Known vulnerabilities in Adobe Commerce (formerly Magento Commerce) 2.4.3-ext-4 - page 3

Vendor: Adobe
Version: 2.4.3-ext-4
Software CPE: cpe:2.3:a:adobe:magento_commerce:*:*:*:*:*:*:*:*
Total vulnerabilities: 83
Public exploits: 1
Known exploited (KEV): 1
Highest CVSSv4 Score: 9.3

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting Adobe Commerce (formerly Magento Commerce) version 2.4.3-ext-4 Adobe Commerce (formerly Magento Commerce) 2.4.3-ext-4 is affected by 83 vulnerabilities: 10 high, 26 medium, 47 low Critical High Medium Low

Vulnerabilities (83)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU98476 - Improper Access Control
CVE-2024-45135
CWE-284 Low
No
No
2.4.4-p11, 2.4.5-p10, 2.4.6-p8, 2.4.7-p3 14.10.2024 SB2024101447
#VU98475 - Exposure of sensitive information to an unauthorized actor
CVE-2024-45134
CWE-200 Low
No
No
2.4.4-p11, 2.4.5-p10, 2.4.6-p8, 2.4.7-p3 14.10.2024 SB2024101447
#VU98474 - Improper Access Control
CVE-2024-45133
CWE-284 Low
No
No
2.4.4-p11, 2.4.5-p10, 2.4.6-p8, 2.4.7-p3 14.10.2024 SB2024101447
#VU98473 - Improper Access Control
CVE-2024-45132
CWE-284 Medium
No
No
2.4.4-p11, 2.4.5-p10, 2.4.6-p8, 2.4.7-p3 14.10.2024 SB2024101447
#VU98472 - Improper Access Control
CVE-2024-45131
CWE-284 Medium
No
No
2.4.4-p11, 2.4.5-p10, 2.4.6-p8, 2.4.7-p3 14.10.2024 SB2024101447
#VU98452 - Improper Access Control
CVE-2024-45130
CWE-284 Low
No
No
2.4.4-p11, 2.4.5-p10, 2.4.6-p8, 2.4.7-p3 14.10.2024 SB2024101447
#VU98451 - Improper Access Control
CVE-2024-45129
CWE-284 Low
No
No
2.4.4-p11, 2.4.5-p10, 2.4.6-p8, 2.4.7-p3 14.10.2024 SB2024101447
#VU98450 - Improper Access Control
CVE-2024-45128
CWE-284 Low
No
No
2.4.4-p11, 2.4.5-p10, 2.4.6-p8, 2.4.7-p3 14.10.2024 SB2024101447
#VU98449 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2024-45127
CWE-79 Low
No
No
2.4.4-p11, 2.4.5-p10, 2.4.6-p8, 2.4.7-p3 14.10.2024 SB2024101447
#VU98448 - Improper Access Control
CVE-2024-45125
CWE-284 Low
No
No
2.4.4-p11, 2.4.5-p10, 2.4.6-p8, 2.4.7-p3 14.10.2024 SB2024101447
#VU98447 - Improper Access Control
CVE-2024-45124
CWE-284 Medium
No
No
2.4.4-p11, 2.4.5-p10, 2.4.6-p8, 2.4.7-p3 14.10.2024 SB2024101447
#VU98446 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2024-45123
CWE-79 Medium
No
No
2.4.4-p11, 2.4.5-p10, 2.4.6-p8, 2.4.7-p3 14.10.2024 SB2024101447
#VU98445 - Improper Access Control
CVE-2024-45122
CWE-284 Low
No
No
2.4.4-p11, 2.4.5-p10, 2.4.6-p8, 2.4.7-p3 14.10.2024 SB2024101447
#VU98427 - Improper Access Control
CVE-2024-45121
CWE-284 Low
No
No
2.4.4-p11, 2.4.5-p10, 2.4.6-p8, 2.4.7-p3 12.10.2024 SB2024101447
#VU98426 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
CVE-2024-45120
CWE-362 Low
No
No
2.4.4-p11, 2.4.5-p10, 2.4.6-p8, 2.4.7-p3 12.10.2024 SB2024101447
#VU98330 - Improper input validation
CVE-2024-45117
CWE-20 Low
No
No
2.4.4-p11, 2.4.5-p10, 2.4.6-p8, 2.4.7-p3 09.10.2024 SB2024101447
#VU98329 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2024-45116
CWE-79 Low
No
No
2.4.4-p11, 2.4.5-p10, 2.4.6-p8, 2.4.7-p3 09.10.2024 SB2024101447
#VU94052 - Improper Authentication
CVE-2024-34106
CWE-287 Medium
No
No
2.3.7-p4-ext-8, 2.4.0-ext-8, 2.4.1-ext-8, 2.4.2-ext-8, 2.4.3-ext-8, 2.4.4-p9, 2.4.5-p8, 2.4.6-p6, 2.4.7-p1 10.07.2024 SB2024071008
#VU94050 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2024-34105
CWE-79 Low
No
No
2.3.7-p4-ext-8, 2.4.0-ext-8, 2.4.1-ext-8, 2.4.2-ext-8, 2.4.3-ext-8, 2.4.4-p9, 2.4.5-p8, 2.4.6-p6, 2.4.7-p1 10.07.2024 SB2024071008
#VU94046 - Improper input validation
CVE-2024-34109
CWE-20 Low
No
No
2.3.7-p4-ext-8, 2.4.0-ext-8, 2.4.1-ext-8, 2.4.2-ext-8, 2.4.3-ext-8, 2.4.4-p9, 2.4.5-p8, 2.4.6-p6, 2.4.7-p1 10.07.2024 SB2024071008


Showing elements 41 - 60 out of 83