CO
E-commerce
Commerce
On CISA KEVExploited in the wild
251
CVEs
6
On KEV
10.0
Max CVSS
11
New 30D
Severity mix
Critical 23High 104Medium 110Low 14
Watch
Add Commerce to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2024-39409 | 4.3 | Aug 14 | Adobe Commerce versions 2.4.7-p1, 2.4.6-p6, 2.4.5-p8, 2.4.4-p9 and earlier are affected by a Cross-Site Request Forgery (CSRF) vulnerability that could allow an attacker to bypass… Affected: through 2.4.3; 2.4.4; 2.4.4; 2.4.4; 2.4.4; 2.4.4; +25 more |
| CVE-2024-39408 | 4.3 | Aug 14 | Adobe Commerce versions 2.4.7-p1, 2.4.6-p6, 2.4.5-p8, 2.4.4-p9 and earlier are affected by a Cross-Site Request Forgery (CSRF) vulnerability that could allow an attacker to bypass… Affected: through 2.4.3; 2.4.4; 2.4.4; 2.4.4; 2.4.4; 2.4.4; +25 more |
| CVE-2024-39407 | 4.3 | Aug 14 | Adobe Commerce versions 2.4.7-p1, 2.4.6-p6, 2.4.5-p8, 2.4.4-p9 and earlier are affected by an Improper Authorization vulnerability that could result in a Security feature bypass Affected: through 2.4.3; 2.4.4; 2.4.4; 2.4.4; 2.4.4; 2.4.4; +25 more |
| CVE-2024-39405 | 4.3 | Aug 14 | Adobe Commerce versions 2.4.7-p1, 2.4.6-p6, 2.4.5-p8, 2.4.4-p9 and earlier are affected by an Improper Authorization vulnerability that could result in a Security feature bypass Affected: through 2.4.3; 2.4.4; 2.4.4; 2.4.4; 2.4.4; 2.4.4; +25 more |
| CVE-2024-39404 | 4.3 | Aug 14 | Adobe Commerce versions 2.4.7-p1, 2.4.6-p6, 2.4.5-p8, 2.4.4-p9 and earlier are affected by an Improper Authorization vulnerability that could result in a Security feature bypass Affected: through 2.4.3; 2.4.4; 2.4.4; 2.4.4; 2.4.4; 2.4.4; +25 more |
| CVE-2023-29296 | 4.3 | Jun 15 | Adobe Commerce versions 2.4.6 (and earlier), 2.4.5-p2 (and earlier) and 2.4.4-p3 (and earlier) are affected by an Incorrect Authorization vulnerability that could result in a… Affected: 2.3.7; 2.3.7; 2.3.7; 2.3.7; 2.3.7; 2.3.7; +21 more |
| CVE-2023-29295 | 4.3 | Jun 15 | Adobe Commerce versions 2.4.6 (and earlier), 2.4.5-p2 (and earlier) and 2.4.4-p3 (and earlier) are affected by an Incorrect Authorization vulnerability that could result in a… Affected: 2.3.7; 2.3.7; 2.3.7; 2.3.7; 2.3.7; 2.3.7; +21 more |
| CVE-2023-29294 | 4.3 | Jun 15 | Adobe Commerce versions 2.4.6 (and earlier), 2.4.5-p2 (and earlier) and 2.4.4-p3 (and earlier) are affected by a Business Logic Errors vulnerability that could result in a… Affected: 2.4.4; 2.4.4; 2.4.4; 2.4.4; 2.4.5; 2.4.5; +2 more |
| CVE-2023-29288 | 4.3 | Jun 15 | Adobe Commerce versions 2.4.6 (and earlier), 2.4.5-p2 (and earlier) and 2.4.4-p3 (and earlier) are affected by an Incorrect Authorization vulnerability that could result in a… Affected: 2.3.7; 2.3.7; 2.3.7; 2.3.7; 2.3.7; 2.3.7; +21 more |
| CVE-2023-22251 | 4.3 | Mar 27 | Adobe Commerce versions 2.4.4-p2 (and earlier) and 2.4.5-p1 (and earlier) are affected by an Incorrect Authorization vulnerability Affected: before 2.4.4; 2.4.4; 2.4.4; 2.4.4; 2.4.5; 2.4.5 |