Known vulnerabilities in Magento Open Source 2.4.7-beta1 - page 4

Vendor: Adobe
Version: 2.4.7-beta1
Software CPE: cpe:2.3:a:adobe:magento:*:*:*:*:*:*:*:*
Total vulnerabilities: 138
Public exploits: 2
Known exploited (KEV): 3
Highest CVSSv4 Score: 9.3

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting Magento Open Source version 2.4.7-beta1 Magento Open Source 2.4.7-beta1 is affected by 138 vulnerabilities: 1 critical, 20 high, 37 medium, 80 low Critical High Medium Low

Vulnerabilities (138)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU113915 - Improper input validation
CVE-2025-49559
CWE-20 Medium
No
No
2.4.5-p14, 2.4.6-p12, 2.4.7-p7, 2.4.8-p2, 2.4.9 alpha2 12.08.2025 SB2025081285
#VU113914 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
CVE-2025-49558
CWE-362 Medium
No
No
2.4.5-p14, 2.4.6-p12, 2.4.7-p7, 2.4.8-p2, 2.4.9 alpha2 12.08.2025 SB2025081285
#VU113913 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2025-49557
CWE-79 Low
No
No
2.4.5-p14, 2.4.6-p12, 2.4.7-p7, 2.4.8-p2, 2.4.9 alpha2 12.08.2025 SB2025081285
#VU113912 - Incorrect Authorization
CVE-2025-49556
CWE-863 High
No
No
2.4.5-p14, 2.4.6-p12, 2.4.7-p7, 2.4.8-p2, 2.4.9 alpha2 12.08.2025 SB2025081285
#VU113911 - Cross-Site Request Forgery (CSRF)
CVE-2025-49555
CWE-352 Medium
No
No
2.4.5-p14, 2.4.6-p12, 2.4.7-p7, 2.4.8-p2, 2.4.9 alpha2 12.08.2025 SB2025081285
#VU113908 - Improper input validation
CVE-2025-49554
CWE-20 Medium
No
No
2.4.5-p14, 2.4.6-p12, 2.4.7-p7, 2.4.8-p2, 2.4.9 alpha2 12.08.2025 SB2025081285
#VU111022 - Improper Access Control
CVE-2025-27206
CWE-284 Medium
No
No
2.4.5-p13, 2.4.6-p11, 2.4.7-p6, 2.4.8-p1, 2.4.9 alpha1 10.06.2025 SB20250610110
#VU111021 - Missing Authorization
CVE-2025-43585
CWE-862 High
No
No
2.4.5-p13, 2.4.6-p11, 2.4.7-p6, 2.4.8-p1, 2.4.9 alpha1 10.06.2025 SB20250610110
#VU111020 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2025-47110
CWE-79 Low
No
No
2.4.5-p13, 2.4.6-p11, 2.4.7-p6, 2.4.8-p1, 2.4.9 alpha1 10.06.2025 SB20250610110
#VU107830 - Insufficiently Protected Credentials
CVE-2025-27192
CWE-522 Low
No
No
2.4.4-p13, 2.4.5-p12, 2.4.6-p10, 2.4.7-p5, 2.4.8 23.04.2025 SB2025042302
#VU107829 - Improper Access Control
CVE-2025-27191
CWE-284 Medium
No
No
2.4.4-p13, 2.4.5-p12, 2.4.6-p10, 2.4.7-p5, 2.4.8 23.04.2025 SB2025042302
#VU107828 - Improper Access Control
CVE-2025-27190
CWE-284 Medium
No
No
2.4.4-p13, 2.4.5-p12, 2.4.6-p10, 2.4.7-p5, 2.4.8 23.04.2025 SB2025042302
#VU107826 - Improper Authorization
CVE-2025-27188
CWE-285 Low
No
No
2.4.4-p13, 2.4.5-p12, 2.4.6-p10, 2.4.7-p5, 2.4.8 23.04.2025 SB2025042302
#VU103857 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2025-24412
CWE-79 Low
No
No
2.4.4-p12, 2.4.5-p11, 2.4.6-p9, 2.4.7-beta2, 2.4.7-p4 11.02.2025 SB2025021201
#VU103864 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2025-24428
CWE-79 Low
No
No
2.4.4-p12, 2.4.5-p11, 2.4.6-p9, 2.4.7-beta2, 2.4.7-p4 11.02.2025 SB2025021201
#VU103855 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2025-24410
CWE-79 Low
No
No
2.4.4-p12, 2.4.5-p11, 2.4.6-p9, 2.4.7-beta2, 2.4.7-p4 11.02.2025 SB2025021201
#VU103854 - Improper Authorization
CVE-2025-24409
CWE-285 High
No
No
2.4.4-p12, 2.4.5-p11, 2.4.6-p9, 2.4.7-beta2, 2.4.7-p4 11.02.2025 SB2025021201
#VU103853 - Exposure of sensitive information to an unauthorized actor
CVE-2025-24408
CWE-200 Medium
No
No
2.4.4-p12, 2.4.5-p11, 2.4.6-p9, 2.4.7-beta2, 2.4.7-p4 11.02.2025 SB2025021201
#VU103852 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2025-24406
CWE-22 High
No
No
2.4.4-p12, 2.4.5-p11, 2.4.6-p9, 2.4.7-beta2, 2.4.7-p4 11.02.2025 SB2025021201
#VU103851 - Improper Authorization
CVE-2025-24434
CWE-285 High
No
No
2.4.4-p12, 2.4.5-p11, 2.4.6-p9, 2.4.7-beta2, 2.4.7-p4 11.02.2025 SB2025021201


Showing elements 61 - 80 out of 138