Skip to content
OpenAdvisories

Product · Adobe

Adobe Commerce

210 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

83 results · Clear filters · Feed

  • High 7.2
    CVE-2021-36021

    Magento Commerce CMS Page Improper Input Validation Could Lead To Remote Code Execution

    Magento versions 2.4.2 (and earlier), 2.4.2-p1 (and earlier) and 2.3.7 (and earlier) are affected by an Improper input validation vulnerability within the CMS page scheduled update feature. An authenticated attacker with administrative privilege could leverag…

    Adobe Adobe Commerce magento/community-edition magento/project-community-edition Packagist
  • High 7.5
    CVE-2023-38207

    Adobe Commerce XML Injection (aka Blind XPath Injection) Arbitrary file system read

    Adobe Commerce versions 2.4.6-p1 (and earlier), 2.4.5-p3 (and earlier) and 2.4.4-p4 (and earlier) are affected by a XML Injection (aka Blind XPath Injection) vulnerability that could lead in minor arbitrary file system read. Exploitation of this issue does no…

    Adobe Adobe Commerce magento/community-edition magento/project-community-edition Packagist
  • High 8.8
    CVE-2022-42344

    [CVE-2021-36032] Magento IDOR Leads to Account Takeover

    Adobe Commerce versions 2.4.3-p2 (and earlier), 2.3.7-p3 (and earlier) and 2.4.4 (and earlier) are affected by an Incorrect Authorization vulnerability. An authenticated attacker can exploit this vulnerability to achieve information exposure and privilege esc…

    Adobe Adobe Commerce magento/community-edition Packagist