Known vulnerabilities in Adobe Commerce (formerly Magento Commerce) 2.4.1-ext-6 - page 4

Vendor: Adobe
Version: 2.4.1-ext-6
Software CPE: cpe:2.3:a:adobe:magento_commerce:*:*:*:*:*:*:*:*
Total vulnerabilities: 69
Public exploits: 1
Known exploited (KEV): 1
Highest CVSSv4 Score: 9.3

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting Adobe Commerce (formerly Magento Commerce) version 2.4.1-ext-6 Adobe Commerce (formerly Magento Commerce) 2.4.1-ext-6 is affected by 69 vulnerabilities: 9 high, 22 medium, 38 low Critical High Medium Low

Vulnerabilities (69)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU94054 - Improper Access Control
CVE-2024-34107
CWE-284 Medium
No
No
2.3.7-p4-ext-8, 2.4.0-ext-8, 2.4.1-ext-8, 2.4.2-ext-8, 2.4.3-ext-8, 2.4.4-p9, 2.4.5-p8, 2.4.6-p6, 2.4.7-p1 10.07.2024 SB2024071008
#VU94052 - Improper Authentication
CVE-2024-34106
CWE-287 Medium
No
No
2.3.7-p4-ext-8, 2.4.0-ext-8, 2.4.1-ext-8, 2.4.2-ext-8, 2.4.3-ext-8, 2.4.4-p9, 2.4.5-p8, 2.4.6-p6, 2.4.7-p1 10.07.2024 SB2024071008
#VU94050 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2024-34105
CWE-79 Low
No
No
2.3.7-p4-ext-8, 2.4.0-ext-8, 2.4.1-ext-8, 2.4.2-ext-8, 2.4.3-ext-8, 2.4.4-p9, 2.4.5-p8, 2.4.6-p6, 2.4.7-p1 10.07.2024 SB2024071008
#VU94048 - Unrestricted Upload of File with Dangerous Type
CVE-2024-34110
CWE-434 Low
No
No
2.3.7-p4-ext-8, 2.4.0-ext-8, 2.4.1-ext-8, 2.4.2-ext-8, 2.4.3-ext-8, 2.4.4-p9, 2.4.5-p8, 2.4.6-p6, 2.4.7-p1 10.07.2024 SB2024071008
#VU94046 - Improper input validation
CVE-2024-34109
CWE-20 Low
No
No
2.3.7-p4-ext-8, 2.4.0-ext-8, 2.4.1-ext-8, 2.4.2-ext-8, 2.4.3-ext-8, 2.4.4-p9, 2.4.5-p8, 2.4.6-p6, 2.4.7-p1 10.07.2024 SB2024071008
#VU94045 - Improper input validation
CVE-2024-34108
CWE-20 Low
No
No
2.3.7-p4-ext-8, 2.4.0-ext-8, 2.4.1-ext-8, 2.4.2-ext-8, 2.4.3-ext-8, 2.4.4-p9, 2.4.5-p8, 2.4.6-p6, 2.4.7-p1 10.07.2024 SB2024071008
#VU94038 - Improper Authorization
CVE-2024-34104
CWE-285 High
No
No
2.3.7-p4-ext-8, 2.4.0-ext-8, 2.4.1-ext-8, 2.4.2-ext-8, 2.4.3-ext-8, 2.4.4-p9, 2.4.5-p8, 2.4.6-p6, 2.4.7-p1 10.07.2024 SB2024071008
#VU88313 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2024-20759
CWE-79 Medium
No
No
2.3.7-p4-ext-7, 2.4.0-ext-7, 2.4.1-ext-7, 2.4.2-ext-7, 2.4.3-ext-7, 2.4.4-p8, 2.4.5-p7, 2.4.6-p5, 2.4.7 09.04.2024 SB2024040975
#VU88311 - Improper input validation
CVE-2024-20758
CWE-20 High
No
No
2.3.7-p4-ext-7, 2.4.0-ext-7, 2.4.1-ext-7, 2.4.2-ext-7, 2.4.3-ext-7, 2.4.4-p8, 2.4.5-p7, 2.4.6-p5, 2.4.7 09.04.2024 SB2024040975


Showing elements 61 - 80 out of 69