Known vulnerabilities in Adobe Commerce B2B 1.5.3-alpha3 - page 3

Vendor: Adobe
Version: 1.5.3-alpha3
Software CPE: cpe:2.3:a:adobe:adobe_commerce_b2b:*:*:*:*:*:*:*:*
Total vulnerabilities: 63
Public exploits: 1
Known exploited (KEV): 2

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting Adobe Commerce B2B version 1.5.3-alpha3 Adobe Commerce B2B 1.5.3-alpha3 is affected by 63 vulnerabilities: 1 critical, 10 high, 17 medium, 35 low Critical High Medium Low

Vulnerabilities (63)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU131240 - Improper Authorization
CVE-2026-34656
CWE-285 Medium
No
No
1.3.3-p18, 1.3.4-p17, 1.4.2-p10, 1.5.2-p5, 1.5.3 12.05.2026 SB20260512109
#VU131236 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2026-34655
CWE-79 Low
No
No
1.3.3-p18, 1.3.4-p17, 1.4.2-p10, 1.5.2-p5, 1.5.3 12.05.2026 SB20260512109
#VU131234 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2026-34653
CWE-22 Low
No
No
1.3.3-p18, 1.3.4-p17, 1.4.2-p10, 1.5.2-p5, 1.5.3 12.05.2026 SB20260512109
#VU131232 - Resource exhaustion
CVE-2026-34652
CWE-400 Medium
No
No
1.3.3-p18, 1.3.4-p17, 1.4.2-p10, 1.5.2-p5, 1.5.3 12.05.2026 SB20260512109
#VU123811 - Improper input validation
CVE-2026-21310
CWE-20 Medium
No
No
1.3.3‑p17, 1.3.4-p16, 1.3.5‑p14, 1.4.2‑p9, 1.5.2-p4, 1.5.3 beta1 11.03.2026 SB2026031106
#VU123810 - Improper input validation
CVE-2026-21282
CWE-20 Medium
No
No
1.3.3‑p17, 1.3.4-p16, 1.3.5‑p14, 1.4.2‑p9, 1.5.2-p4, 1.5.3 beta1 11.03.2026 SB2026031106
#VU123809 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2026-21360
CWE-22 Low
No
No
1.3.3‑p17, 1.3.4-p16, 1.3.5‑p14, 1.4.2‑p9, 1.5.2-p4, 1.5.3 beta1 11.03.2026 SB2026031106
#VU123808 - URL Redirection to Untrusted Site ('Open Redirect')
CVE-2026-21295
CWE-601 Low
No
No
1.3.3‑p17, 1.3.4-p16, 1.3.5‑p14, 1.4.2‑p9, 1.5.2-p4, 1.5.3 beta1 11.03.2026 SB2026031106
#VU123807 - Server-Side Request Forgery (SSRF)
CVE-2026-21294
CWE-918 Low
No
No
1.3.3‑p17, 1.3.4-p16, 1.3.5‑p14, 1.4.2‑p9, 1.5.2-p4, 1.5.3 beta1 11.03.2026 SB2026031106
#VU123806 - Server-Side Request Forgery (SSRF)
CVE-2026-21293
CWE-918 Low
No
No
1.3.3‑p17, 1.3.4-p16, 1.3.5‑p14, 1.4.2‑p9, 1.5.2-p4, 1.5.3 beta1 11.03.2026 SB2026031106
#VU123803 - Incorrect Authorization
CVE-2026-21359
CWE-863 Medium
No
No
1.3.3‑p17, 1.3.4-p16, 1.3.5‑p14, 1.4.2‑p9, 1.5.2-p4, 1.5.3 beta1 11.03.2026 SB2026031106
#VU123801 - Incorrect Authorization
CVE-2026-21285
CWE-863 Low
No
No
1.3.3‑p17, 1.3.4-p16, 1.3.5‑p14, 1.4.2‑p9, 1.5.2-p4, 1.5.3 beta1 11.03.2026 SB2026031106
#VU123800 - Incorrect Authorization
CVE-2026-21286
CWE-863 Medium
No
No
1.3.3‑p17, 1.3.4-p16, 1.3.5‑p14, 1.4.2‑p9, 1.5.2-p4, 1.5.3 beta1 11.03.2026 SB2026031106
#VU123798 - Incorrect Authorization
CVE-2026-21309
CWE-863 Medium
No
No
1.3.3‑p17, 1.3.4-p16, 1.3.5‑p14, 1.4.2‑p9, 1.5.2-p4, 1.5.3 beta1 11.03.2026 SB2026031106
#VU123797 - Incorrect Authorization
CVE-2026-21289
CWE-863 Medium
No
No
1.3.3‑p17, 1.3.4-p16, 1.3.5‑p14, 1.4.2‑p9, 1.5.2-p4, 1.5.3 beta1 11.03.2026 SB2026031106
#VU123795 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2026-21311
CWE-79 Low
No
No
1.3.3‑p17, 1.3.4-p16, 1.3.5‑p14, 1.4.2‑p9, 1.5.2-p4, 1.5.3 beta1 11.03.2026 SB2026031106
#VU123794 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2026-21292
CWE-79 Low
No
No
1.3.3‑p17, 1.3.4-p16, 1.3.5‑p14, 1.4.2‑p9, 1.5.2-p4, 1.5.3 beta1 11.03.2026 SB2026031106
#VU123793 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2026-21290
CWE-79 Low
No
No
1.3.3‑p17, 1.3.4-p16, 1.3.5‑p14, 1.4.2‑p9, 1.5.2-p4, 1.5.3 beta1 11.03.2026 SB2026031106
#VU123790 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2026-21284
CWE-79 Low
No
No
1.3.3‑p17, 1.3.4-p16, 1.3.5‑p14, 1.4.2‑p9, 1.5.2-p4, 1.5.3 beta1 11.03.2026 SB2026031106
#VU123791 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2026-21291
CWE-79 Low
No
No
1.3.3‑p17, 1.3.4-p16, 1.3.5‑p14, 1.4.2‑p9, 1.5.2-p4, 1.5.3 beta1 11.03.2026 SB2026031106


Showing elements 41 - 60 out of 63