Known vulnerabilities in Adobe Commerce (formerly Magento Commerce) - page 8
Vendor:
Adobe
Software CPE:
cpe:2.3:a:adobe:magento_commerce:*:*:*:*:*:*:*:*
Website:
https://www.adobe.com
Total vulnerabilities:
348
Public exploits:
11
Known exploited (KEV):
6
Breakdown by Severity Chart
2.4.4-2026-sep
2.4.5-2026-sep
2.4.6-2026-sep
2.4.7-2026-sep
2.4.8-2026-sep
2.4.9-2026-sep
2.4.4-2026-aug
2.4.5-2026-aug
2.4.6-2026-aug
2.4.7-2026-aug
2.4.8-2026-aug
2.4.9-2026-aug
2.4.4-2026-jul
2.4.5-2026-jul
2.4.6-2026-jul
2.4.7-2026-jul
2.4.8-2026-jul
2.4.9-2026-jul
2.4.4-p18
2.4.5-p17
2.4.6-p15
2.4.7-p10
2.4.8-p5
2.4.9
2.4.4‑p17
2.4.5‑p16
2.4.6‑p14
2.4.7‑p9
2.4.8‑p4
2.4.9‑beta1
2.4.4 p16
2.4.5-p15
2.4.6-p13
2.4.7-p8
2.4.8-p3
2.4.9-alpha3
2.4.4-p15
2.4.5-p14
2.4.6-p12
2.4.7-p7
2.4.8-p2
2.4.9-alpha2
2.4.4-p14
2.4.5-p13
2.4.6-p11
2.4.7-p6
2.4.8-p1
2.4.9-alpha1
2.4.8
2.4.7-p5
2.4.6-p10
2.4.5-p12
2.4.4-p13
2.4.8-beta2
2.4.8-beta1
2.4.4-p12
2.4.5-p11
2.4.6-p9
2.4.7-p4
2.4.4-p11
2.4.5-p10
2.4.6-p8
2.4.7-p3
2.4.4-p10
2.4.5-p9
2.4.6-p7
2.4.7-p2
2.3.7-p4-ext-8
2.4.0-ext-8
2.4.1-ext-8
2.4.2-ext-8
2.4.3-ext-8
2.4.4-p9
2.4.5-p8
2.4.6-p6
2.4.7-p1
2.3.7-p4-ext-7
2.4.0-ext-7
2.4.1-ext-7
2.4.2-ext-7
2.4.3-ext-7
2.4.4-p8
2.4.5-p7
2.4.6-p5
2.4.7
2.4.7-beta3
2.3.7-p4-ext-6
2.4.0-ext-6
2.4.1-ext-6
2.4.2-ext-6
2.4.3-ext-6
2.4.4-p7
2.4.5-p6
2.4.6-p4
2.4.7-beta2
2.4.7-beta1
2.3.7-p4-ext-5
2.4.0-ext-5
2.4.1-ext-5
2.4.2-ext-5
2.4.3-ext-5
2.4.4-p6
2.4.5-p5
2.4.6-p3
2.4.6-p2
2.4.5-p4
2.4.4-p5
2.4.3-ext-4
2.4.2-ext-4
2.4.1-ext-4
2.4.0-ext-4
2.3.7-p4-ext-4
2.3.7-p4-ext-3
2.3.7-p4-ext-2
2.4.0-ext-3
2.4.0-ext-2
2.4.1-ext-3
2.4.1-ext-2
2.4.2-ext-3
2.4.2-ext-2
2.4.3-ext-3
2.4.3-ext-2
2.4.4-p4
2.4.5-p3
2.4.6-p1
2.4.4-p3
2.4.5-p2
2.4.6
2.4.5-p1
2.4.4-p2
2.4.5
2.4.4-p1
2.4.3-p3
2.3.7-p4
2.4.4
2.4.3-p2
2.3.7-p3
1.14.4.5
1.14.4.4
1.14.4.3
1.14.4.2
1.14.4.1
1.14.4.0
1.14.3.10
1.14.3.9
1.14.3.8
1.14.3.7
1.14.2.0
1.14.3.0
1.14.3.1
1.14.3.2
1.14.3.3
1.14.3.4
1.14.3.5
1.14.3.6
1.14.1.0
1.14.0.1
1.14.0.0
1.13.1.0
1.13.0.2
1.13.0.0
1.12.0.2
1.12.0.1
1.12.0.0
1.11.2.0
1.11.0.2
1.10.1.1
1.10.0.2
2.4.3-p1_v1
2.3.7-p2
2.4.3-p1
2.3.7-p1
2.4.2-p2
2.4.3
2.4.2-p1
2.3.7
2.4.2
2.4.1-p1
2.3.6-p1
2.4.0-p1
2.4.1
2.3.6
2.4.0
2.3.5-p2
2.3.5-p1
2.3.5
2.3.4-p2
2.3.4
2.3.3-p1
2.3.2-p2
2.2.11
2.0.18
2.0.17
2.0.16
2.3.2-p1
2.3.3
2.3.2
2.3.1
2.3.0
2.2.10
2.2.9
2.2.8
2.2.7
2.2.6
2.2.5
2.2.4
2.2.3
2.2.2
2.2.1
2.2.0
2.1.18
2.1.17
2.1.16
2.1.15
2.1.14
2.1.13
2.1.12
2.1.11
2.1.10
2.1.8
2.1.7
2.0.15
2.0.14
2.0.13
2.0.12
2.0.11
2.0.10
2.0.9
2.0.3
2.0.1
2.0.0
2.1.9
2.1.1
2.1.6
2.1.5
2.1.4
2.1.3
2.1.2
2.1.0
2.0.5
2.0.8
2.0.4
2.0.7
2.0.2
2.0.6
Vulnerabilities (348)
| Vulnerability | CWE-ID | CSH Severity | Public Exploit | KEV | First fixed release | Published | Bulletins |
|---|---|---|---|---|---|---|---|
| #VU95952 - Exposure of sensitive information to an unauthorized actor CVE-2024-39406 |
CWE-200 | Low | 2.4.4-p10, 2.4.5-p9, 2.4.6-p7, 2.4.7-p2 | 14.08.2024 |
SB2024081408 |
||
| #VU95951 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') CVE-2024-39402 |
CWE-78 | Medium | 2.4.4-p10, 2.4.5-p9, 2.4.6-p7, 2.4.7-p2 | 14.08.2024 |
SB2024081408 |
||
| #VU95950 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') CVE-2024-39401 |
CWE-78 | Medium | 2.4.4-p10, 2.4.5-p9, 2.4.6-p7, 2.4.7-p2 | 14.08.2024 |
SB2024081408 |
||
| #VU95949 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') CVE-2024-39403 |
CWE-79 | Low | 2.4.4-p10, 2.4.5-p9, 2.4.6-p7, 2.4.7-p2 | 14.08.2024 |
SB2024081408 |
||
| #VU95948 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') CVE-2024-39400 |
CWE-79 | Low | 2.4.4-p10, 2.4.5-p9, 2.4.6-p7, 2.4.7-p2 | 14.08.2024 |
SB2024081408 |
||
| #VU95946 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') CVE-2024-39399 |
CWE-22 | Medium | 2.4.4-p10, 2.4.5-p9, 2.4.6-p7, 2.4.7-p2 | 14.08.2024 |
SB2024081408 |
||
| #VU95943 - Improper Restriction of Excessive Authentication Attempts CVE-2024-39398 |
CWE-307 | Medium | 2.4.4-p10, 2.4.5-p9, 2.4.6-p7, 2.4.7-p2 | 14.08.2024 |
SB2024081408 |
||
| #VU94054 - Improper Access Control CVE-2024-34107 |
CWE-284 | Medium | 2.3.7-p4-ext-8, 2.4.0-ext-8, 2.4.1-ext-8, 2.4.2-ext-8, 2.4.3-ext-8, 2.4.4-p9, 2.4.5-p8, 2.4.6-p6, 2.4.7-p1 | 10.07.2024 |
SB2024071008 |
||
| #VU94052 - Improper Authentication CVE-2024-34106 |
CWE-287 | Medium | 2.3.7-p4-ext-8, 2.4.0-ext-8, 2.4.1-ext-8, 2.4.2-ext-8, 2.4.3-ext-8, 2.4.4-p9, 2.4.5-p8, 2.4.6-p6, 2.4.7-p1 | 10.07.2024 |
SB2024071008 |
||
| #VU94050 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') CVE-2024-34105 |
CWE-79 | Low | 2.3.7-p4-ext-8, 2.4.0-ext-8, 2.4.1-ext-8, 2.4.2-ext-8, 2.4.3-ext-8, 2.4.4-p9, 2.4.5-p8, 2.4.6-p6, 2.4.7-p1 | 10.07.2024 |
SB2024071008 |
||
| #VU94048 - Unrestricted Upload of File with Dangerous Type CVE-2024-34110 |
CWE-434 | Low | 2.3.7-p4-ext-8, 2.4.0-ext-8, 2.4.1-ext-8, 2.4.2-ext-8, 2.4.3-ext-8, 2.4.4-p9, 2.4.5-p8, 2.4.6-p6, 2.4.7-p1 | 10.07.2024 |
SB2024071008 |
||
| #VU94046 - Improper input validation CVE-2024-34109 |
CWE-20 | Low | 2.3.7-p4-ext-8, 2.4.0-ext-8, 2.4.1-ext-8, 2.4.2-ext-8, 2.4.3-ext-8, 2.4.4-p9, 2.4.5-p8, 2.4.6-p6, 2.4.7-p1 | 10.07.2024 |
SB2024071008 |
||
| #VU94045 - Improper input validation CVE-2024-34108 |
CWE-20 | Low | 2.3.7-p4-ext-8, 2.4.0-ext-8, 2.4.1-ext-8, 2.4.2-ext-8, 2.4.3-ext-8, 2.4.4-p9, 2.4.5-p8, 2.4.6-p6, 2.4.7-p1 | 10.07.2024 |
SB2024071008 |
||
| #VU94038 - Improper Authorization CVE-2024-34104 |
CWE-285 | High | 2.3.7-p4-ext-8, 2.4.0-ext-8, 2.4.1-ext-8, 2.4.2-ext-8, 2.4.3-ext-8, 2.4.4-p9, 2.4.5-p8, 2.4.6-p6, 2.4.7-p1 | 10.07.2024 |
SB2024071008 |
||
| #VU94037 - Improper Authentication CVE-2024-34103 |
CWE-287 | High | 2.3.7-p4-ext-8, 2.4.0-ext-8, 2.4.1-ext-8, 2.4.2-ext-8, 2.4.3-ext-8, 2.4.4-p9, 2.4.5-p8, 2.4.6-p6, 2.4.7-p1 | 09.07.2024 |
SB2024071008 |
||
| #VU91983 - Improper Restriction of XML External Entity Reference ('XXE') CVE-2024-34102 |
CWE-611 | High | 2.3.7-p4-ext-8, 2.4.0-ext-8, 2.4.1-ext-8, 2.4.2-ext-8, 2.4.3-ext-8, 2.4.4-p9, 2.4.5-p8, 2.4.6-p6, 2.4.7-p1 | 12.06.2024 |
SB2024071008 |
||
| #VU91981 - Server-Side Request Forgery (SSRF) CVE-2024-34111 |
CWE-918 | High | 2.3.7-p4-ext-8, 2.4.0-ext-8, 2.4.1-ext-8, 2.4.2-ext-8, 2.4.3-ext-8, 2.4.4-p9, 2.4.5-p8, 2.4.6-p6, 2.4.7-p1 | 12.06.2024 |
SB2024071008 |
||
| #VU88313 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') CVE-2024-20759 |
CWE-79 | Medium | 2.3.7-p4-ext-7, 2.4.0-ext-7, 2.4.1-ext-7, 2.4.2-ext-7, 2.4.3-ext-7, 2.4.4-p8, 2.4.5-p7, 2.4.6-p5, 2.4.7 | 09.04.2024 |
SB2024040975 |
||
| #VU88311 - Improper input validation CVE-2024-20758 |
CWE-20 | High | 2.3.7-p4-ext-7, 2.4.0-ext-7, 2.4.1-ext-7, 2.4.2-ext-7, 2.4.3-ext-7, 2.4.4-p8, 2.4.5-p7, 2.4.6-p5, 2.4.7 | 09.04.2024 |
SB2024040975 |
||
| #VU86463 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') CVE-2024-20719 |
CWE-79 | Low | 2.3.7-p4-ext-6, 2.4.0-ext-6, 2.4.1-ext-6, 2.4.2-ext-6, 2.4.3-ext-6, 2.4.4-p7, 2.4.5-p6, 2.4.6-p4 | 13.02.2024 |
SB2024021368 |
Showing elements 141 - 160 out of 348