Known vulnerabilities in Adobe Commerce (formerly Magento Commerce) 2.4.0-ext-2 - page 6

Vendor: Adobe
Version: 2.4.0-ext-2
Software CPE: cpe:2.3:a:adobe:magento_commerce:*:*:*:*:*:*:*:*
Total vulnerabilities: 105
Public exploits: 1
Known exploited (KEV): 2

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting Adobe Commerce (formerly Magento Commerce) version 2.4.0-ext-2 Adobe Commerce (formerly Magento Commerce) 2.4.0-ext-2 is affected by 105 vulnerabilities: 1 critical, 12 high, 34 medium, 58 low Critical High Medium Low

Vulnerabilities (105)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU77469 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2023-29297
CWE-79 Low
No
No
2.3.7-p4-ext-3, 2.4.0-ext-3, 2.4.1-ext-3, 2.4.2-ext-3, 2.4.3-ext-3, 2.4.4-p4, 2.4.5-p3, 2.4.6-p1 16.06.2023 SB2023061608
#VU77468 - Business Logic Errors (3.0)
CVE-2023-29294
CWE-840 Low
No
No
2.3.7-p4-ext-3, 2.4.0-ext-3, 2.4.1-ext-3, 2.4.2-ext-3, 2.4.3-ext-3, 2.4.4-p4, 2.4.5-p3, 2.4.6-p1 16.06.2023 SB2023061608
#VU77467 - Improper input validation
CVE-2023-29293
CWE-20 Low
No
No
2.3.7-p4-ext-3, 2.4.0-ext-3, 2.4.1-ext-3, 2.4.2-ext-3, 2.4.3-ext-3, 2.4.4-p4, 2.4.5-p3, 2.4.6-p1 16.06.2023 SB2023061608
#VU77462 - Incorrect Authorization
CVE-2023-22248
CWE-863 Low
No
No
2.3.7-p4-ext-3, 2.4.0-ext-3, 2.4.1-ext-3, 2.4.2-ext-3, 2.4.3-ext-3, 2.4.4-p4, 2.4.5-p3, 2.4.6-p1 16.06.2023 SB2023061608
#VU77460 - Incorrect Authorization
CVE-2023-29296
CWE-863 Low
No
No
2.3.7-p4-ext-3, 2.4.0-ext-3, 2.4.1-ext-3, 2.4.2-ext-3, 2.4.3-ext-3, 2.4.4-p4, 2.4.5-p3, 2.4.6-p1 16.06.2023 SB2023061608


Showing elements 101 - 120 out of 105