Adobe Commerce Webhooks vulnerabilities

• adobe commerce, commerce webhooks, magento +2 more Insecure Direct Object Reference - An attacker can able to erase the victim quote details CVE-2024-34106 Fix available 5.3 MediumJune 13, 2024
• adobe commerce, commerce webhooks, magento +2 more Customer account takeover via web API call & subsequent password reset CVE-2024-34103 Fix available 8.1 HighJune 13, 2024
• adobe commerce, commerce webhooks, magento +2 more Adobe Commerce | Improper Input Validation (CWE-20) CVE-2024-34109 Fix available 7.2 HighJune 13, 2024
• adobe commerce, commerce webhooks, magento +2 more SSRF in service connector CVE-2024-34111 Fix available 6.5 MediumJune 13, 2024
• adobe commerce, commerce webhooks, magento +2 more RCE in the Adobe Commerce Webhook module through a legit webhook definition CVE-2024-34110 Fix available 7.2 HighJune 13, 2024
• adobe commerce, commerce webhooks, magento +2 more Adobe Commerce | Improper Access Control (CWE-284) CVE-2024-34107 Fix available 5.3 MediumJune 13, 2024
• adobe commerce, commerce webhooks, magento +2 more Stored Cross Site Scripting in Order Comment CVE-2024-34105 Fix available 4.8 MediumJune 13, 2024
• adobe commerce, commerce webhooks, magento +2 more Adobe Commerce | Improper Authorization (CWE-285) CVE-2024-34104 Fix available 8.2 HighJune 13, 2024
• adobe commerce, commerce and magento open source, commerce webhooks +1 more +3 more XXE can expose crypt key and other secrets granting full admin access CVE-2024-34102 In KEVPublic exploitFix available EPSS 100.0% 9.8 CriticalJune 13, 2024
• adobe commerce, commerce webhooks, magento +1 more +3 more Large attack surface through legit webhook usage in Adobe Commerce CVE-2024-34108 Fix available 9.1 CriticalJune 13, 2024