Vulmon Recent Vulnerabilities Product List Research Posts Trends Blog About Contact

adobe commerce webhooks vulnerabilities and exploits

(subscribe to this query)
9.8
CVSSv3

CVE-2024-34102

Adobe Commerce versions 2.4.7, 2.4.6-p5, 2.4.5-p7, 2.4.4-p8 and previous versions are affected by an Improper Restriction of XML External Entity Reference ('XXE') vulnerability that could result in arbitrary code execution. An attacker could exploit this vulnerability b...
Adobe Commerce 2.4.2Adobe Commerce 2.4.3Adobe Commerce 2.4.4Adobe Commerce 2.4.5Adobe Commerce 2.4.6Adobe Commerce 2.4.7Adobe Commerce WebhooksAdobe Magento 2.4.4Adobe Magento 2.4.5Adobe Magento 2.4.6Adobe Magento 2.4.7
8.2
CVSSv3

CVE-2024-34104

Adobe Commerce versions 2.4.7, 2.4.6-p5, 2.4.5-p7, 2.4.4-p8 and previous versions are affected by an Improper Authorization vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to bypass security measures and gain unauthorize...
Adobe Commerce 2.3.7Adobe Commerce 2.4.0Adobe Commerce 2.4.1Adobe Commerce 2.4.2Adobe Commerce 2.4.3Adobe Commerce 2.4.4Adobe Commerce 2.4.5Adobe Commerce 2.4.6Adobe Commerce WebhooksAdobe Magento 2.4.4Adobe Magento 2.4.5Adobe Magento 2.4.6
5.3
CVSSv3

CVE-2024-34106

Adobe Commerce versions 2.4.7, 2.4.6-p5, 2.4.5-p7, 2.4.4-p8 and previous versions are affected by an Incorrect Authorization vulnerability that could result in a security feature bypass. An attacker could exploit this vulnerability to gain unauthorized access or perform actions w...
Adobe Commerce 2.3.7Adobe Commerce 2.4.0Adobe Commerce 2.4.1Adobe Commerce 2.4.2Adobe Commerce 2.4.3Adobe Commerce 2.4.4Adobe Commerce 2.4.5Adobe Commerce 2.4.6Adobe Commerce WebhooksAdobe Magento 2.4.4Adobe Magento 2.4.5Adobe Magento 2.4.6
9.8
CVSSv3

CVE-2024-34107

Adobe Commerce versions 2.4.7, 2.4.6-p5, 2.4.5-p7, 2.4.4-p8 and previous versions are affected by an Improper Access Control vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to bypass security measures and view minor unau...
Adobe Commerce 2.3.7Adobe Commerce 2.4.0Adobe Commerce 2.4.1Adobe Commerce 2.4.2Adobe Commerce 2.4.3Adobe Commerce 2.4.4Adobe Commerce 2.4.5Adobe Commerce 2.4.6Adobe Commerce WebhooksAdobe Magento 2.4.4Adobe Magento 2.4.5Adobe Magento 2.4.6
7.2
CVSSv3

CVE-2024-34108

Adobe Commerce versions 2.4.7, 2.4.6-p5, 2.4.5-p7, 2.4.4-p8 and previous versions are affected by an Improper Input Validation vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue does not require user interact...
Adobe Commerce 2.3.7Adobe Commerce 2.4.0Adobe Commerce 2.4.1Adobe Commerce 2.4.2Adobe Commerce 2.4.3Adobe Commerce 2.4.4Adobe Commerce 2.4.5Adobe Commerce 2.4.6Adobe Commerce WebhooksAdobe Magento 2.4.4Adobe Magento 2.4.5Adobe Magento 2.4.6
7.2
CVSSv3

CVE-2024-34110

Adobe Commerce versions 2.4.7, 2.4.6-p5, 2.4.5-p7, 2.4.4-p8 and previous versions are affected by an Unrestricted Upload of File with Dangerous Type vulnerability that could result in arbitrary code execution. A high-privilege attacker could exploit this vulnerability by uploadin...
Adobe Commerce 2.3.7Adobe Commerce 2.4.0Adobe Commerce 2.4.1Adobe Commerce 2.4.2Adobe Commerce 2.4.3Adobe Commerce 2.4.4Adobe Commerce 2.4.5Adobe Commerce 2.4.6Adobe Commerce WebhooksAdobe Magento 2.4.4Adobe Magento 2.4.5Adobe Magento 2.4.6
8.8
CVSSv3

CVE-2024-34111

Adobe Commerce versions 2.4.7, 2.4.6-p5, 2.4.5-p7, 2.4.4-p8 and previous versions are affected by a Server-Side Request Forgery (SSRF) vulnerability that could lead to arbitrary file system read. A low-privilege authenticated attacker can force the application to make arbitrary r...
Adobe Commerce 2.3.7Adobe Commerce 2.4.0Adobe Commerce 2.4.1Adobe Commerce 2.4.2Adobe Commerce 2.4.3Adobe Commerce 2.4.4Adobe Commerce 2.4.5Adobe Commerce 2.4.6Adobe Commerce WebhooksAdobe Magento 2.4.4Adobe Magento 2.4.5Adobe Magento 2.4.6
8.1
CVSSv3

CVE-2024-34103

Adobe Commerce versions 2.4.7, 2.4.6-p5, 2.4.5-p7, 2.4.4-p8 and previous versions are affected by an Improper Authentication vulnerability that could result in privilege escalation. An attacker could exploit this vulnerability to gain unauthorized access or elevated privileges wi...
Adobe Commerce 2.3.7Adobe Commerce 2.4.0Adobe Commerce 2.4.1Adobe Commerce 2.4.2Adobe Commerce 2.4.3Adobe Commerce 2.4.4Adobe Commerce 2.4.5Adobe Commerce 2.4.6Adobe Commerce WebhooksAdobe Magento 2.4.4Adobe Magento 2.4.5Adobe Magento 2.4.6
4.8
CVSSv3

CVE-2024-34105

Adobe Commerce versions 2.4.7, 2.4.6-p5, 2.4.5-p7, 2.4.4-p8 and previous versions are affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by an admin malicious user to inject malicious scripts into vulnerable form fields. Malicious JavaScript may be...
Adobe Commerce 2.3.7Adobe Commerce 2.4.0Adobe Commerce 2.4.1Adobe Commerce 2.4.2Adobe Commerce 2.4.3Adobe Commerce 2.4.4Adobe Commerce 2.4.5Adobe Commerce 2.4.6Adobe Commerce WebhooksAdobe Magento 2.4.4Adobe Magento 2.4.5Adobe Magento 2.4.6
7.2
CVSSv3

CVE-2024-34109

Adobe Commerce versions 2.4.7, 2.4.6-p5, 2.4.5-p7, 2.4.4-p8 and previous versions are affected by an Improper Input Validation vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue does not require user interact...
Adobe Commerce 2.3.7Adobe Commerce 2.4.0Adobe Commerce 2.4.1Adobe Commerce 2.4.2Adobe Commerce 2.4.3Adobe Commerce 2.4.4Adobe Commerce 2.4.5Adobe Commerce 2.4.6Adobe Commerce WebhooksAdobe Magento 2.4.4Adobe Magento 2.4.5Adobe Magento 2.4.6
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
injectCVE-2024-44852CVE-2024-3400CVE-2024-30129insecure direct object referenceCVE-2024-12115CVE-2024-11220CVE-2024-51378privilege escalation
Home
/
Search Results
Vulmon Logo Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Product List Vendor List Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook