Known vulnerabilities in Magento Open Source 2.4.7-beta1 - page 6

Vendor: Adobe
Version: 2.4.7-beta1
Software CPE: cpe:2.3:a:adobe:magento:*:*:*:*:*:*:*:*
Total vulnerabilities: 145
Public exploits: 3
Known exploited (KEV): 4

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting Magento Open Source version 2.4.7-beta1 Magento Open Source 2.4.7-beta1 is affected by 145 vulnerabilities: 2 critical, 22 high, 39 medium, 82 low Critical High Medium Low

Vulnerabilities (145)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU103880 - Time-of-check Time-of-use (TOCTOU) Race Condition
CVE-2025-24432
CWE-367 Medium
No
No
2.4.4-p12, 2.4.5-p11, 2.4.6-p9, 2.4.7-beta2, 2.4.7-p4 12.02.2025 SB2025021201
#VU103879 - Time-of-check Time-of-use (TOCTOU) Race Condition
CVE-2025-24430
CWE-367 Medium
No
No
2.4.4-p12, 2.4.5-p11, 2.4.6-p9, 2.4.7-beta2, 2.4.7-p4 12.02.2025 SB2025021201
#VU103878 - Improper Access Control
CVE-2025-24429
CWE-284 Low
No
No
2.4.4-p12, 2.4.5-p11, 2.4.6-p9, 2.4.7-beta2, 2.4.7-p4 12.02.2025 SB2025021201
#VU103877 - Improper Access Control
CVE-2025-24427
CWE-284 Low
No
No
2.4.4-p12, 2.4.5-p11, 2.4.6-p9, 2.4.7-beta2, 2.4.7-p4 12.02.2025 SB2025021201
#VU98473 - Improper Access Control
CVE-2024-45132
CWE-284 Medium
No
No
2.4.4-p11, 2.4.5-p10, 2.4.6-p8, 2.4.7-p3 14.10.2024 SB2024101447
#VU98472 - Improper Access Control
CVE-2024-45131
CWE-284 Medium
No
No
2.4.4-p11, 2.4.5-p10, 2.4.6-p8, 2.4.7-p3 14.10.2024 SB2024101447
#VU98452 - Improper Access Control
CVE-2024-45130
CWE-284 Low
No
No
2.4.4-p11, 2.4.5-p10, 2.4.6-p8, 2.4.7-p3 14.10.2024 SB2024101447
#VU98451 - Improper Access Control
CVE-2024-45129
CWE-284 Low
No
No
2.4.4-p11, 2.4.5-p10, 2.4.6-p8, 2.4.7-p3 14.10.2024 SB2024101447
#VU98450 - Improper Access Control
CVE-2024-45128
CWE-284 Low
No
No
2.4.4-p11, 2.4.5-p10, 2.4.6-p8, 2.4.7-p3 14.10.2024 SB2024101447
#VU98449 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2024-45127
CWE-79 Low
No
No
2.4.4-p11, 2.4.5-p10, 2.4.6-p8, 2.4.7-p3 14.10.2024 SB2024101447
#VU98448 - Improper Access Control
CVE-2024-45125
CWE-284 Low
No
No
2.4.4-p11, 2.4.5-p10, 2.4.6-p8, 2.4.7-p3 14.10.2024 SB2024101447
#VU98447 - Improper Access Control
CVE-2024-45124
CWE-284 Medium
No
No
2.4.4-p11, 2.4.5-p10, 2.4.6-p8, 2.4.7-p3 14.10.2024 SB2024101447
#VU98446 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2024-45123
CWE-79 Medium
No
No
2.4.4-p11, 2.4.5-p10, 2.4.6-p8, 2.4.7-p3 14.10.2024 SB2024101447
#VU98445 - Improper Access Control
CVE-2024-45122
CWE-284 Low
No
No
2.4.4-p11, 2.4.5-p10, 2.4.6-p8, 2.4.7-p3 14.10.2024 SB2024101447
#VU98427 - Improper Access Control
CVE-2024-45121
CWE-284 Low
No
No
2.4.4-p11, 2.4.5-p10, 2.4.6-p8, 2.4.7-p3 12.10.2024 SB2024101447
#VU98426 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
CVE-2024-45120
CWE-362 Low
No
No
2.4.4-p11, 2.4.5-p10, 2.4.6-p8, 2.4.7-p3 12.10.2024 SB2024101447
#VU98332 - Server-Side Request Forgery (SSRF)
CVE-2024-45119
CWE-918 Low
No
No
2.4.4-p11, 2.4.5-p10, 2.4.6-p8, 2.4.7-p3 09.10.2024 SB2024101447
#VU98331 - Improper Access Control
CVE-2024-45118
CWE-284 Medium
No
No
2.4.4-p11, 2.4.5-p10, 2.4.6-p8, 2.4.7-p3 09.10.2024 SB2024101447
#VU98330 - Improper input validation
CVE-2024-45117
CWE-20 Low
No
No
2.4.4-p11, 2.4.5-p10, 2.4.6-p8, 2.4.7-p3 09.10.2024 SB2024101447
#VU98329 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2024-45116
CWE-79 Low
No
No
2.4.4-p11, 2.4.5-p10, 2.4.6-p8, 2.4.7-p3 09.10.2024 SB2024101447


Showing elements 101 - 120 out of 145