Known vulnerabilities in Adobe Commerce (formerly Magento Commerce) 2.4.1-ext-2 - page 5

Vendor: Adobe
Software: Adobe Commerce (formerly Magento Commerce)
Version: 2.4.1-ext-2
Software CPE: cpe:2.3:a:adobe:magento_commerce:*:*:*:*:*:*:*:*
Website: https://www.adobe.com
Total vulnerabilities: 105
Public exploits: 1
Known exploited (KEV): 2

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting Adobe Commerce (formerly Magento Commerce) version 2.4.1-ext-2 Adobe Commerce (formerly Magento Commerce) 2.4.1-ext-2 is affected by 105 vulnerabilities: 1 critical, 12 high, 34 medium, 58 low Critical High Medium Low

Vulnerabilities (105)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU86467 - Cross-Site Request Forgery (CSRF)
CVE-2024-20718		 CWE-352 Medium
No
No
 2.3.7-p4-ext-6, 2.4.0-ext-6, 2.4.1-ext-6, 2.4.2-ext-6, 2.4.3-ext-6, 2.4.4-p7, 2.4.5-p6, 2.4.6-p4 13.02.2024 SB2024021368
#VU81796 - Server-Side Request Forgery (SSRF)
CVE-2023-26366		 CWE-918 Low
No
No
 2.3.7-p4-ext-5, 2.4.0-ext-5, 2.4.1-ext-5, 2.4.2-ext-5, 2.4.3-ext-5, 2.4.4-p6, 2.4.5-p5, 2.4.6-p3, 2.4.7-beta2 10.10.2023 SB2023101082
#VU81795 - Resource exhaustion
CVE-2023-38251		 CWE-400 Medium
No
No
 2.3.7-p4-ext-5, 2.4.0-ext-5, 2.4.1-ext-5, 2.4.2-ext-5, 2.4.3-ext-5, 2.4.4-p6, 2.4.5-p5, 2.4.6-p3, 2.4.7-beta2 10.10.2023 SB2023101082
#VU81794 - Exposure of sensitive information to an unauthorized actor
CVE-2023-26367		 CWE-200 Low
No
No
 2.3.7-p4-ext-5, 2.4.0-ext-5, 2.4.1-ext-5, 2.4.2-ext-5, 2.4.3-ext-5, 2.4.4-p6, 2.4.5-p5, 2.4.6-p3, 2.4.7-beta2 10.10.2023 SB2023101082
#VU81792 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2023-38250		 CWE-89 Low
No
No
 2.3.7-p4-ext-5, 2.4.0-ext-5, 2.4.1-ext-5, 2.4.2-ext-5, 2.4.3-ext-5, 2.4.4-p6, 2.4.5-p5, 2.4.6-p3, 2.4.7-beta2 10.10.2023 SB2023101082
#VU81791 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2023-38249		 CWE-89 Low
No
No
 2.3.7-p4-ext-5, 2.4.0-ext-5, 2.4.1-ext-5, 2.4.2-ext-5, 2.4.3-ext-5, 2.4.4-p6, 2.4.5-p5, 2.4.6-p3, 2.4.7-beta2 10.10.2023 SB2023101082
#VU81790 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2023-38221		 CWE-89 Low
No
No
 2.3.7-p4-ext-5, 2.4.0-ext-5, 2.4.1-ext-5, 2.4.2-ext-5, 2.4.3-ext-5, 2.4.4-p6, 2.4.5-p5, 2.4.6-p3, 2.4.7-beta2 10.10.2023 SB2023101082
#VU81788 - Improper Authorization
CVE-2023-38220		 CWE-285 Medium
No
No
 2.3.7-p4-ext-5, 2.4.0-ext-5, 2.4.1-ext-5, 2.4.2-ext-5, 2.4.3-ext-5, 2.4.4-p6, 2.4.5-p5, 2.4.6-p3, 2.4.7-beta2 10.10.2023 SB2023101082
#VU81786 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2023-38219		 CWE-79 Low
No
No
 2.3.7-p4-ext-5, 2.4.0-ext-5, 2.4.1-ext-5, 2.4.2-ext-5, 2.4.3-ext-5, 2.4.4-p6, 2.4.5-p5, 2.4.6-p3, 2.4.7-beta2 10.10.2023 SB2023101082
#VU81785 - Improper input validation
CVE-2023-38218		 CWE-20 High
No
No
 2.3.7-p4-ext-5, 2.4.0-ext-5, 2.4.1-ext-5, 2.4.2-ext-5, 2.4.3-ext-5, 2.4.4-p6, 2.4.5-p5, 2.4.6-p3, 2.4.7-beta2 10.10.2023 SB2023101082
#VU79228 - Improper Access Control
CVE-2023-38209		 CWE-284 Medium
No
No
 2.3.7-p4-ext-4, 2.4.0-ext-4, 2.4.1-ext-4, 2.4.2-ext-4, 2.4.3-ext-4, 2.4.4-p5, 2.4.5-p4, 2.4.6-p2 08.08.2023 SB2023080893
#VU79226 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2023-38208		 CWE-78 Medium
No
No
 2.3.7-p4-ext-4, 2.4.0-ext-4, 2.4.1-ext-4, 2.4.2-ext-4, 2.4.3-ext-4, 2.4.4-p5, 2.4.5-p4, 2.4.6-p2 08.08.2023 SB2023080893
#VU79224 - XML Injection
CVE-2023-38207		 CWE-91 Medium
No
No
 2.3.7-p4-ext-4, 2.4.0-ext-4, 2.4.1-ext-4, 2.4.2-ext-4, 2.4.3-ext-4, 2.4.4-p5, 2.4.5-p4, 2.4.6-p2 08.08.2023 SB2023080893
#VU77466 - Server-Side Request Forgery (SSRF)
CVE-2023-29292		 CWE-918 Low
No
No
 2.3.7-p4-ext-3, 2.4.0-ext-3, 2.4.1-ext-3, 2.4.2-ext-3, 2.4.3-ext-3, 2.4.4-p4, 2.4.5-p3, 2.4.6-p1 16.06.2023 SB2023061608
#VU77465 - Server-Side Request Forgery (SSRF)
CVE-2023-29291		 CWE-918 Low
No
No
 2.3.7-p4-ext-3, 2.4.0-ext-3, 2.4.1-ext-3, 2.4.2-ext-3, 2.4.3-ext-3, 2.4.4-p4, 2.4.5-p3, 2.4.6-p1 16.06.2023 SB2023061608
#VU77463 - Missing Support for Integrity Check
CVE-2023-29290		 CWE-353 Medium
No
No
 2.3.7-p4-ext-3, 2.4.0-ext-3, 2.4.1-ext-3, 2.4.2-ext-3, 2.4.3-ext-3, 2.4.4-p4, 2.4.5-p3, 2.4.6-p1 16.06.2023 SB2023061608
#VU77461 - XML Injection
CVE-2023-29289		 CWE-91 Medium
No
No
 2.3.7-p4-ext-3, 2.4.0-ext-3, 2.4.1-ext-3, 2.4.2-ext-3, 2.4.3-ext-3, 2.4.4-p4, 2.4.5-p3, 2.4.6-p1 16.06.2023 SB2023061608
#VU77459 - Incorrect Authorization
CVE-2023-29295		 CWE-863 Low
No
No
 2.3.7-p4-ext-3, 2.4.0-ext-3, 2.4.1-ext-3, 2.4.2-ext-3, 2.4.3-ext-3, 2.4.4-p4, 2.4.5-p3, 2.4.6-p1 16.06.2023 SB2023061608
#VU77458 - Incorrect Authorization
CVE-2023-29288		 CWE-863 Low
No
No
 2.3.7-p4-ext-3, 2.4.0-ext-3, 2.4.1-ext-3, 2.4.2-ext-3, 2.4.3-ext-3, 2.4.4-p4, 2.4.5-p3, 2.4.6-p1 16.06.2023 SB2023061608
#VU77457 - Exposure of sensitive information to an unauthorized actor
CVE-2023-29287		 CWE-200 Medium
No
No
 2.3.7-p4-ext-3, 2.4.0-ext-3, 2.4.1-ext-3, 2.4.2-ext-3, 2.4.3-ext-3, 2.4.4-p4, 2.4.5-p3, 2.4.6-p1 16.06.2023 SB2023061608


Showing elements 81 - 100 out of 105