Known vulnerabilities in Adobe Commerce B2B 1.5.3-alpha2 - page 3
Vendor:
Adobe
Software:
Adobe Commerce B2B
Version:
1.5.3-alpha2
Software CPE:
cpe:2.3:a:adobe:adobe_commerce_b2b:*:*:*:*:*:*:*:*
Website:
https://www.adobe.com
Total vulnerabilities:
60
Public exploits:
1
Known exploited (KEV):
2
Highest CVSSv4 Score:
9.3
Vulnerabilities by Severity
1.3.3-2026-aug
1.3.4-2026-aug
1.4.2-2026-aug
1.5.2-2026-aug
1.5.3-2026-aug
1.3.3-2026-jul
1.3.4-2026-jul
1.4.2-2026-jul
1.5.2-2026-jul
1.5.3-2026-jul
1.3.3-p18
1.3.4-p17
1.4.2-p10
1.5.3
1.5.2-p5
1.3.3‑p17
1.3.5‑p14
1.4.2‑p9
1.5.3-beta1
1.5.2-p4
1.3.4-p16
1.5.3-alpha3
1.5.2-p3
1.4.2-p8
1.3.5-p13
1.3.4-p15
1.3.3-p16
1.5.3-alpha2
1.5.2-p2
1.4.2-p7
1.3.5-p12
1.3.4-p14
1.3.3-p15
1.3.3-p14
1.3.4-p13
1.4.2-p6
1.5.2-p1
1.5.3-alpha1
1.5.2
1.3.3-p13
1.4.2-p5
1.3.5-p10
1.3.4-p12
1.3.3-p12
1.3.4-p11
1.3.5-p9
1.4.2-p4
1.5.1
1.5.0
1.3.5-p6
1.3.5-p5
1.3.5-p4
1.3.5-p3
1.3.5-p2
1.3.5-p1
1.3.4-p9
1.3.4-p8
1.3.4-p7
1.3.4-p6
1.3.4-p5
1.3.4-p4
1.3.4-p3
1.3.4-p2
1.3.4-p1
1.3.3-p11
1.3.3-p10
1.3.3-p9
1.3.3-p8
1.3.3-p7
1.3.3-p6
1.3.3-p5
1.3.3-p4
1.3.3-p3
1.3.3-p2
1.3.3-p1
1.4.2-p3
1.4.2-p2
1.4.2-p1
1.4.2
1.4.1
1.4.0
1.3.5-p8
1.3.5-p7
1.3.5
1.3.4-p10
1.3.4
1.3.3
1.3.2
Vulnerabilities (60)
| Vulnerability | CWE-ID | CSH Severity | Public Exploit | KEV | First fixed release | Published | Bulletins |
|---|---|---|---|---|---|---|---|
| #VU123811 - Improper input validation CVE-2026-21310 |
CWE-20 | Medium | 1.3.3‑p17, 1.3.4-p16, 1.3.5‑p14, 1.4.2‑p9, 1.5.2-p4, 1.5.3 beta1 | 11.03.2026 |
SB2026031106 |
||
| #VU123810 - Improper input validation CVE-2026-21282 |
CWE-20 | Medium | 1.3.3‑p17, 1.3.4-p16, 1.3.5‑p14, 1.4.2‑p9, 1.5.2-p4, 1.5.3 beta1 | 11.03.2026 |
SB2026031106 |
||
| #VU123809 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') CVE-2026-21360 |
CWE-22 | Low | 1.3.3‑p17, 1.3.4-p16, 1.3.5‑p14, 1.4.2‑p9, 1.5.2-p4, 1.5.3 beta1 | 11.03.2026 |
SB2026031106 |
||
| #VU123808 - URL Redirection to Untrusted Site ('Open Redirect') CVE-2026-21295 |
CWE-601 | Low | 1.3.3‑p17, 1.3.4-p16, 1.3.5‑p14, 1.4.2‑p9, 1.5.2-p4, 1.5.3 beta1 | 11.03.2026 |
SB2026031106 |
||
| #VU123807 - Server-Side Request Forgery (SSRF) CVE-2026-21294 |
CWE-918 | Low | 1.3.3‑p17, 1.3.4-p16, 1.3.5‑p14, 1.4.2‑p9, 1.5.2-p4, 1.5.3 beta1 | 11.03.2026 |
SB2026031106 |
||
| #VU123806 - Server-Side Request Forgery (SSRF) CVE-2026-21293 |
CWE-918 | Low | 1.3.3‑p17, 1.3.4-p16, 1.3.5‑p14, 1.4.2‑p9, 1.5.2-p4, 1.5.3 beta1 | 11.03.2026 |
SB2026031106 |
||
| #VU123801 - Incorrect Authorization CVE-2026-21285 |
CWE-863 | Low | 1.3.3‑p17, 1.3.4-p16, 1.3.5‑p14, 1.4.2‑p9, 1.5.2-p4, 1.5.3 beta1 | 11.03.2026 |
SB2026031106 |
||
| #VU123800 - Incorrect Authorization CVE-2026-21286 |
CWE-863 | Medium | 1.3.3‑p17, 1.3.4-p16, 1.3.5‑p14, 1.4.2‑p9, 1.5.2-p4, 1.5.3 beta1 | 11.03.2026 |
SB2026031106 |
||
| #VU123797 - Incorrect Authorization CVE-2026-21289 |
CWE-863 | Medium | 1.3.3‑p17, 1.3.4-p16, 1.3.5‑p14, 1.4.2‑p9, 1.5.2-p4, 1.5.3 beta1 | 11.03.2026 |
SB2026031106 |
||
| #VU123795 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') CVE-2026-21311 |
CWE-79 | Low | 1.3.3‑p17, 1.3.4-p16, 1.3.5‑p14, 1.4.2‑p9, 1.5.2-p4, 1.5.3 beta1 | 11.03.2026 |
SB2026031106 |
||
| #VU123794 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') CVE-2026-21292 |
CWE-79 | Low | 1.3.3‑p17, 1.3.4-p16, 1.3.5‑p14, 1.4.2‑p9, 1.5.2-p4, 1.5.3 beta1 | 11.03.2026 |
SB2026031106 |
||
| #VU123793 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') CVE-2026-21290 |
CWE-79 | Low | 1.3.3‑p17, 1.3.4-p16, 1.3.5‑p14, 1.4.2‑p9, 1.5.2-p4, 1.5.3 beta1 | 11.03.2026 |
SB2026031106 |
||
| #VU123790 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') CVE-2026-21284 |
CWE-79 | Low | 1.3.3‑p17, 1.3.4-p16, 1.3.5‑p14, 1.4.2‑p9, 1.5.2-p4, 1.5.3 beta1 | 11.03.2026 |
SB2026031106 |
||
| #VU123791 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') CVE-2026-21291 |
CWE-79 | Low | 1.3.3‑p17, 1.3.4-p16, 1.3.5‑p14, 1.4.2‑p9, 1.5.2-p4, 1.5.3 beta1 | 11.03.2026 |
SB2026031106 |
||
| #VU117073 - Incorrect Authorization CVE-2025-54267 |
CWE-863 | High | 1.3.3-p16, 1.3.4-p15, 1.3.5-p13, 1.4.2-p8, 1.5.2-p3, 1.5.3 alpha3 | 14.10.2025 |
SB2025101479 |
||
| #VU117072 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') CVE-2025-54266 |
CWE-79 | Low | 1.3.3-p16, 1.3.4-p15, 1.3.5-p13, 1.4.2-p8, 1.5.2-p3, 1.5.3 alpha3 | 14.10.2025 |
SB2025101479 |
||
| #VU117071 - Incorrect Authorization CVE-2025-54265 |
CWE-863 | Low | 1.3.3-p16, 1.3.4-p15, 1.3.5-p13, 1.4.2-p8, 1.5.2-p3, 1.5.3 alpha3 | 14.10.2025 |
SB2025101479 |
||
| #VU117067 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') CVE-2025-54264 |
CWE-79 | Low | 1.3.3-p16, 1.3.4-p15, 1.3.5-p13, 1.4.2-p8, 1.5.2-p3, 1.5.3 alpha3 | 14.10.2025 |
SB2025101479 |
||
| #VU117066 - Improper Access Control CVE-2025-54263 |
CWE-284 | High | 1.3.3-p16, 1.3.4-p15, 1.3.5-p13, 1.4.2-p8, 1.5.2-p3, 1.5.3 alpha3 | 14.10.2025 |
SB2025101479 |
||
| #VU115074 - Improper input validation CVE-2025-54236 |
CWE-20 | Critical | - | 09.09.2025 |
SB2025090976 |
Showing elements 41 - 60 out of 60