VendorsAdobecommerceall versions
Vulnerabilities

Adobe Commerce

Ranked by severity, then by exploit likelihood. Click a CVE ID for its full record.

208CVEs
CVE-2024-45128
Adobe Commerce | Incorrect Authorization (CWE-863)
Published 2024-10-10 · Modified
5.4EPSS 0.006
CVE-2024-45131
Adobe Commerce | Incorrect Authorization (CWE-863)
Published 2024-10-10 · Modified
5.4EPSS 0.005
CVE-2025-24437
Adobe Commerce | Incorrect Authorization (CWE-863)
Published 2025-02-11 · Analyzed
5.4EPSS 0.004
CVE-2024-20717
Stored admin XSS via PayPal authentication certificate
Published 2024-02-15 · Modified
5.4EPSS 0.004
CVE-2025-24428
Adobe Commerce | Cross-site Scripting (Stored XSS) (CWE-79)
Published 2025-02-11 · Analyzed
5.4EPSS 0.004
CVE-2024-39418
Adobe Commerce | Improper Authorization (CWE-285)
Published 2024-08-14 · Analyzed
5.4EPSS 0.004
CVE-2026-48371
Adobe Commerce | Cross-site Scripting (Stored XSS) (CWE-79)
Published 2026-07-14 · Analyzed
5.4EPSS 0.004
CVE-2026-21292
Adobe Commerce | Cross-site Scripting (Stored XSS) (CWE-79)
Published 2026-03-11 · Analyzed
5.4EPSS 0.003
CVE-2022-34259
Adobe Commerce Improper Access Control Security feature bypass
Published 2022-08-16 · Modified
5.3EPSS 0.016
CVE-2022-35689
Adobe Commerce Improper Access Control Security feature bypass
Published 2022-10-14 · Modified
5.3EPSS 0.013
CVE-2023-22250
Adobe Commerce Improper Access Control Security feature bypass
Published 2023-03-27 · Modified
5.3EPSS 0.010
CVE-2024-34106
Insecure Direct Object Reference - An attacker can able to erase the victim quote details
Published 2024-06-13 · Modified
5.3EPSS 0.008
CVE-2022-35692
Adobe Commerce Improper Access Control Security feature bypass
Published 2022-08-19 · Modified
5.3EPSS 0.008
CVE-2026-34654
Adobe Commerce | Dependency on Vulnerable Third-Party Component (CWE-1395)
Published 2026-05-12 · Analyzed
5.3EPSS 0.008
CVE-2023-29287
Adobe Commerce Information Exposure Security feature bypass
Published 2023-06-15 · Modified
5.3EPSS 0.007
CVE-2023-38251
Adobe Commerce | Uncontrolled Resource Consumption (CWE-400)
Published 2023-10-13 · Modified
5.3EPSS 0.007
CVE-2025-49559
Adobe Commerce | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') (CWE-22)
Published 2025-08-12 · Analyzed
5.3EPSS 0.007
CVE-2025-24425
Adobe Commerce | Business Logic Errors (CWE-840)
Published 2025-02-11 · Analyzed
5.3EPSS 0.006
CVE-2023-29290
Adobe Commerce Guest Cart Shipping Address Overwrite IDOR
Published 2023-06-15 · Modified
5.3EPSS 0.006
CVE-2024-45124
Adobe Commerce | Improper Access Control (CWE-284)
Published 2024-10-10 · Analyzed
5.3EPSS 0.006
CVE-2025-27190
Adobe Commerce | Improper Access Control (CWE-284)
Published 2025-04-08 · Analyzed
5.3EPSS 0.005
CVE-2026-21282
Adobe Commerce | Improper Input Validation (CWE-20)
Published 2026-03-11 · Analyzed
5.3EPSS 0.005
CVE-2025-27191
Adobe Commerce | Improper Access Control (CWE-284)
Published 2025-04-08 · Analyzed
5.3EPSS 0.005
CVE-2025-27206
Adobe Commerce | Improper Access Control (CWE-284)
Published 2025-06-10 · Analyzed
5.3EPSS 0.005
CVE-2026-21310
Adobe Commerce | Improper Input Validation (CWE-20)
Published 2026-03-11 · Analyzed
5.3EPSS 0.003
CVE-2026-21286
Adobe Commerce | Incorrect Authorization (CWE-863)
Published 2026-03-11 · Analyzed
5.3EPSS 0.003
CVE-2023-29291
Server Side Request Forgery (SSRF) in USPS carrier integration configuration
Published 2023-06-15 · Modified
4.9EPSS 0.011
CVE-2023-29292
Server Side Request Forgery (SSRF) in FedEx carrier integration configuration
Published 2023-06-15 · Modified
4.9EPSS 0.010
CVE-2024-45119
Adobe Commerce | Server-Side Request Forgery (SSRF) (CWE-918)
Published 2024-10-10 · Analyzed
4.9EPSS 0.009
CVE-2024-20716
Force high-usage of resources by generating unlimited coupons: Adobe Commerce
Published 2024-02-15 · Modified
4.9EPSS 0.009
CVE-2023-26367
Error based file extraction via PHP filter chains during product bulk import logic
Published 2023-10-13 · Modified
4.9EPSS 0.007
CVE-2022-34258
Adobe Commerce Stored XSS Arbitrary code execution
Published 2022-08-16 · Modified
4.8EPSS 0.685
CVE-2023-22249
Adobe Commerce Stored XSS Arbitrary code execution
Published 2023-03-27 · Modified
4.8EPSS 0.585
CVE-2024-34105
Stored Cross Site Scripting in Order Comment
Published 2024-06-13 · Modified
4.8EPSS 0.007
CVE-2024-45127
Adobe Commerce | Cross-site Scripting (Stored XSS) (CWE-79)
Published 2024-10-10 · Analyzed
4.8EPSS 0.005
CVE-2026-47999
Adobe Commerce | Cross-site Scripting (Stored XSS) (CWE-79)
Published 2026-07-14 · Analyzed
4.8EPSS 0.004
CVE-2026-34655
Adobe Commerce | Cross-site Scripting (Stored XSS) (CWE-79)
Published 2026-05-12 · Analyzed
4.8EPSS 0.004
CVE-2026-34658
Adobe Commerce | Cross-site Scripting (Stored XSS) (CWE-79)
Published 2026-05-12 · Analyzed
4.8EPSS 0.004
CVE-2025-54266
Adobe Commerce | Cross-site Scripting (Stored XSS) (CWE-79)
Published 2025-10-14 · Analyzed
4.8EPSS 0.003
CVE-2026-21291
Adobe Commerce | Cross-site Scripting (Stored XSS) (CWE-79)
Published 2026-03-11 · Analyzed
4.8EPSS 0.003
← Prev4 / 6Next →