Known vulnerabilities in Adobe Commerce B2B 1.5.3-alpha2 - page 4

Vendor: Adobe
Version: 1.5.3-alpha2
Software CPE: cpe:2.3:a:adobe:adobe_commerce_b2b:*:*:*:*:*:*:*:*
Total vulnerabilities: 69
Public exploits: 2
Known exploited (KEV): 3

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting Adobe Commerce B2B version 1.5.3-alpha2 Adobe Commerce B2B 1.5.3-alpha2 is affected by 69 vulnerabilities: 2 critical, 12 high, 17 medium, 38 low Critical High Medium Low

Vulnerabilities (69)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU123805 - Incorrect Authorization
CVE-2026-21297
CWE-863 Low
No
No
1.3.3‑p17, 1.3.4-p16, 1.3.5‑p14, 1.4.2‑p9, 1.5.2-p4, 1.5.3 beta1 11.03.2026 SB2026031106
#VU123804 - Incorrect Authorization
CVE-2026-21296
CWE-863 Low
No
No
1.3.3‑p17, 1.3.4-p16, 1.3.5‑p14, 1.4.2‑p9, 1.5.2-p4, 1.5.3 beta1 11.03.2026 SB2026031106
#VU123789 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2026-21361
CWE-79 Low
No
No
1.3.3‑p17, 1.3.4-p16, 1.3.5‑p14, 1.4.2‑p9, 1.5.2-p4, 1.5.3 beta1 11.03.2026 SB2026031106
#VU117073 - Incorrect Authorization
CVE-2025-54267
CWE-863 High
No
No
1.3.3-p16, 1.3.4-p15, 1.3.5-p13, 1.4.2-p8, 1.5.2-p3, 1.5.3 alpha3 14.10.2025 SB2025101479
#VU117072 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2025-54266
CWE-79 Low
No
No
1.3.3-p16, 1.3.4-p15, 1.3.5-p13, 1.4.2-p8, 1.5.2-p3, 1.5.3 alpha3 14.10.2025 SB2025101479
#VU117071 - Incorrect Authorization
CVE-2025-54265
CWE-863 Low
No
No
1.3.3-p16, 1.3.4-p15, 1.3.5-p13, 1.4.2-p8, 1.5.2-p3, 1.5.3 alpha3 14.10.2025 SB2025101479
#VU117067 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2025-54264
CWE-79 Low
No
No
1.3.3-p16, 1.3.4-p15, 1.3.5-p13, 1.4.2-p8, 1.5.2-p3, 1.5.3 alpha3 14.10.2025 SB2025101479
#VU117066 - Improper Access Control
CVE-2025-54263
CWE-284 High
No
No
1.3.3-p16, 1.3.4-p15, 1.3.5-p13, 1.4.2-p8, 1.5.2-p3, 1.5.3 alpha3 14.10.2025 SB2025101479
#VU115074 - Improper input validation
CVE-2025-54236
CWE-20 Critical
Public exploit available
Exploited
- 09.09.2025 SB2025090976


Showing elements 61 - 80 out of 69