Known vulnerabilities in Adobe Commerce B2B - page 2

Vendor: Adobe
Software CPE: cpe:2.3:a:adobe:adobe_commerce_b2b:*:*:*:*:*:*:*:*
Total vulnerabilities: 138
Public exploits: 2
Known exploited (KEV): 3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Adobe Commerce B2B Adobe Commerce B2B is affected by 138 known vulnerabilities: 2 critical, 20 high, 38 medium, 78 low Critical High Medium Low

Vulnerabilities (138)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU137585 - Unrestricted Upload of File with Dangerous Type
CVE-2026-48356
CWE-434 High
No
No
1.3.3-2026-jul, 1.3.4-2026-jul, 1.4.2-2026-jul, 1.5.2-2026-jul, 1.5.3-2026-jul 15.07.2026 SB2026071509
#VU137589 - Incorrect Authorization
CVE-2026-47984
CWE-863 High
No
No
1.3.3-2026-jul, 1.3.4-2026-jul, 1.4.2-2026-jul, 1.5.2-2026-jul, 1.5.3-2026-jul 15.07.2026 SB2026071509
#VU137590 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2026-47995
CWE-79 Low
No
No
1.3.3-2026-jul, 1.3.4-2026-jul, 1.4.2-2026-jul, 1.5.2-2026-jul, 1.5.3-2026-jul 15.07.2026 SB2026071509
#VU137591 - Incorrect Authorization
CVE-2026-47996
CWE-863 Low
No
No
1.3.3-2026-jul, 1.3.4-2026-jul, 1.4.2-2026-jul, 1.5.2-2026-jul, 1.5.3-2026-jul 15.07.2026 SB2026071509
#VU137592 - Improper input validation
CVE-2026-47992
CWE-20 Low
No
No
1.3.3-2026-jul, 1.3.4-2026-jul, 1.4.2-2026-jul, 1.5.2-2026-jul, 1.5.3-2026-jul 15.07.2026 SB2026071509
#VU137593 - Incorrect Authorization
CVE-2026-47997
CWE-863 Low
No
No
1.3.3-2026-jul, 1.3.4-2026-jul, 1.4.2-2026-jul, 1.5.2-2026-jul, 1.5.3-2026-jul 15.07.2026 SB2026071509
#VU137594 - Incorrect Authorization
CVE-2026-47998
CWE-863 Low
No
No
1.3.3-2026-jul, 1.3.4-2026-jul, 1.4.2-2026-jul, 1.5.2-2026-jul, 1.5.3-2026-jul 15.07.2026 SB2026071509
#VU137596 - URL Redirection to Untrusted Site ('Open Redirect')
CVE-2026-48000
CWE-601 Low
No
No
1.3.3-2026-jul, 1.3.4-2026-jul, 1.4.2-2026-jul, 1.5.2-2026-jul, 1.5.3-2026-jul 15.07.2026 SB2026071509
#VU137597 - Exposure of sensitive information to an unauthorized actor
CVE-2026-48001
CWE-200 Low
No
No
1.3.3-2026-jul, 1.3.4-2026-jul, 1.4.2-2026-jul, 1.5.2-2026-jul, 1.5.3-2026-jul 15.07.2026 SB2026071509
#VU131240 - Improper Authorization
CVE-2026-34656
CWE-285 Medium
No
No
1.3.3-p18, 1.3.4-p17, 1.4.2-p10, 1.5.2-p5, 1.5.3 12.05.2026 SB20260512109
#VU131238 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2026-34658
CWE-79 Low
No
No
1.3.3-p18, 1.3.4-p17, 1.4.2-p10, 1.5.2-p5, 1.5.3 12.05.2026 SB20260512109
#VU131236 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2026-34655
CWE-79 Low
No
No
1.3.3-p18, 1.3.4-p17, 1.4.2-p10, 1.5.2-p5, 1.5.3 12.05.2026 SB20260512109
#VU131235 - Resource exhaustion
CVE-2026-34654
CWE-400 Medium
No
No
1.3.3-p18, 1.3.4-p17, 1.4.2-p10, 1.5.2-p5, 1.5.3 12.05.2026 SB20260512109
#VU131234 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2026-34653
CWE-22 Low
No
No
1.3.3-p18, 1.3.4-p17, 1.4.2-p10, 1.5.2-p5, 1.5.3 12.05.2026 SB20260512109
#VU131233 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2026-34686
CWE-79 Low
No
No
1.3.3-p18, 1.3.4-p17, 1.4.2-p10, 1.5.2-p5, 1.5.3 12.05.2026 SB20260512109
#VU131232 - Resource exhaustion
CVE-2026-34652
CWE-400 Medium
No
No
1.3.3-p18, 1.3.4-p17, 1.4.2-p10, 1.5.2-p5, 1.5.3 12.05.2026 SB20260512109
#VU131229 - Resource exhaustion
CVE-2026-34649
CWE-400 Medium
No
No
1.3.3-p18, 1.3.4-p17, 1.4.2-p10, 1.5.2-p5, 1.5.3 12.05.2026 SB20260512109
#VU131230 - Resource exhaustion
CVE-2026-34650
CWE-400 Medium
No
No
1.3.3-p18, 1.3.4-p17, 1.4.2-p10, 1.5.2-p5, 1.5.3 12.05.2026 SB20260512109
#VU131231 - Resource exhaustion
CVE-2026-34651
CWE-400 Medium
No
No
1.3.3-p18, 1.3.4-p17, 1.4.2-p10, 1.5.2-p5, 1.5.3 12.05.2026 SB20260512109
#VU131225 - Incorrect Authorization
CVE-2026-34645
CWE-863 High
No
No
1.3.3-p18, 1.3.4-p17, 1.4.2-p10, 1.5.2-p5, 1.5.3 12.05.2026 SB20260512109


Showing elements 21 - 40 out of 138