Known vulnerabilities in Magento Open Source 2.4.9-alpha1 - page 4

Vendor: Adobe
Version: 2.4.9-alpha1
Software CPE: cpe:2.3:a:adobe:magento:*:*:*:*:*:*:*:*
Total vulnerabilities: 73
Public exploits: 2
Known exploited (KEV): 3

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting Magento Open Source version 2.4.9-alpha1 Magento Open Source 2.4.9-alpha1 is affected by 73 vulnerabilities: 2 critical, 12 high, 20 medium, 39 low Critical High Medium Low

Vulnerabilities (73)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU123801 - Incorrect Authorization
CVE-2026-21285
CWE-863 Low
No
No
2.4.5‑p16, 2.4.6-p14, 2.4.7-p9, 2.4.8-p4, 2.4.9‑beta1 11.03.2026 SB2026031106
#VU117073 - Incorrect Authorization
CVE-2025-54267
CWE-863 High
No
No
2.4.5-p15, 2.4.6-p13, 2.4.7-p8, 2.4.8-p3, 2.4.9 alpha3 14.10.2025 SB2025101479
#VU117072 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2025-54266
CWE-79 Low
No
No
2.4.5-p15, 2.4.6-p13, 2.4.7-p8, 2.4.8-p3, 2.4.9 alpha3 14.10.2025 SB2025101479
#VU117071 - Incorrect Authorization
CVE-2025-54265
CWE-863 Low
No
No
2.4.5-p15, 2.4.6-p13, 2.4.7-p8, 2.4.8-p3, 2.4.9 alpha3 14.10.2025 SB2025101479
#VU117067 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2025-54264
CWE-79 Low
No
No
2.4.5-p15, 2.4.6-p13, 2.4.7-p8, 2.4.8-p3, 2.4.9 alpha3 14.10.2025 SB2025101479
#VU117066 - Improper Access Control
CVE-2025-54263
CWE-284 High
No
No
2.4.5-p15, 2.4.6-p13, 2.4.7-p8, 2.4.8-p3, 2.4.9 alpha3 14.10.2025 SB2025101479
#VU115074 - Improper input validation
CVE-2025-54236
CWE-20 Critical
Public exploit available
Exploited
- 09.09.2025 SB2025090976
#VU113915 - Improper input validation
CVE-2025-49559
CWE-20 Medium
No
No
2.4.5-p14, 2.4.6-p12, 2.4.7-p7, 2.4.8-p2, 2.4.9 alpha2 12.08.2025 SB2025081285
#VU113914 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
CVE-2025-49558
CWE-362 Medium
No
No
2.4.5-p14, 2.4.6-p12, 2.4.7-p7, 2.4.8-p2, 2.4.9 alpha2 12.08.2025 SB2025081285
#VU113913 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2025-49557
CWE-79 Low
No
No
2.4.5-p14, 2.4.6-p12, 2.4.7-p7, 2.4.8-p2, 2.4.9 alpha2 12.08.2025 SB2025081285
#VU113912 - Incorrect Authorization
CVE-2025-49556
CWE-863 High
No
No
2.4.5-p14, 2.4.6-p12, 2.4.7-p7, 2.4.8-p2, 2.4.9 alpha2 12.08.2025 SB2025081285
#VU113911 - Cross-Site Request Forgery (CSRF)
CVE-2025-49555
CWE-352 Medium
No
No
2.4.5-p14, 2.4.6-p12, 2.4.7-p7, 2.4.8-p2, 2.4.9 alpha2 12.08.2025 SB2025081285
#VU113908 - Improper input validation
CVE-2025-49554
CWE-20 Medium
No
No
2.4.5-p14, 2.4.6-p12, 2.4.7-p7, 2.4.8-p2, 2.4.9 alpha2 12.08.2025 SB2025081285


Showing elements 61 - 80 out of 73