Adobe Commerce vulnerabilities

• adobe commerce, commerce b2b, magento +2 more Adobe Commerce | Improper Access Control (CWE-284) CVE-2024-45124 Fix available 5.3 MediumOctober 10, 2024
• adobe commerce, commerce b2b, magento +2 more Adobe Commerce | Cross-site Scripting (XSS) (CWE-79) CVE-2024-45116 Fix available 8.1 HighOctober 10, 2024
• adobe commerce, commerce b2b, magento +2 more Adobe Commerce | Improper Authentication (CWE-287) CVE-2024-45148 Fix available 8.8 HighOctober 10, 2024
• adobe commerce, commerce webhooks, magento +2 more Insecure Direct Object Reference - An attacker can able to erase the victim quote details CVE-2024-34106 Fix available 5.3 MediumJune 13, 2024
• adobe commerce, commerce webhooks, magento +2 more SSRF in service connector CVE-2024-34111 Fix available 6.5 MediumJune 13, 2024
• adobe commerce, magento commerce, magento open source +2 more Magento Commerce GraphQL Improper Input Validation Could Lead To Denial Of Service CVE-2021-36044 Fix available 7.5 HighSeptember 1, 2021
• adobe commerce, magento commerce, magento open source +2 more Magento Commerce Stored Cross-site Scripting Vulnerability CVE-2021-36027 Fix available 6.5 MediumSeptember 1, 2021
• adobe commerce, magento commerce, magento open source +2 more Magento Commerce Authenticated Blind SSRF Could Lead To Remote Code Execution CVE-2021-36043 Fix available 8.0 HighSeptember 1, 2021
• adobe commerce, magento commerce, magento open source +2 more Magento Commerce API File Option Upload Extension Improper Input Validation Vulnerability Could Lead To Remote Code Execution CVE-2021-36042 Fix available 9.1 CriticalSeptember 1, 2021
• adobe commerce, magento commerce, magento open source +2 more Magento Commerce Improper Input Validation During Checkout Process Could Lead To Privilege Escalation CVE-2021-36030 Fix available 7.5 HighSeptember 1, 2021
• adobe commerce, magento commerce, magento open source +2 more Magento Commerce Improper Input Validation Could Lead To Remote Code Execution CVE-2021-36041 Fix available 9.1 CriticalSeptember 1, 2021
• adobe commerce, magento commerce, magento open source +2 more Magento Commerce Improper Input Validation Could Lead To Remote Code Execution CVE-2021-36040 Fix available 9.1 CriticalSeptember 1, 2021
• adobe commerce, magento commerce, magento open source +2 more Magento Commerce Customer Edition Improper Input Validation Could Lead To Remote Code Execution CVE-2021-36025 Fix available 9.1 CriticalSeptember 1, 2021
• adobe commerce, magento commerce, magento open source +2 more Magento Commerce XML Injection Vulnerability In The 'City' Field Could Lead To Remote Code Execution CVE-2021-36020 Fix available 8.2 HighSeptember 1, 2021
• adobe commerce, magento commerce, magento open source +2 more Magento Commerce Stock Media Improper Input Validation Could Lead To Remote Code Execution CVE-2021-36035 9.1 CriticalSeptember 1, 2021
• adobe commerce, magento commerce, magento open source +2 more Magento Commerce Improper Neutralization of Special Elements Used In A Command CVE-2021-36024 Fix available 9.1 CriticalSeptember 1, 2021
• adobe commerce, magento commerce, magento open source +2 more Magento Commerce Path Traversal In `theme[preview_image]` Parameter Could Lead To Remote Code Execution CVE-2021-36031 Fix available 7.2 HighSeptember 1, 2021
• adobe commerce, magento commerce, magento open source +2 more Magento Commerce `quoteId` parameter Incorrect Authorization Vulnerability Could Lead To Information Disclosure CVE-2021-36039 Fix available 6.5 MediumSeptember 1, 2021
• adobe commerce, magento commerce, magento open source +2 more Magento Commerce Improper Authorization Vulnerability Could Lead To Remote Code Execution CVE-2021-36029 Fix available 9.1 CriticalSeptember 1, 2021
• adobe commerce, magento commerce, magento open source +2 more Magento Commerce Stored Cross-site Scripting Vulnerability CVE-2021-36026 Fix available 6.5 MediumSeptember 1, 2021
• adobe commerce, magento commerce, magento open source +2 more Magento Commerce Improper Input Validation Could Lead To Information Exposure and Privilege Escalation CVE-2021-36032 Fix available 8.3 HighSeptember 1, 2021
• adobe commerce, magento commerce, magento open source +2 more Magento Commerce Multishipping Module Improper Input Validation Could Lead To Information Exposure CVE-2021-36038 Fix available 6.5 MediumSeptember 1, 2021
• adobe commerce, magento commerce, magento open source +2 more Magento Commerce XML Injection Vulnerability Could Lead To Remote Code Execution CVE-2021-36028 Fix available 9.1 CriticalSeptember 1, 2021
• adobe commerce, magento commerce, magento open source +2 more Magento Commerce Improper Input Validation Could Lead To Remote Code Execution CVE-2021-36034 Fix available 9.1 CriticalSeptember 1, 2021
• adobe commerce, magento commerce, magento open source +2 more Magento Commerce Widgets Update Layout XML Injection Vulnerability Could Lead To Remote Code Execution CVE-2021-36022 Fix available 9.1 CriticalSeptember 1, 2021
• adobe commerce, magento commerce, magento open source +2 more Magento Commerce Widgets Module XML Injection Vulnerability Could Lead To Remote Code Execution CVE-2021-36033 Fix available 9.1 CriticalSeptember 1, 2021
• adobe commerce, magento commerce, magento open source +2 more Magento Commerce Improper Authorization Vulnerability Could Lead To Information Exposure CVE-2021-36037 Fix available 6.5 MediumSeptember 1, 2021
• adobe commerce, magento commerce, magento open source +2 more Magento Commerce Gift Card Business Logic Error CVE-2021-36012 Fix available 6.5 MediumSeptember 1, 2021