Known vulnerabilities in Adobe Commerce B2B - page 6
Vendor:
Adobe
Software:
Adobe Commerce B2B
Software CPE:
cpe:2.3:a:adobe:adobe_commerce_b2b:*:*:*:*:*:*:*:*
Website:
https://www.adobe.com
Total vulnerabilities:
129
Public exploits:
1
Known exploited (KEV):
2
Highest CVSSv4 Score:
9.3
Breakdown by Severity Chart
1.3.3-2026-aug
1.3.4-2026-aug
1.4.2-2026-aug
1.5.2-2026-aug
1.5.3-2026-aug
1.3.3-2026-jul
1.3.4-2026-jul
1.4.2-2026-jul
1.5.2-2026-jul
1.5.3-2026-jul
1.3.3-p18
1.3.4-p17
1.4.2-p10
1.5.3
1.5.2-p5
1.3.3‑p17
1.3.5‑p14
1.4.2‑p9
1.5.3-beta1
1.5.2-p4
1.3.4-p16
1.5.3-alpha3
1.5.2-p3
1.4.2-p8
1.3.5-p13
1.3.4-p15
1.3.3-p16
1.5.3-alpha2
1.5.2-p2
1.4.2-p7
1.3.5-p12
1.3.4-p14
1.3.3-p15
1.3.3-p14
1.3.4-p13
1.4.2-p6
1.5.2-p1
1.5.3-alpha1
1.5.2
1.3.3-p13
1.4.2-p5
1.3.5-p10
1.3.4-p12
1.3.3-p12
1.3.4-p11
1.3.5-p9
1.4.2-p4
1.5.1
1.5.0
1.3.5-p6
1.3.5-p5
1.3.5-p4
1.3.5-p3
1.3.5-p2
1.3.5-p1
1.3.4-p9
1.3.4-p8
1.3.4-p7
1.3.4-p6
1.3.4-p5
1.3.4-p4
1.3.4-p3
1.3.4-p2
1.3.4-p1
1.3.3-p11
1.3.3-p10
1.3.3-p9
1.3.3-p8
1.3.3-p7
1.3.3-p6
1.3.3-p5
1.3.3-p4
1.3.3-p3
1.3.3-p2
1.3.3-p1
1.4.2-p3
1.4.2-p2
1.4.2-p1
1.4.2
1.4.1
1.4.0
1.3.5-p8
1.3.5-p7
1.3.5
1.3.4-p10
1.3.4
1.3.3
1.3.2
Vulnerabilities (129)
| Vulnerability | CWE-ID | CSH Severity | Public Exploit | KEV | First fixed release | Published | Bulletins |
|---|---|---|---|---|---|---|---|
| #VU103880 - Time-of-check Time-of-use (TOCTOU) Race Condition CVE-2025-24432 |
CWE-367 | Medium | 1.3.3-p12, 1.3.4-p11, 1.3.5-p9, 1.4.2-p4, 1.5.1 | 12.02.2025 |
SB2025021201 |
||
| #VU103879 - Time-of-check Time-of-use (TOCTOU) Race Condition CVE-2025-24430 |
CWE-367 | Medium | 1.3.3-p12, 1.3.4-p11, 1.3.5-p9, 1.4.2-p4, 1.5.1 | 12.02.2025 |
SB2025021201 |
||
| #VU103878 - Improper Access Control CVE-2025-24429 |
CWE-284 | Low | 1.3.3-p12, 1.3.4-p11, 1.3.5-p9, 1.4.2-p4, 1.5.1 | 12.02.2025 |
SB2025021201 |
||
| #VU103877 - Improper Access Control CVE-2025-24427 |
CWE-284 | Low | 1.3.3-p12, 1.3.4-p11, 1.3.5-p9, 1.4.2-p4, 1.5.1 | 12.02.2025 |
SB2025021201 |
||
| #VU103876 - Improper Access Control CVE-2025-24426 |
CWE-284 | Low | 1.3.3-p12, 1.3.4-p11, 1.3.5-p9, 1.4.2-p4, 1.5.1 | 12.02.2025 |
SB2025021201 |
||
| #VU103875 - Business Logic Errors (3.0) CVE-2025-24425 |
CWE-840 | Medium | 1.3.3-p12, 1.3.4-p11, 1.3.5-p9, 1.4.2-p4, 1.5.1 | 12.02.2025 |
SB2025021201 |
||
| #VU103874 - Improper Access Control CVE-2025-24424 |
CWE-284 | Low | 1.3.3-p12, 1.3.4-p11, 1.3.5-p9, 1.4.2-p4, 1.5.1 | 12.02.2025 |
SB2025021201 |
||
| #VU98449 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') CVE-2024-45127 |
CWE-79 | Low | 1.3.3-p11, 1.3.4-p10, 1.3.5-p8, 1.4.2-p3 | 14.10.2024 |
SB2024101447 |
||
| #VU98448 - Improper Access Control CVE-2024-45125 |
CWE-284 | Low | 1.3.3-p11, 1.3.4-p10, 1.3.5-p8, 1.4.2-p3 | 14.10.2024 |
SB2024101447 |
||
| #VU98447 - Improper Access Control CVE-2024-45124 |
CWE-284 | Medium | 1.3.3-p11, 1.3.4-p10, 1.3.5-p8, 1.4.2-p3 | 14.10.2024 |
SB2024101447 |
||
| #VU98446 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') CVE-2024-45123 |
CWE-79 | Medium | 1.3.3-p11, 1.3.4-p10, 1.3.5-p8, 1.4.2-p3 | 14.10.2024 |
SB2024101447 |
||
| #VU98445 - Improper Access Control CVE-2024-45122 |
CWE-284 | Low | 1.3.3-p11, 1.3.4-p10, 1.3.5-p8, 1.4.2-p3 | 14.10.2024 |
SB2024101447 |
||
| #VU98427 - Improper Access Control CVE-2024-45121 |
CWE-284 | Low | 1.3.3-p11, 1.3.4-p10, 1.3.5-p8, 1.4.2-p3 | 12.10.2024 |
SB2024101447 |
||
| #VU98426 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') CVE-2024-45120 |
CWE-362 | Low | 1.3.3-p11, 1.3.4-p10, 1.3.5-p8, 1.4.2-p3 | 12.10.2024 |
SB2024101447 |
||
| #VU98332 - Server-Side Request Forgery (SSRF) CVE-2024-45119 |
CWE-918 | Low | 1.3.3-p11, 1.3.4-p10, 1.3.5-p8, 1.4.2-p3 | 09.10.2024 |
SB2024101447 |
||
| #VU98331 - Improper Access Control CVE-2024-45118 |
CWE-284 | Medium | 1.3.3-p11, 1.3.4-p10, 1.3.5-p8, 1.4.2-p3 | 09.10.2024 |
SB2024101447 |
||
| #VU98330 - Improper input validation CVE-2024-45117 |
CWE-20 | Low | 1.3.3-p11, 1.3.4-p10, 1.3.5-p8, 1.4.2-p3 | 09.10.2024 |
SB2024101447 |
||
| #VU98329 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') CVE-2024-45116 |
CWE-79 | Low | 1.3.3-p11, 1.3.4-p10, 1.3.5-p8, 1.4.2-p3 | 09.10.2024 |
SB2024101447 |
||
| #VU98328 - Improper Authentication CVE-2024-45148 |
CWE-287 | High | 1.3.3-p11, 1.3.4-p10, 1.3.5-p8, 1.4.2-p3 | 09.10.2024 |
SB2024101447 |
||
| #VU98327 - Improper Authentication CVE-2024-45115 |
CWE-287 | High | 1.3.3-p11, 1.3.4-p10, 1.3.5-p8, 1.4.2-p3 | 09.10.2024 |
SB2024101447 |
Showing elements 101 - 120 out of 129