3.3-p1
1.4.2-p3
1.4.2-p2
1.4.2-p1
1.4.2
1.4.1
1.4.0
1.3.5-p8
1.3.5-p7
1.3.5
1.3.4-p10
1.3.4
1.3.3
1.3.2
Vulnerabilities (63)
| Vulnerability | CWE-ID | CSH Severity | Public Exploit | KEV | First fixed release | Published | Bulletins |
|---|---|---|---|---|---|---|---|
| #VU137586 - Improper Encoding or Escaping of Output CVE-2026-48358 |
CWE-116 | Low | 1.3.3-2026-jul, 1.3.4-2026-jul, 1.4.2-2026-jul, 1.5.2-2026-jul, 1.5.3-2026-jul | 15.07.2026 |
SB2026071509 |
||
| #VU137588 - Incorrect Authorization CVE-2026-47988 |
CWE-863 | High | 1.3.3-2026-jul, 1.3.4-2026-jul, 1.4.2-2026-jul, 1.5.2-2026-jul, 1.5.3-2026-jul | 15.07.2026 |
SB2026071509 |
||
| #VU137589 - Incorrect Authorization CVE-2026-47984 |
CWE-863 | High | 1.3.3-2026-jul, 1.3.4-2026-jul, 1.4.2-2026-jul, 1.5.2-2026-jul, 1.5.3-2026-jul | 15.07.2026 |
SB2026071509 |
||
| #VU137590 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') CVE-2026-47995 |
CWE-79 | Low | 1.3.3-2026-jul, 1.3.4-2026-jul, 1.4.2-2026-jul, 1.5.2-2026-jul, 1.5.3-2026-jul | 15.07.2026 |
SB2026071509 |
||
| #VU137591 - Incorrect Authorization CVE-2026-47996 |
CWE-863 | Low | 1.3.3-2026-jul, 1.3.4-2026-jul, 1.4.2-2026-jul, 1.5.2-2026-jul, 1.5.3-2026-jul | 15.07.2026 |
SB2026071509 |
||
| #VU137592 - Improper input validation CVE-2026-47992 |
CWE-20 | Low | 1.3.3-2026-jul, 1.3.4-2026-jul, 1.4.2-2026-jul, 1.5.2-2026-jul, 1.5.3-2026-jul | 15.07.2026 |
SB2026071509 |
||
| #VU137593 - Incorrect Authorization CVE-2026-47997 |
CWE-863 | Low | 1.3.3-2026-jul, 1.3.4-2026-jul, 1.4.2-2026-jul, 1.5.2-2026-jul, 1.5.3-2026-jul | 15.07.2026 |
SB2026071509 |
||
| #VU137594 - Incorrect Authorization CVE-2026-47998 |
CWE-863 | Low | 1.3.3-2026-jul, 1.3.4-2026-jul, 1.4.2-2026-jul, 1.5.2-2026-jul, 1.5.3-2026-jul | 15.07.2026 |
SB2026071509 |
||
| #VU137595 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') CVE-2026-47999 |
CWE-79 | Low | 1.3.3-2026-jul, 1.3.4-2026-jul, 1.4.2-2026-jul, 1.5.2-2026-jul, 1.5.3-2026-jul | 15.07.2026 |
SB2026071509 |
||
| #VU131242 - Improper input validation CVE-2026-34685 |
CWE-20 | Low | 1.3.3-p18, 1.3.4-p17, 1.4.2-p10, 1.5.2-p5, 1.5.3 | 12.05.2026 |
SB20260512109 |
||
| #VU131238 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') CVE-2026-34658 |
CWE-79 | Low | 1.3.3-p18, 1.3.4-p17, 1.4.2-p10, 1.5.2-p5, 1.5.3 | 12.05.2026 |
SB20260512109 |
||
| #VU131235 - Resource exhaustion CVE-2026-34654 |
CWE-400 | Medium | 1.3.3-p18, 1.3.4-p17, 1.4.2-p10, 1.5.2-p5, 1.5.3 | 12.05.2026 |
SB20260512109 |
||
| #VU131233 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') CVE-2026-34686 |
CWE-79 | Low | 1.3.3-p18, 1.3.4-p17, 1.4.2-p10, 1.5.2-p5, 1.5.3 | 12.05.2026 |
SB20260512109 |
||
| #VU131229 - Resource exhaustion CVE-2026-34649 |
CWE-400 | Medium | 1.3.3-p18, 1.3.4-p17, 1.4.2-p10, 1.5.2-p5, 1.5.3 | 12.05.2026 |
SB20260512109 |
||
| #VU131230 - Resource exhaustion CVE-2026-34650 |
CWE-400 | Medium | 1.3.3-p18, 1.3.4-p17, 1.4.2-p10, 1.5.2-p5, 1.5.3 | 12.05.2026 |
SB20260512109 |
||
| #VU131231 - Resource exhaustion CVE-2026-34651 |
CWE-400 | Medium | 1.3.3-p18, 1.3.4-p17, 1.4.2-p10, 1.5.2-p5, 1.5.3 | 12.05.2026 |
SB20260512109 |
||
| #VU131228 - Resource exhaustion CVE-2026-34648 |
CWE-400 | Medium | 1.3.3-p18, 1.3.4-p17, 1.4.2-p10, 1.5.2-p5, 1.5.3 | 12.05.2026 |
SB20260512109 |
||
| #VU131227 - Server-Side Request Forgery (SSRF) CVE-2026-34647 |
CWE-918 | High | 1.3.3-p18, 1.3.4-p17, 1.4.2-p10, 1.5.2-p5, 1.5.3 | 12.05.2026 |
SB20260512109 |
||
| #VU131226 - Incorrect Authorization CVE-2026-34646 |
CWE-863 | High | 1.3.3-p18, 1.3.4-p17, 1.4.2-p10, 1.5.2-p5, 1.5.3 | 12.05.2026 |
SB20260512109 |
||
| #VU131225 - Incorrect Authorization CVE-2026-34645 |
CWE-863 | High | 1.3.3-p18, 1.3.4-p17, 1.4.2-p10, 1.5.2-p5, 1.5.3 | 12.05.2026 |
SB20260512109 |
Showing elements 21 - 40 out of 63