VendorsAdobeadobe_commerceall versions
Vulnerabilities

Adobe Adobe Commerce 2.4.2 Patch 1

Ranked by severity, then by exploit likelihood. Click a CVE ID for its full record.

23CVEs
CVE-2021-36020
Magento Commerce XML Injection Vulnerability In The 'City' Field Could Lead To Remote Code Execution
Published 2021-09-01 · Modified
9.8EPSS 0.027
CVE-2021-36022
Magento Commerce Widgets Update Layout XML Injection Vulnerability Could Lead To Remote Code Execution
Published 2021-09-01 · Modified
9.1EPSS 0.034
CVE-2021-36033
Magento Commerce Widgets Module XML Injection Vulnerability Could Lead To Remote Code Execution
Published 2021-09-01 · Modified
9.1EPSS 0.031
CVE-2021-36024
Magento Commerce Improper Neutralization of Special Elements Used In A Command
Published 2021-09-01 · Modified
9.1EPSS 0.029
CVE-2021-36028
Magento Commerce XML Injection Vulnerability Could Lead To Remote Code Execution
Published 2021-09-01 · Modified
9.1EPSS 0.029
CVE-2021-36040
Magento Commerce Improper Input Validation Could Lead To Remote Code Execution
Published 2021-09-01 · Modified
9.1EPSS 0.029
CVE-2021-36025
Magento Commerce Customer Edition Improper Input Validation Could Lead To Remote Code Execution
Published 2021-09-01 · Modified
9.1EPSS 0.028
CVE-2021-36035
Magento Commerce Stock Media Improper Input Validation Could Lead To Remote Code Execution
Published 2021-09-01 · Modified
9.1EPSS 0.028
CVE-2021-36029
Magento Commerce Improper Authorization Vulnerability Could Lead To Remote Code Execution
Published 2021-09-01 · Modified
9.1EPSS 0.025
CVE-2021-36042
Magento Commerce API File Option Upload Extension Improper Input Validation Vulnerability Could Lead To Remote Code Execution
Published 2021-09-01 · Modified
9.1EPSS 0.025
CVE-2021-36041
Magento Commerce Improper Input Validation Could Lead To Remote Code Execution
Published 2021-09-01 · Modified
9.1EPSS 0.024
CVE-2021-36034
Magento Commerce Improper Input Validation Could Lead To Remote Code Execution
Published 2021-09-01 · Modified
9.1EPSS 0.024
CVE-2021-36032
Magento Commerce Improper Input Validation Could Lead To Information Exposure and Privilege Escalation
Published 2021-09-01 · Modified
8.8EPSS 0.022
CVE-2021-36043
Magento Commerce Authenticated Blind SSRF Could Lead To Remote Code Execution
Published 2021-09-01 · Modified
8.0EPSS 0.019
CVE-2021-36030
Magento Commerce Improper Input Validation During Checkout Process Could Lead To Privilege Escalation
Published 2021-09-01 · Modified
7.5EPSS 0.023
CVE-2021-36044
Magento Commerce GraphQL Improper Input Validation Could Lead To Denial Of Service
Published 2021-09-01 · Modified
7.5EPSS 0.020
CVE-2021-36031
Magento Commerce Path Traversal In `theme[preview_image]` Parameter Could Lead To Remote Code Execution
Published 2021-09-01 · Modified
7.2EPSS 0.031
CVE-2021-36012
Magento Commerce Gift Card Business Logic Error
Published 2021-09-01 · Modified
6.5EPSS 0.020
CVE-2021-36037
Magento Commerce Improper Authorization Vulnerability Could Lead To Information Exposure
Published 2021-09-01 · Modified
6.5EPSS 0.018
CVE-2021-36038
Magento Commerce Multishipping Module Improper Input Validation Could Lead To Information Exposure
Published 2021-09-01 · Modified
6.5EPSS 0.018
CVE-2021-36039
Magento Commerce `quoteId` parameter Incorrect Authorization Vulnerability Could Lead To Information Disclosure
Published 2021-09-01 · Modified
6.5EPSS 0.017
CVE-2021-36026
Magento Commerce Stored Cross-site Scripting Vulnerability
Published 2021-09-01 · Modified
6.5EPSS 0.017
CVE-2021-36027
Magento Commerce Stored Cross-site Scripting Vulnerability
Published 2021-09-01 · Modified
6.5EPSS 0.014