Known vulnerabilities in Adobe Commerce (formerly Magento Commerce) 2.4.0-ext-3 - page 5

Vendor: Adobe
Version: 2.4.0-ext-3
Software CPE: cpe:2.3:a:adobe:magento_commerce:*:*:*:*:*:*:*:*
Total vulnerabilities: 86
Public exploits: 1
Known exploited (KEV): 1
Highest CVSSv4 Score: 9.3

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting Adobe Commerce (formerly Magento Commerce) version 2.4.0-ext-3 Adobe Commerce (formerly Magento Commerce) 2.4.0-ext-3 is affected by 86 vulnerabilities: 10 high, 29 medium, 47 low Critical High Medium Low

Vulnerabilities (86)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU81788 - Improper Authorization
CVE-2023-38220
CWE-285 Medium
No
No
2.3.7-p4-ext-5, 2.4.0-ext-5, 2.4.1-ext-5, 2.4.2-ext-5, 2.4.3-ext-5, 2.4.4-p6, 2.4.5-p5, 2.4.6-p3, 2.4.7-beta2 10.10.2023 SB2023101082
#VU81786 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2023-38219
CWE-79 Low
No
No
2.3.7-p4-ext-5, 2.4.0-ext-5, 2.4.1-ext-5, 2.4.2-ext-5, 2.4.3-ext-5, 2.4.4-p6, 2.4.5-p5, 2.4.6-p3, 2.4.7-beta2 10.10.2023 SB2023101082
#VU81785 - Improper input validation
CVE-2023-38218
CWE-20 High
No
No
2.3.7-p4-ext-5, 2.4.0-ext-5, 2.4.1-ext-5, 2.4.2-ext-5, 2.4.3-ext-5, 2.4.4-p6, 2.4.5-p5, 2.4.6-p3, 2.4.7-beta2 10.10.2023 SB2023101082
#VU79228 - Improper Access Control
CVE-2023-38209
CWE-284 Medium
No
No
2.3.7-p4-ext-4, 2.4.0-ext-4, 2.4.1-ext-4, 2.4.2-ext-4, 2.4.3-ext-4, 2.4.4-p5, 2.4.5-p4, 2.4.6-p2 08.08.2023 SB2023080893
#VU79226 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2023-38208
CWE-78 Medium
No
No
2.3.7-p4-ext-4, 2.4.0-ext-4, 2.4.1-ext-4, 2.4.2-ext-4, 2.4.3-ext-4, 2.4.4-p5, 2.4.5-p4, 2.4.6-p2 08.08.2023 SB2023080893
#VU79224 - XML Injection
CVE-2023-38207
CWE-91 Medium
No
No
2.3.7-p4-ext-4, 2.4.0-ext-4, 2.4.1-ext-4, 2.4.2-ext-4, 2.4.3-ext-4, 2.4.4-p5, 2.4.5-p4, 2.4.6-p2 08.08.2023 SB2023080893


Showing elements 81 - 100 out of 86