Known vulnerabilities in Adobe Commerce (formerly Magento Commerce) 2.4.7-beta3 - page 5

Vendor: Adobe
Software: Adobe Commerce (formerly Magento Commerce)
Version: 2.4.7-beta3
Software CPE: cpe:2.3:a:adobe:magento_commerce:*:*:*:*:*:*:*:*
Website: https://www.adobe.com
Total vulnerabilities: 135
Public exploits: 3
Known exploited (KEV): 4

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting Adobe Commerce (formerly Magento Commerce) version 2.4.7-beta3 Adobe Commerce (formerly Magento Commerce) 2.4.7-beta3 is affected by 135 vulnerabilities: 3 critical, 18 high, 38 medium, 76 low Critical High Medium Low

Vulnerabilities (135)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU98477 - Improper Access Control
CVE-2024-45149		 CWE-284 Low
No
No
 2.4.4-p11, 2.4.5-p10, 2.4.6-p8, 2.4.7-p3 14.10.2024 SB2024101447
#VU98476 - Improper Access Control
CVE-2024-45135		 CWE-284 Low
No
No
 2.4.4-p11, 2.4.5-p10, 2.4.6-p8, 2.4.7-p3 14.10.2024 SB2024101447
#VU98475 - Exposure of sensitive information to an unauthorized actor
CVE-2024-45134		 CWE-200 Low
No
No
 2.4.4-p11, 2.4.5-p10, 2.4.6-p8, 2.4.7-p3 14.10.2024 SB2024101447
#VU98474 - Improper Access Control
CVE-2024-45133		 CWE-284 Low
No
No
 2.4.4-p11, 2.4.5-p10, 2.4.6-p8, 2.4.7-p3 14.10.2024 SB2024101447
#VU98473 - Improper Access Control
CVE-2024-45132		 CWE-284 Medium
No
No
 2.4.4-p11, 2.4.5-p10, 2.4.6-p8, 2.4.7-p3 14.10.2024 SB2024101447
#VU98472 - Improper Access Control
CVE-2024-45131		 CWE-284 Medium
No
No
 2.4.4-p11, 2.4.5-p10, 2.4.6-p8, 2.4.7-p3 14.10.2024 SB2024101447
#VU98452 - Improper Access Control
CVE-2024-45130		 CWE-284 Low
No
No
 2.4.4-p11, 2.4.5-p10, 2.4.6-p8, 2.4.7-p3 14.10.2024 SB2024101447
#VU98451 - Improper Access Control
CVE-2024-45129		 CWE-284 Low
No
No
 2.4.4-p11, 2.4.5-p10, 2.4.6-p8, 2.4.7-p3 14.10.2024 SB2024101447
#VU98450 - Improper Access Control
CVE-2024-45128		 CWE-284 Low
No
No
 2.4.4-p11, 2.4.5-p10, 2.4.6-p8, 2.4.7-p3 14.10.2024 SB2024101447
#VU98449 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2024-45127		 CWE-79 Low
No
No
 2.4.4-p11, 2.4.5-p10, 2.4.6-p8, 2.4.7-p3 14.10.2024 SB2024101447
#VU98448 - Improper Access Control
CVE-2024-45125		 CWE-284 Low
No
No
 2.4.4-p11, 2.4.5-p10, 2.4.6-p8, 2.4.7-p3 14.10.2024 SB2024101447
#VU98447 - Improper Access Control
CVE-2024-45124		 CWE-284 Medium
No
No
 2.4.4-p11, 2.4.5-p10, 2.4.6-p8, 2.4.7-p3 14.10.2024 SB2024101447
#VU98446 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2024-45123		 CWE-79 Medium
No
No
 2.4.4-p11, 2.4.5-p10, 2.4.6-p8, 2.4.7-p3 14.10.2024 SB2024101447
#VU98445 - Improper Access Control
CVE-2024-45122		 CWE-284 Low
No
No
 2.4.4-p11, 2.4.5-p10, 2.4.6-p8, 2.4.7-p3 14.10.2024 SB2024101447
#VU98427 - Improper Access Control
CVE-2024-45121		 CWE-284 Low
No
No
 2.4.4-p11, 2.4.5-p10, 2.4.6-p8, 2.4.7-p3 12.10.2024 SB2024101447
#VU98426 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
CVE-2024-45120		 CWE-362 Low
No
No
 2.4.4-p11, 2.4.5-p10, 2.4.6-p8, 2.4.7-p3 12.10.2024 SB2024101447
#VU98332 - Server-Side Request Forgery (SSRF)
CVE-2024-45119		 CWE-918 Low
No
No
 2.4.4-p11, 2.4.5-p10, 2.4.6-p8, 2.4.7-p3 09.10.2024 SB2024101447
#VU98331 - Improper Access Control
CVE-2024-45118		 CWE-284 Medium
No
No
 2.4.4-p11, 2.4.5-p10, 2.4.6-p8, 2.4.7-p3 09.10.2024 SB2024101447
#VU98330 - Improper input validation
CVE-2024-45117		 CWE-20 Low
No
No
 2.4.4-p11, 2.4.5-p10, 2.4.6-p8, 2.4.7-p3 09.10.2024 SB2024101447
#VU98329 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2024-45116		 CWE-79 Low
No
No
 2.4.4-p11, 2.4.5-p10, 2.4.6-p8, 2.4.7-p3 09.10.2024 SB2024101447


Showing elements 81 - 100 out of 135