Known vulnerabilities in Adobe Commerce B2B - page 6

Vendor: Adobe
Software CPE: cpe:2.3:a:adobe:adobe_commerce_b2b:*:*:*:*:*:*:*:*
Total vulnerabilities: 138
Public exploits: 2
Known exploited (KEV): 3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Adobe Commerce B2B Adobe Commerce B2B is affected by 138 known vulnerabilities: 2 critical, 20 high, 38 medium, 78 low Critical High Medium Low

Vulnerabilities (138)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU103880 - Time-of-check Time-of-use (TOCTOU) Race Condition
CVE-2025-24432
CWE-367 Medium
No
No
1.3.3-p12, 1.3.4-p11, 1.3.5-p9, 1.4.2-p4, 1.5.1 12.02.2025 SB2025021201
#VU103879 - Time-of-check Time-of-use (TOCTOU) Race Condition
CVE-2025-24430
CWE-367 Medium
No
No
1.3.3-p12, 1.3.4-p11, 1.3.5-p9, 1.4.2-p4, 1.5.1 12.02.2025 SB2025021201
#VU103878 - Improper Access Control
CVE-2025-24429
CWE-284 Low
No
No
1.3.3-p12, 1.3.4-p11, 1.3.5-p9, 1.4.2-p4, 1.5.1 12.02.2025 SB2025021201
#VU103877 - Improper Access Control
CVE-2025-24427
CWE-284 Low
No
No
1.3.3-p12, 1.3.4-p11, 1.3.5-p9, 1.4.2-p4, 1.5.1 12.02.2025 SB2025021201
#VU103876 - Improper Access Control
CVE-2025-24426
CWE-284 Low
No
No
1.3.3-p12, 1.3.4-p11, 1.3.5-p9, 1.4.2-p4, 1.5.1 12.02.2025 SB2025021201
#VU103875 - Business Logic Errors (3.0)
CVE-2025-24425
CWE-840 Medium
No
No
1.3.3-p12, 1.3.4-p11, 1.3.5-p9, 1.4.2-p4, 1.5.1 12.02.2025 SB2025021201
#VU103874 - Improper Access Control
CVE-2025-24424
CWE-284 Low
No
No
1.3.3-p12, 1.3.4-p11, 1.3.5-p9, 1.4.2-p4, 1.5.1 12.02.2025 SB2025021201
#VU103873 - Improper Access Control
CVE-2025-24437
CWE-284 Medium
No
No
1.3.3-p12, 1.3.4-p11, 1.3.5-p9, 1.4.2-p4, 1.5.1 12.02.2025 SB2025021201
#VU103872 - Improper Access Control
CVE-2025-24436
CWE-284 Low
No
No
1.3.3-p12, 1.3.4-p11, 1.3.5-p9, 1.4.2-p4, 1.5.1 12.02.2025 SB2025021201
#VU103871 - Improper Access Control
CVE-2025-24435
CWE-284 Low
No
No
1.3.3-p12, 1.3.4-p11, 1.3.5-p9, 1.4.2-p4, 1.5.1 12.02.2025 SB2025021201
#VU103870 - Improper Access Control
CVE-2025-24423
CWE-284 Low
No
No
1.3.3-p12, 1.3.4-p11, 1.3.5-p9, 1.4.2-p4, 1.5.1 12.02.2025 SB2025021201
#VU103869 - Improper Access Control
CVE-2025-24422
CWE-284 Low
No
No
1.3.3-p12, 1.3.4-p11, 1.3.5-p9, 1.4.2-p4, 1.5.1 12.02.2025 SB2025021201
#VU103868 - Incorrect Authorization
CVE-2025-24421
CWE-863 Low
No
No
1.3.3-p12, 1.3.4-p11, 1.3.5-p9, 1.4.2-p4, 1.5.1 12.02.2025 SB2025021201
#VU103867 - Incorrect Authorization
CVE-2025-24420
CWE-863 Low
No
No
1.3.3-p12, 1.3.4-p11, 1.3.5-p9, 1.4.2-p4, 1.5.1 12.02.2025 SB2025021201
#VU103866 - Incorrect Authorization
CVE-2025-24419
CWE-863 Low
No
No
1.3.3-p12, 1.3.4-p11, 1.3.5-p9, 1.4.2-p4, 1.5.1 12.02.2025 SB2025021201
#VU103865 - Violation of Secure Design Principles
CVE-2025-24418
CWE-657 Low
No
No
1.3.3-p12, 1.3.4-p11, 1.3.5-p9, 1.4.2-p4, 1.5.1 12.02.2025 SB2025021201
#VU98332 - Server-Side Request Forgery (SSRF)
CVE-2024-45119
CWE-918 Low
No
No
1.3.3-p11, 1.3.4-p10, 1.3.5-p8, 1.4.2-p3 09.10.2024 SB2024101447
#VU98331 - Improper Access Control
CVE-2024-45118
CWE-284 Medium
No
No
1.3.3-p11, 1.3.4-p10, 1.3.5-p8, 1.4.2-p3 09.10.2024 SB2024101447
#VU98330 - Improper input validation
CVE-2024-45117
CWE-20 Low
No
No
1.3.3-p11, 1.3.4-p10, 1.3.5-p8, 1.4.2-p3 09.10.2024 SB2024101447
#VU98327 - Improper Authentication
CVE-2024-45115
CWE-287 High
No
No
1.3.3-p11, 1.3.4-p10, 1.3.5-p8, 1.4.2-p3 09.10.2024 SB2024101447


Showing elements 101 - 120 out of 138