Known vulnerabilities in Magento Open Source 2.4.7-beta1 - page 5

Vendor: Adobe
Version: 2.4.7-beta1
Software CPE: cpe:2.3:a:adobe:magento:*:*:*:*:*:*:*:*
Total vulnerabilities: 138
Public exploits: 2
Known exploited (KEV): 3
Highest CVSSv4 Score: 9.3

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting Magento Open Source version 2.4.7-beta1 Magento Open Source 2.4.7-beta1 is affected by 138 vulnerabilities: 1 critical, 20 high, 37 medium, 80 low Critical High Medium Low

Vulnerabilities (138)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU103880 - Time-of-check Time-of-use (TOCTOU) Race Condition
CVE-2025-24432
CWE-367 Medium
No
No
2.4.4-p12, 2.4.5-p11, 2.4.6-p9, 2.4.7-beta2, 2.4.7-p4 12.02.2025 SB2025021201
#VU103879 - Time-of-check Time-of-use (TOCTOU) Race Condition
CVE-2025-24430
CWE-367 Medium
No
No
2.4.4-p12, 2.4.5-p11, 2.4.6-p9, 2.4.7-beta2, 2.4.7-p4 12.02.2025 SB2025021201
#VU103878 - Improper Access Control
CVE-2025-24429
CWE-284 Low
No
No
2.4.4-p12, 2.4.5-p11, 2.4.6-p9, 2.4.7-beta2, 2.4.7-p4 12.02.2025 SB2025021201
#VU103877 - Improper Access Control
CVE-2025-24427
CWE-284 Low
No
No
2.4.4-p12, 2.4.5-p11, 2.4.6-p9, 2.4.7-beta2, 2.4.7-p4 12.02.2025 SB2025021201
#VU103875 - Business Logic Errors (3.0)
CVE-2025-24425
CWE-840 Medium
No
No
2.4.4-p12, 2.4.5-p11, 2.4.6-p9, 2.4.7-beta2, 2.4.7-p4 12.02.2025 SB2025021201
#VU103873 - Improper Access Control
CVE-2025-24437
CWE-284 Medium
No
No
2.4.4-p12, 2.4.5-p11, 2.4.6-p9, 2.4.7-beta2, 2.4.7-p4 12.02.2025 SB2025021201
#VU103872 - Improper Access Control
CVE-2025-24436
CWE-284 Low
No
No
2.4.4-p12, 2.4.5-p11, 2.4.6-p9, 2.4.7-beta2, 2.4.7-p4 12.02.2025 SB2025021201
#VU103871 - Improper Access Control
CVE-2025-24435
CWE-284 Low
No
No
2.4.4-p12, 2.4.5-p11, 2.4.6-p9, 2.4.7-beta2, 2.4.7-p4 12.02.2025 SB2025021201
#VU103868 - Incorrect Authorization
CVE-2025-24421
CWE-863 Low
No
No
2.4.4-p12, 2.4.5-p11, 2.4.6-p9, 2.4.7-beta2, 2.4.7-p4 12.02.2025 SB2025021201
#VU103867 - Incorrect Authorization
CVE-2025-24420
CWE-863 Low
No
No
2.4.4-p12, 2.4.5-p11, 2.4.6-p9, 2.4.7-beta2, 2.4.7-p4 12.02.2025 SB2025021201
#VU103858 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2025-24438
CWE-79 Low
No
No
2.4.4-p12, 2.4.5-p11, 2.4.6-p9, 2.4.7-beta2, 2.4.7-p4 11.02.2025 SB2025021201
#VU103859 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2025-24413
CWE-79 Low
No
No
2.4.4-p12, 2.4.5-p11, 2.4.6-p9, 2.4.7-beta2, 2.4.7-p4 11.02.2025 SB2025021201
#VU103860 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2025-24414
CWE-79 Low
No
No
2.4.4-p12, 2.4.5-p11, 2.4.6-p9, 2.4.7-beta2, 2.4.7-p4 11.02.2025 SB2025021201
#VU103861 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2025-24415
CWE-79 Low
No
No
2.4.4-p12, 2.4.5-p11, 2.4.6-p9, 2.4.7-beta2, 2.4.7-p4 11.02.2025 SB2025021201
#VU103862 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2025-24416
CWE-79 Low
No
No
2.4.4-p12, 2.4.5-p11, 2.4.6-p9, 2.4.7-beta2, 2.4.7-p4 11.02.2025 SB2025021201
#VU103863 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2025-24417
CWE-79 Low
No
No
2.4.4-p12, 2.4.5-p11, 2.4.6-p9, 2.4.7-beta2, 2.4.7-p4 11.02.2025 SB2025021201
#VU103856 - Improper Access Control
CVE-2025-24411
CWE-284 Medium
No
No
2.4.4-p12, 2.4.5-p11, 2.4.6-p9, 2.4.7-beta2, 2.4.7-p4 11.02.2025 SB2025021201
#VU98332 - Server-Side Request Forgery (SSRF)
CVE-2024-45119
CWE-918 Low
No
No
2.4.4-p11, 2.4.5-p10, 2.4.6-p8, 2.4.7-p3 09.10.2024 SB2024101447
#VU98331 - Improper Access Control
CVE-2024-45118
CWE-284 Medium
No
No
2.4.4-p11, 2.4.5-p10, 2.4.6-p8, 2.4.7-p3 09.10.2024 SB2024101447
#VU98330 - Improper input validation
CVE-2024-45117
CWE-20 Low
No
No
2.4.4-p11, 2.4.5-p10, 2.4.6-p8, 2.4.7-p3 09.10.2024 SB2024101447


Showing elements 81 - 100 out of 138