VendorsAdobemagento2.4.7
Vulnerabilities

Adobe Magento 2.4.7

Ranked by severity, then by exploit likelihood. Click a CVE ID for its full record.

175CVEs
CVE-2025-27191
Adobe Commerce | Improper Access Control (CWE-284)
Published 2025-04-08 · Analyzed
5.3EPSS 0.005
CVE-2025-27206
Adobe Commerce | Improper Access Control (CWE-284)
Published 2025-06-10 · Analyzed
5.3EPSS 0.005
CVE-2026-21310
Adobe Commerce | Improper Input Validation (CWE-20)
Published 2026-03-11 · Analyzed
5.3EPSS 0.003
CVE-2026-21286
Adobe Commerce | Incorrect Authorization (CWE-863)
Published 2026-03-11 · Analyzed
5.3EPSS 0.003
CVE-2024-45119
Adobe Commerce | Server-Side Request Forgery (SSRF) (CWE-918)
Published 2024-10-10 · Analyzed
4.9EPSS 0.009
CVE-2023-26367
Error based file extraction via PHP filter chains during product bulk import logic
Published 2023-10-13 · Modified
4.9EPSS 0.007
CVE-2024-34105
Stored Cross Site Scripting in Order Comment
Published 2024-06-13 · Modified
4.8EPSS 0.007
CVE-2024-45127
Adobe Commerce | Cross-site Scripting (Stored XSS) (CWE-79)
Published 2024-10-10 · Analyzed
4.8EPSS 0.005
CVE-2026-34655
Adobe Commerce | Cross-site Scripting (Stored XSS) (CWE-79)
Published 2026-05-12 · Analyzed
4.8EPSS 0.004
CVE-2026-34658
Adobe Commerce | Cross-site Scripting (Stored XSS) (CWE-79)
Published 2026-05-12 · Analyzed
4.8EPSS 0.004
CVE-2026-47999
Adobe Commerce | Cross-site Scripting (Stored XSS) (CWE-79)
Published 2026-07-14 · Analyzed
4.8EPSS 0.004
CVE-2025-54266
Adobe Commerce | Cross-site Scripting (Stored XSS) (CWE-79)
Published 2025-10-14 · Analyzed
4.8EPSS 0.003
CVE-2026-21291
Adobe Commerce | Cross-site Scripting (Stored XSS) (CWE-79)
Published 2026-03-11 · Analyzed
4.8EPSS 0.003
CVE-2026-21359
Adobe Commerce | Incorrect Authorization (CWE-863)
Published 2026-03-11 · Analyzed
4.7EPSS 0.002
CVE-2026-34656
Adobe Commerce | Improper Authorization (CWE-285)
Published 2026-05-12 · Analyzed
4.3EPSS 0.006
CVE-2025-27188
Adobe Commerce | Incorrect Authorization (CWE-863)
Published 2025-04-08 · Analyzed
4.3EPSS 0.006
CVE-2024-45122
Adobe Commerce | Improper Access Control (CWE-284)
Published 2024-10-10 · Analyzed
4.3EPSS 0.006
CVE-2025-24421
Adobe Commerce | Incorrect Authorization (CWE-863)
Published 2025-02-11 · Analyzed
4.3EPSS 0.005
CVE-2025-24436
Adobe Commerce | Incorrect Authorization (CWE-863)
Published 2025-02-11 · Analyzed
4.3EPSS 0.005
CVE-2024-45121
Adobe Commerce | Improper Access Control (CWE-284)
Published 2024-10-10 · Analyzed
4.3EPSS 0.005
CVE-2024-45125
Adobe Commerce | Incorrect Authorization (CWE-863)
Published 2024-10-10 · Analyzed
4.3EPSS 0.005
CVE-2024-45129
Adobe Commerce | Improper Access Control (CWE-284)
Published 2024-10-10 · Analyzed
4.3EPSS 0.005
CVE-2024-45130
Adobe Commerce | Improper Access Control (CWE-284)
Published 2024-10-10 · Analyzed
4.3EPSS 0.005
CVE-2025-24435
Adobe Commerce | Improper Access Control (CWE-284)
Published 2025-02-11 · Modified
4.3EPSS 0.005
CVE-2024-39408
Adobe Commerce | Cross-Site Request Forgery (CSRF) (CWE-352)
Published 2024-08-14 · Analyzed
4.3EPSS 0.005
CVE-2024-39409
Adobe Commerce | Cross-Site Request Forgery (CSRF) (CWE-352)
Published 2024-08-14 · Analyzed
4.3EPSS 0.005
CVE-2024-39410
Adobe Commerce | Cross-Site Request Forgery (CSRF) (CWE-352)
Published 2024-08-14 · Analyzed
4.3EPSS 0.005
CVE-2024-39404
A user without Shop Policy Parameters section privilege can alter the shop policy parameters section
Published 2024-08-14 · Analyzed
4.3EPSS 0.005
CVE-2024-39411
Adobe Commerce | Improper Authorization (CWE-285)
Published 2024-08-14 · Analyzed
4.3EPSS 0.004
CVE-2024-39413
An unauthorized user can export the Invoiced Sales Report
Published 2024-08-14 · Analyzed
4.3EPSS 0.004
CVE-2024-39414
Being able to import/export tax rates without proper privileges
Published 2024-08-14 · Analyzed
4.3EPSS 0.004
CVE-2024-39415
An unauthorized user can export the Tax Sales Report
Published 2024-08-14 · Analyzed
4.3EPSS 0.004
CVE-2024-39417
An unauthorized user can export the Shipping Report
Published 2024-08-14 · Analyzed
4.3EPSS 0.004
CVE-2024-39407
Adobe Commerce | Improper Authorization (CWE-285)
Published 2024-08-14 · Analyzed
4.3EPSS 0.004
CVE-2024-39412
Adobe Commerce | Improper Authorization (CWE-285)
Published 2024-08-14 · Analyzed
4.3EPSS 0.004
CVE-2024-39419
A user without ship permissions can ship the orders
Published 2024-08-14 · Analyzed
4.3EPSS 0.004
CVE-2024-39405
Adobe Commerce | Improper Authorization (CWE-285)
Published 2024-08-14 · Analyzed
4.3EPSS 0.004
CVE-2024-39416
Unauthorized user can export Orders Sale Report
Published 2024-08-14 · Analyzed
4.3EPSS 0.004
CVE-2026-21297
Adobe Commerce | Incorrect Authorization (CWE-863)
Published 2026-03-11 · Analyzed
4.3EPSS 0.004
CVE-2026-21296
Adobe Commerce | Incorrect Authorization (CWE-863)
Published 2026-03-11 · Analyzed
4.3EPSS 0.003
← Prev4 / 5Next →