Known vulnerabilities in Adobe Commerce B2B - page 5

Vendor: Adobe
Software CPE: cpe:2.3:a:adobe:adobe_commerce_b2b:*:*:*:*:*:*:*:*
Total vulnerabilities: 138
Public exploits: 2
Known exploited (KEV): 3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Adobe Commerce B2B Adobe Commerce B2B is affected by 138 known vulnerabilities: 2 critical, 20 high, 38 medium, 78 low Critical High Medium Low

Vulnerabilities (138)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU107830 - Insufficiently Protected Credentials
CVE-2025-27192
CWE-522 Low
No
No
1.3.3-p13, 1.3.4-p12, 1.3.5-p10, 1.4.2-p5, 1.5.2 23.04.2025 SB2025042302
#VU107829 - Improper Access Control
CVE-2025-27191
CWE-284 Medium
No
No
1.3.3-p13, 1.3.4-p12, 1.3.5-p10, 1.4.2-p5, 1.5.2 23.04.2025 SB2025042302
#VU107828 - Improper Access Control
CVE-2025-27190
CWE-284 Medium
No
No
1.3.3-p13, 1.3.4-p12, 1.3.5-p10, 1.4.2-p5, 1.5.2 23.04.2025 SB2025042302
#VU107827 - Cross-Site Request Forgery (CSRF)
CVE-2025-27189
CWE-352 Medium
No
No
1.3.3-p13, 1.3.4-p12, 1.3.5-p10, 1.4.2-p5, 1.5.2 23.04.2025 SB2025042302
#VU107826 - Improper Authorization
CVE-2025-27188
CWE-285 Low
No
No
1.3.3-p13, 1.3.4-p12, 1.3.5-p10, 1.4.2-p5, 1.5.2 23.04.2025 SB2025042302
#VU103857 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2025-24412
CWE-79 Low
No
No
1.3.3-p12, 1.3.4-p11, 1.3.5-p9, 1.4.2-p4, 1.5.1 11.02.2025 SB2025021201
#VU103858 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2025-24438
CWE-79 Low
No
No
1.3.3-p12, 1.3.4-p11, 1.3.5-p9, 1.4.2-p4, 1.5.1 11.02.2025 SB2025021201
#VU103859 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2025-24413
CWE-79 Low
No
No
1.3.3-p12, 1.3.4-p11, 1.3.5-p9, 1.4.2-p4, 1.5.1 11.02.2025 SB2025021201
#VU103860 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2025-24414
CWE-79 Low
No
No
1.3.3-p12, 1.3.4-p11, 1.3.5-p9, 1.4.2-p4, 1.5.1 11.02.2025 SB2025021201
#VU103861 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2025-24415
CWE-79 Low
No
No
1.3.3-p12, 1.3.4-p11, 1.3.5-p9, 1.4.2-p4, 1.5.1 11.02.2025 SB2025021201
#VU103862 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2025-24416
CWE-79 Low
No
No
1.3.3-p12, 1.3.4-p11, 1.3.5-p9, 1.4.2-p4, 1.5.1 11.02.2025 SB2025021201
#VU103863 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2025-24417
CWE-79 Low
No
No
1.3.3-p12, 1.3.4-p11, 1.3.5-p9, 1.4.2-p4, 1.5.1 11.02.2025 SB2025021201
#VU103864 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2025-24428
CWE-79 Low
No
No
1.3.3-p12, 1.3.4-p11, 1.3.5-p9, 1.4.2-p4, 1.5.1 11.02.2025 SB2025021201
#VU103856 - Improper Access Control
CVE-2025-24411
CWE-284 Medium
No
No
1.3.3-p12, 1.3.4-p11, 1.3.5-p9, 1.4.2-p4, 1.5.1 11.02.2025 SB2025021201
#VU103855 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2025-24410
CWE-79 Low
No
No
1.3.3-p12, 1.3.4-p11, 1.3.5-p9, 1.4.2-p4, 1.5.1 11.02.2025 SB2025021201
#VU103854 - Improper Authorization
CVE-2025-24409
CWE-285 High
No
No
1.3.3-p12, 1.3.4-p11, 1.3.5-p9, 1.4.2-p4, 1.5.1 11.02.2025 SB2025021201
#VU103853 - Exposure of sensitive information to an unauthorized actor
CVE-2025-24408
CWE-200 Medium
No
No
1.3.3-p12, 1.3.4-p11, 1.3.5-p9, 1.4.2-p4, 1.5.1 11.02.2025 SB2025021201
#VU103852 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2025-24406
CWE-22 High
No
No
1.3.3-p12, 1.3.4-p11, 1.3.5-p9, 1.4.2-p4, 1.5.1 11.02.2025 SB2025021201
#VU103851 - Improper Authorization
CVE-2025-24434
CWE-285 High
No
No
1.3.3-p12, 1.3.4-p11, 1.3.5-p9, 1.4.2-p4, 1.5.1 11.02.2025 SB2025021201
#VU103850 - Incorrect Authorization
CVE-2025-24407
CWE-863 Medium
No
No
1.3.3-p12, 1.3.4-p11, 1.3.5-p9, 1.4.2-p4, 1.5.1 11.02.2025 SB2025021201


Showing elements 81 - 100 out of 138