Known vulnerabilities in Adobe Commerce B2B - page 5

Vendor: Adobe
Software CPE: cpe:2.3:a:adobe:adobe_commerce_b2b:*:*:*:*:*:*:*:*
Total vulnerabilities: 129
Public exploits: 1
Known exploited (KEV): 2
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Adobe Commerce B2B Adobe Commerce B2B is affected by 129 known vulnerabilities: 1 critical, 17 high, 35 medium, 76 low Critical High Medium Low

Vulnerabilities (129)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU103873 - Improper Access Control
CVE-2025-24437
CWE-284 Medium
No
No
1.3.3-p12, 1.3.4-p11, 1.3.5-p9, 1.4.2-p4, 1.5.1 12.02.2025 SB2025021201
#VU103872 - Improper Access Control
CVE-2025-24436
CWE-284 Low
No
No
1.3.3-p12, 1.3.4-p11, 1.3.5-p9, 1.4.2-p4, 1.5.1 12.02.2025 SB2025021201
#VU103871 - Improper Access Control
CVE-2025-24435
CWE-284 Low
No
No
1.3.3-p12, 1.3.4-p11, 1.3.5-p9, 1.4.2-p4, 1.5.1 12.02.2025 SB2025021201
#VU103870 - Improper Access Control
CVE-2025-24423
CWE-284 Low
No
No
1.3.3-p12, 1.3.4-p11, 1.3.5-p9, 1.4.2-p4, 1.5.1 12.02.2025 SB2025021201
#VU103869 - Improper Access Control
CVE-2025-24422
CWE-284 Low
No
No
1.3.3-p12, 1.3.4-p11, 1.3.5-p9, 1.4.2-p4, 1.5.1 12.02.2025 SB2025021201
#VU103868 - Incorrect Authorization
CVE-2025-24421
CWE-863 Low
No
No
1.3.3-p12, 1.3.4-p11, 1.3.5-p9, 1.4.2-p4, 1.5.1 12.02.2025 SB2025021201
#VU103867 - Incorrect Authorization
CVE-2025-24420
CWE-863 Low
No
No
1.3.3-p12, 1.3.4-p11, 1.3.5-p9, 1.4.2-p4, 1.5.1 12.02.2025 SB2025021201
#VU103866 - Incorrect Authorization
CVE-2025-24419
CWE-863 Low
No
No
1.3.3-p12, 1.3.4-p11, 1.3.5-p9, 1.4.2-p4, 1.5.1 12.02.2025 SB2025021201
#VU103865 - Violation of Secure Design Principles
CVE-2025-24418
CWE-657 Low
No
No
1.3.3-p12, 1.3.4-p11, 1.3.5-p9, 1.4.2-p4, 1.5.1 12.02.2025 SB2025021201
#VU103858 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2025-24438
CWE-79 Low
No
No
1.3.3-p12, 1.3.4-p11, 1.3.5-p9, 1.4.2-p4, 1.5.1 11.02.2025 SB2025021201
#VU103859 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2025-24413
CWE-79 Low
No
No
1.3.3-p12, 1.3.4-p11, 1.3.5-p9, 1.4.2-p4, 1.5.1 11.02.2025 SB2025021201
#VU103860 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2025-24414
CWE-79 Low
No
No
1.3.3-p12, 1.3.4-p11, 1.3.5-p9, 1.4.2-p4, 1.5.1 11.02.2025 SB2025021201
#VU103861 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2025-24415
CWE-79 Low
No
No
1.3.3-p12, 1.3.4-p11, 1.3.5-p9, 1.4.2-p4, 1.5.1 11.02.2025 SB2025021201
#VU103862 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2025-24416
CWE-79 Low
No
No
1.3.3-p12, 1.3.4-p11, 1.3.5-p9, 1.4.2-p4, 1.5.1 11.02.2025 SB2025021201
#VU103863 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2025-24417
CWE-79 Low
No
No
1.3.3-p12, 1.3.4-p11, 1.3.5-p9, 1.4.2-p4, 1.5.1 11.02.2025 SB2025021201
#VU103856 - Improper Access Control
CVE-2025-24411
CWE-284 Medium
No
No
1.3.3-p12, 1.3.4-p11, 1.3.5-p9, 1.4.2-p4, 1.5.1 11.02.2025 SB2025021201
#VU103855 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2025-24410
CWE-79 Low
No
No
1.3.3-p12, 1.3.4-p11, 1.3.5-p9, 1.4.2-p4, 1.5.1 11.02.2025 SB2025021201
#VU103854 - Improper Authorization
CVE-2025-24409
CWE-285 High
No
No
1.3.3-p12, 1.3.4-p11, 1.3.5-p9, 1.4.2-p4, 1.5.1 11.02.2025 SB2025021201
#VU103853 - Exposure of sensitive information to an unauthorized actor
CVE-2025-24408
CWE-200 Medium
No
No
1.3.3-p12, 1.3.4-p11, 1.3.5-p9, 1.4.2-p4, 1.5.1 11.02.2025 SB2025021201
#VU103850 - Incorrect Authorization
CVE-2025-24407
CWE-863 Medium
No
No
1.3.3-p12, 1.3.4-p11, 1.3.5-p9, 1.4.2-p4, 1.5.1 11.02.2025 SB2025021201


Showing elements 81 - 100 out of 129