Known vulnerabilities in Adobe Commerce B2B - page 6

Vendor: Adobe
Software CPE: cpe:2.3:a:adobe:adobe_commerce_b2b:*:*:*:*:*:*:*:*
Total vulnerabilities: 129
Public exploits: 1
Known exploited (KEV): 2
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Adobe Commerce B2B Adobe Commerce B2B is affected by 129 known vulnerabilities: 1 critical, 17 high, 35 medium, 76 low Critical High Medium Low

Vulnerabilities (129)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU103880 - Time-of-check Time-of-use (TOCTOU) Race Condition
CVE-2025-24432
CWE-367 Medium
No
No
1.3.3-p12, 1.3.4-p11, 1.3.5-p9, 1.4.2-p4, 1.5.1 12.02.2025 SB2025021201
#VU103879 - Time-of-check Time-of-use (TOCTOU) Race Condition
CVE-2025-24430
CWE-367 Medium
No
No
1.3.3-p12, 1.3.4-p11, 1.3.5-p9, 1.4.2-p4, 1.5.1 12.02.2025 SB2025021201
#VU103878 - Improper Access Control
CVE-2025-24429
CWE-284 Low
No
No
1.3.3-p12, 1.3.4-p11, 1.3.5-p9, 1.4.2-p4, 1.5.1 12.02.2025 SB2025021201
#VU103877 - Improper Access Control
CVE-2025-24427
CWE-284 Low
No
No
1.3.3-p12, 1.3.4-p11, 1.3.5-p9, 1.4.2-p4, 1.5.1 12.02.2025 SB2025021201
#VU103876 - Improper Access Control
CVE-2025-24426
CWE-284 Low
No
No
1.3.3-p12, 1.3.4-p11, 1.3.5-p9, 1.4.2-p4, 1.5.1 12.02.2025 SB2025021201
#VU103875 - Business Logic Errors (3.0)
CVE-2025-24425
CWE-840 Medium
No
No
1.3.3-p12, 1.3.4-p11, 1.3.5-p9, 1.4.2-p4, 1.5.1 12.02.2025 SB2025021201
#VU103874 - Improper Access Control
CVE-2025-24424
CWE-284 Low
No
No
1.3.3-p12, 1.3.4-p11, 1.3.5-p9, 1.4.2-p4, 1.5.1 12.02.2025 SB2025021201
#VU98449 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2024-45127
CWE-79 Low
No
No
1.3.3-p11, 1.3.4-p10, 1.3.5-p8, 1.4.2-p3 14.10.2024 SB2024101447
#VU98448 - Improper Access Control
CVE-2024-45125
CWE-284 Low
No
No
1.3.3-p11, 1.3.4-p10, 1.3.5-p8, 1.4.2-p3 14.10.2024 SB2024101447
#VU98447 - Improper Access Control
CVE-2024-45124
CWE-284 Medium
No
No
1.3.3-p11, 1.3.4-p10, 1.3.5-p8, 1.4.2-p3 14.10.2024 SB2024101447
#VU98446 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2024-45123
CWE-79 Medium
No
No
1.3.3-p11, 1.3.4-p10, 1.3.5-p8, 1.4.2-p3 14.10.2024 SB2024101447
#VU98445 - Improper Access Control
CVE-2024-45122
CWE-284 Low
No
No
1.3.3-p11, 1.3.4-p10, 1.3.5-p8, 1.4.2-p3 14.10.2024 SB2024101447
#VU98427 - Improper Access Control
CVE-2024-45121
CWE-284 Low
No
No
1.3.3-p11, 1.3.4-p10, 1.3.5-p8, 1.4.2-p3 12.10.2024 SB2024101447
#VU98426 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
CVE-2024-45120
CWE-362 Low
No
No
1.3.3-p11, 1.3.4-p10, 1.3.5-p8, 1.4.2-p3 12.10.2024 SB2024101447
#VU98332 - Server-Side Request Forgery (SSRF)
CVE-2024-45119
CWE-918 Low
No
No
1.3.3-p11, 1.3.4-p10, 1.3.5-p8, 1.4.2-p3 09.10.2024 SB2024101447
#VU98331 - Improper Access Control
CVE-2024-45118
CWE-284 Medium
No
No
1.3.3-p11, 1.3.4-p10, 1.3.5-p8, 1.4.2-p3 09.10.2024 SB2024101447
#VU98330 - Improper input validation
CVE-2024-45117
CWE-20 Low
No
No
1.3.3-p11, 1.3.4-p10, 1.3.5-p8, 1.4.2-p3 09.10.2024 SB2024101447
#VU98329 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2024-45116
CWE-79 Low
No
No
1.3.3-p11, 1.3.4-p10, 1.3.5-p8, 1.4.2-p3 09.10.2024 SB2024101447
#VU98328 - Improper Authentication
CVE-2024-45148
CWE-287 High
No
No
1.3.3-p11, 1.3.4-p10, 1.3.5-p8, 1.4.2-p3 09.10.2024 SB2024101447
#VU98327 - Improper Authentication
CVE-2024-45115
CWE-287 High
No
No
1.3.3-p11, 1.3.4-p10, 1.3.5-p8, 1.4.2-p3 09.10.2024 SB2024101447


Showing elements 101 - 120 out of 129