Skip to content

Browse Docs Sources Guide

Search/Get API key

Every CVE
Vendors
Adobe
Commerce

Adobe Commerce vulnerabilities

Known exploitedIn KEVPublic exploitFix available

adobe commerce, commerce b2b, magento +2 moreAdobe Commerce | Cross-site Scripting (Stored XSS) (CWE-79)CVE-2025-24414Fix available8.7 HighFebruary 11, 2025
adobe commerce, commerce b2b, magento +2 moreAdobe Commerce | Incorrect Authorization (CWE-863)CVE-2025-24437Fix available5.4 MediumFebruary 11, 2025
adobe commerce, commerce b2b, magento +2 moreAdobe Commerce | Incorrect Authorization (CWE-863)CVE-2025-24434Fix availableEPSS 17.2%9.1 CriticalFebruary 11, 2025
adobe commerce, commerce b2b, magento +2 moreAdobe Commerce | Cross-site Scripting (Stored XSS) (CWE-79)CVE-2025-24415Fix available8.7 HighFebruary 11, 2025
adobe commerce, commerce b2b, magento +2 moreAdobe Commerce | Improper Access Control (CWE-284)CVE-2025-24411Fix available8.1 HighFebruary 11, 2025
adobe commerce, commerce b2b +1 moreAdobe Commerce | Incorrect Authorization (CWE-863)CVE-2025-244204.3 MediumFebruary 11, 2025
adobe commerce, commerce b2b, magento +2 moreAdobe Commerce | Cross-site Scripting (Stored XSS) (CWE-79)CVE-2025-24416Fix available8.7 HighFebruary 11, 2025
adobe commerce, commerce b2b, magento +2 moreAdobe Commerce | Cross-site Scripting (Stored XSS) (CWE-79)CVE-2025-24413Fix available8.7 HighFebruary 11, 2025
adobe commerce, commerce b2b +1 moreAdobe Commerce | Incorrect Authorization (CWE-863)CVE-2025-244194.3 MediumFebruary 11, 2025
adobe commerce, commerce b2b, magento +2 moreAdobe Commerce | Time-of-check Time-of-use (TOCTOU) Race Condition (CWE-367)CVE-2025-24432Fix available3.7 LowFebruary 11, 2025
adobe commerce, commerce b2b, magento +2 moreAdobe Commerce | Time-of-check Time-of-use (TOCTOU) Race Condition (CWE-367)CVE-2025-24430Fix available3.7 LowFebruary 11, 2025
adobe commerce, commerce b2b +1 moreAdobe Commerce | Improper Access Control (CWE-284)CVE-2025-24424Fix available6.5 MediumFebruary 11, 2025
adobe commerce, commerce b2b, magento +2 moreAdobe Commerce | Improper Access Control (CWE-284)CVE-2025-24429Fix available3.5 LowFebruary 11, 2025
adobe commerce, commerce b2b, magento +2 moreAdobe Commerce | Incorrect Authorization (CWE-863)CVE-2025-24436Fix available4.3 MediumFebruary 11, 2025
adobe commerce, commerce b2b +1 moreAdobe Commerce | Incorrect Authorization (CWE-863)CVE-2025-244077.1 HighFebruary 11, 2025
adobe commerce, commerce b2b, magento +2 moreAdobe Commerce | Cross-site Scripting (Stored XSS) (CWE-79)CVE-2025-24438Fix available8.7 HighFebruary 11, 2025
adobe commerce, commerce b2b +1 moreAdobe Commerce | Improper Access Control (CWE-284)CVE-2025-244234.3 MediumFebruary 11, 2025
adobe commerce, commerce b2b +1 moreAdobe Commerce | Improper Authorization (CWE-285)CVE-2025-244188.1 HighFebruary 11, 2025
adobe commerce, commerce b2b, magento +2 moreAdobe Commerce | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') (CWE-22)CVE-2025-24406Fix available7.5 HighFebruary 11, 2025
adobe commerce, commerce b2b, magento +2 moreAdobe Commerce | Cross-site Scripting (Stored XSS) (CWE-79)CVE-2025-24417Fix available8.7 HighFebruary 11, 2025
adobe commerce, commerce b2b, magento +2 moreAdobe Commerce | Incorrect Authorization (CWE-863)CVE-2025-24409Fix available8.2 HighFebruary 11, 2025
adobe commerce, commerce b2b, magento +2 moreAdobe Commerce | Business Logic Errors (CWE-840)CVE-2025-24425Fix available5.3 MediumFebruary 11, 2025
adobe commerce, commerce b2b, magento +2 moreAdobe Commerce | Incorrect Authorization (CWE-863)CVE-2025-24421Fix available4.3 MediumFebruary 11, 2025
adobe commerce, commerce b2b, magento +2 moreAdobe Commerce | Cross-site Scripting (Stored XSS) (CWE-79)CVE-2025-24412Fix available8.7 HighFebruary 11, 2025
adobe commerce, commerce b2b, magento +2 moreAdobe Commerce | Improper Access Control (CWE-284)CVE-2025-24427Fix available6.5 MediumFebruary 11, 2025
adobe commerce, commerce b2b +1 moreAdobe Commerce | Improper Access Control (CWE-284)CVE-2025-244266.5 MediumFebruary 11, 2025
adobe commerce, commerce b2b, magento +2 moreAdobe Commerce | Cross-site Scripting (Stored XSS) (CWE-79)CVE-2025-24428Fix available5.4 MediumFebruary 11, 2025
adobe commerce, commerce b2b, magento +2 moreAdobe Commerce | Cross-site Scripting (Stored XSS) (CWE-79)CVE-2025-24410Fix available8.7 HighFebruary 11, 2025
adobe commerce, commerce b2b, magento +2 moreAdobe Commerce | Information Exposure (CWE-200)CVE-2025-24408Fix available6.5 MediumFebruary 11, 2025
adobe commerce, commerce b2b, magento +2 moreAdobe Commerce | Improper Access Control (CWE-284)CVE-2025-24435Fix available4.3 MediumFebruary 11, 2025
adobe commerce, magento +1 moreAdobe Commerce | Server-Side Request Forgery (SSRF) (CWE-918)CVE-2024-495217.7 HighNovember 12, 2024
adobe commerce, commerce b2b, magento +2 moreAdobe Commerce | Cross-site Scripting (Stored XSS) (CWE-79)CVE-2024-45127Fix available4.8 MediumOctober 10, 2024
adobe commerce, commerce b2b, magento +2 moreAdobe Commerce | Incorrect Authorization (CWE-863)CVE-2024-45128Fix available5.4 MediumOctober 10, 2024
adobe commerce, commerce b2b, magento +2 moreAdobe Commerce | Improper Access Control (CWE-284)CVE-2024-45133Fix available2.7 LowOctober 10, 2024
adobe commerce, commerce b2b, magento +2 moreAdobe Commerce | Improper Access Control (CWE-284)CVE-2024-45124Fix available5.3 MediumOctober 10, 2024
adobe commerce, commerce b2b, magento +2 moreAdobe Commerce | Cross-site Scripting (Reflected XSS) (CWE-79)CVE-2024-45123Fix available6.1 MediumOctober 10, 2024
adobe commerce, commerce b2b, magento +2 moreAdobe Commerce | Improper Access Control (CWE-284)CVE-2024-45121Fix available4.3 MediumOctober 10, 2024
adobe commerce, commerce b2b, magento +2 moreAdobe Commerce | Improper Authentication (CWE-287)CVE-2024-451159.8 CriticalOctober 10, 2024
adobe commerce, commerce b2b, magento +2 moreAdobe Commerce | Improper Input Validation (CWE-20)CVE-2024-45117Fix available7.6 HighOctober 10, 2024
adobe commerce, commerce b2b, magento +2 moreAdobe Commerce | Cross-site Scripting (XSS) (CWE-79)CVE-2024-45116Fix available8.1 HighOctober 10, 2024
adobe commerce, commerce b2b, magento +2 moreAdobe Commerce | Improper Access Control (CWE-284)CVE-2024-45122Fix available4.3 MediumOctober 10, 2024
adobe commerce, commerce b2b, magento +2 moreAdobe Commerce | Server-Side Request Forgery (SSRF) (CWE-918)CVE-2024-45119Fix available4.9 MediumOctober 10, 2024
adobe commerce, commerce b2b, magento +2 moreAdobe Commerce | Improper Access Control (CWE-284)CVE-2024-45135Fix available2.7 LowOctober 10, 2024
adobe commerce, commerce b2b, magento +2 moreAdobe Commerce | Time-of-check Time-of-use (TOCTOU) Race Condition (CWE-367)CVE-2024-45120Fix available3.1 LowOctober 10, 2024
adobe commerce, commerce b2b, magento +2 moreAdobe Commerce | Incorrect Authorization (CWE-863)CVE-2024-45132Fix available6.5 MediumOctober 10, 2024
adobe commerce, commerce b2b, magento +2 moreAdobe Commerce | Improper Access Control (CWE-284)CVE-2024-45130Fix available4.3 MediumOctober 10, 2024
adobe commerce, commerce b2b, magento +2 moreAdobe Commerce | Incorrect Authorization (CWE-863)CVE-2024-45131Fix available5.4 MediumOctober 10, 2024
adobe commerce, commerce b2b, magento +2 moreAdobe Commerce | Improper Authentication (CWE-287)CVE-2024-45148Fix available8.8 HighOctober 10, 2024
adobe commerce, commerce b2b, magento +2 moreAdobe Commerce | Information Exposure (CWE-200)CVE-2024-45134Fix available2.7 LowOctober 10, 2024
adobe commerce, commerce b2b, magento +2 moreAdobe Commerce | Improper Access Control (CWE-284)CVE-2024-45129Fix available4.3 MediumOctober 10, 2024
Show moreLoading…

Docs Sources Guide Browse Privacy Terms

esc

PagesAll vulnerabilities Browse Docs Sources Guide Get API key

MoveEnter Open