CW
Product
Commerce Webhooks
On CISA KEVExploited in the wild
10
CVEs
1
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 2High 6Medium 2Low 0
Watch
Add Commerce Webhooks to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2024-34102 In wildKEV | 9.8 | Jun 13 | XXE can expose crypt key and other secrets granting full admin access Affected: 1.2.0 before 1.5.0 |
| CVE-2024-34107 | 9.8 | Jun 13 | Adobe Commerce versions 2.4.7, 2.4.6-p5, 2.4.5-p7, 2.4.4-p8 and earlier are affected by an Improper Access Control vulnerability that could result in a Security feature bypass Affected: 1.2.0 through 1.4.0 |
| CVE-2024-34111 | 8.8 | Jun 13 | Adobe Commerce versions 2.4.7, 2.4.6-p5, 2.4.5-p7, 2.4.4-p8 and earlier are affected by a Server-Side Request Forgery (SSRF) vulnerability that could lead to arbitrary file system… Affected: 1.2.0 through 1.4.0 |
| CVE-2024-34104 | 8.2 | Jun 13 | Adobe Commerce versions 2.4.7, 2.4.6-p5, 2.4.5-p7, 2.4.4-p8 and earlier are affected by an Improper Authorization vulnerability that could result in a Security feature bypass Affected: 1.2.0 through 1.4.0 |
| CVE-2024-34103 | 8.1 | Jun 13 | Adobe Commerce versions 2.4.7, 2.4.6-p5, 2.4.5-p7, 2.4.4-p8 and earlier are affected by an Improper Authentication vulnerability that could result in privilege escalation Affected: 1.2.0 through 1.4.0 |
| CVE-2024-34110 | 7.2 | Jun 13 | Adobe Commerce versions 2.4.7, 2.4.6-p5, 2.4.5-p7, 2.4.4-p8 and earlier are affected by an Unrestricted Upload of File with Dangerous Type vulnerability that could result in… Affected: 1.2.0 through 1.4.0 |
| CVE-2024-34109 | 7.2 | Jun 13 | Adobe Commerce versions 2.4.7, 2.4.6-p5, 2.4.5-p7, 2.4.4-p8 and earlier are affected by an Improper Input Validation vulnerability that could result in arbitrary code execution in… Affected: 1.2.0 through 1.4.0 |
| CVE-2024-34108 | 7.2 | Jun 13 | Adobe Commerce versions 2.4.7, 2.4.6-p5, 2.4.5-p7, 2.4.4-p8 and earlier are affected by an Improper Input Validation vulnerability that could result in arbitrary code execution in… Affected: 1.2.0 through 1.4.0 |
| CVE-2024-34106 | 5.3 | Jun 13 | Adobe Commerce versions 2.4.7, 2.4.6-p5, 2.4.5-p7, 2.4.4-p8 and earlier are affected by an Incorrect Authorization vulnerability that could result in a security feature bypass Affected: 1.2.0 through 1.4.0 |
| CVE-2024-34105 | 4.8 | Jun 13 | Adobe Commerce versions 2.4.7, 2.4.6-p5, 2.4.5-p7, 2.4.4-p8 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by an admin attacker… Affected: 1.2.0 through 1.4.0 |
Showing 10