Vulmon Recent Vulnerabilities Product List Research Posts Trends Blog About Contact

adobe magento commerce vulnerabilities and exploits

(subscribe to this query)
8.8
CVSSv3

CVE-2022-42344

Adobe Commerce versions 2.4.3-p2 (and previous versions), 2.3.7-p3 (and previous versions) and 2.4.4 (and previous versions) are affected by an Incorrect Authorization vulnerability. An authenticated attacker can exploit this vulnerability to achieve information exposure and priv...
Adobe CommerceAdobe Commerce 2.3.7Adobe Commerce 2.4.3Adobe Commerce 2.4.4Magento MagentoMagento Magento 2.3.7Magento Magento 2.4.3Magento Magento 2.4.4
7.2
CVSSv3

CVE-2022-34253

Adobe Commerce versions 2.4.3-p2 (and previous versions), 2.3.7-p3 (and previous versions) and 2.4.4 (and previous versions) are affected by an XML Injection vulnerability in the Widgets Module. An attacker with admin privileges can trigger a specially crafted script to achieve r...
Adobe CommerceAdobe Commerce 2.3.7Adobe Commerce 2.4.3Adobe Commerce 2.4.4Magento MagentoMagento Magento 2.3.7Magento Magento 2.4.3Magento Magento 2.4.4
9.8
CVSSv3

CVE-2022-34256

Adobe Commerce versions 2.4.3-p2 (and previous versions), 2.3.7-p3 (and previous versions) and 2.4.4 (and previous versions) are affected by an Improper Authorization vulnerability that could result in Privilege escalation. An attacker could leverage this vulnerability to access ...
Adobe CommerceAdobe Commerce 2.3.7Adobe Commerce 2.4.3Adobe Commerce 2.4.4Magento MagentoMagento Magento 2.3.7Magento Magento 2.4.3Magento Magento 2.4.4
4.8
CVSSv3

CVE-2022-34258

Adobe Commerce versions 2.4.3-p2 (and previous versions), 2.3.7-p3 (and previous versions) and 2.4.4 (and previous versions) are affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by an attacker with admin privileges to inject malicious scripts int...
Adobe CommerceAdobe Commerce 2.3.7Adobe Commerce 2.4.3Adobe Commerce 2.4.4Magento MagentoMagento Magento 2.3.7Magento Magento 2.4.3Magento Magento 2.4.4
5.3
CVSSv3

CVE-2022-34259

Adobe Commerce versions 2.4.3-p2 (and previous versions), 2.3.7-p3 (and previous versions) and 2.4.4 (and previous versions) are affected by an Improper Access Control vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to i...
Adobe CommerceAdobe Commerce 2.3.7Adobe Commerce 2.4.3Adobe Commerce 2.4.4Magento MagentoMagento Magento 2.3.7Magento Magento 2.4.3Magento Magento 2.4.4
8.8
CVSSv3

CVE-2022-34254

Adobe Commerce versions 2.4.3-p2 (and previous versions), 2.3.7-p3 (and previous versions) and 2.4.4 (and previous versions) are affected by an Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability that could be abused by an malici...
Adobe CommerceAdobe Commerce 2.3.7Adobe Commerce 2.4.3Adobe Commerce 2.4.4Magento MagentoMagento Magento 2.3.7Magento Magento 2.4.3Magento Magento 2.4.4
6.1
CVSSv3

CVE-2022-34257

Adobe Commerce versions 2.4.3-p2 (and previous versions), 2.3.7-p3 (and previous versions) and 2.4.4 (and previous versions) are affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by an malicious user to inject malicious scripts into vulnerable for...
Adobe CommerceAdobe Commerce 2.3.7Adobe Commerce 2.4.3Adobe Commerce 2.4.4Magento MagentoMagento Magento 2.3.7Magento Magento 2.4.3Magento Magento 2.4.4
8.8
CVSSv3

CVE-2022-34255

Adobe Commerce versions 2.4.3-p2 (and previous versions), 2.3.7-p3 (and previous versions) and 2.4.4 (and previous versions) are affected by an Improper Access Control vulnerability that could result in Privilege escalation. An attacker with a low privilege account could leverage...
Adobe CommerceAdobe Commerce 2.3.7Adobe Commerce 2.4.3Adobe Commerce 2.4.4Magento MagentoMagento Magento 2.3.7Magento Magento 2.4.3Magento Magento 2.4.4
9
CVSSv3

CVE-2024-39397

Adobe Commerce versions 2.4.7-p1, 2.4.6-p6, 2.4.5-p8, 2.4.4-p9 and previous versions are affected by an Unrestricted Upload of File with Dangerous Type vulnerability that could result in arbitrary code execution by an attacker. An attacker could exploit this vulnerability by uplo...
Adobe CommerceAdobe Commerce 2.4.4Adobe Commerce 2.4.5Adobe Commerce 2.4.6Adobe Commerce 2.4.7Adobe MagentoAdobe Magento 2.4.4Adobe Magento 2.4.5Adobe Magento 2.4.6Adobe Magento 2.4.7
7.4
CVSSv3

CVE-2024-39398

Adobe Commerce versions 2.4.7-p1, 2.4.6-p6, 2.4.5-p8, 2.4.4-p9 and previous versions are affected by an Improper Restriction of Excessive Authentication Attempts vulnerability that could result in a security feature bypass. An attacker could exploit this vulnerability to perform ...
Adobe CommerceAdobe Commerce 2.4.4Adobe Commerce 2.4.5Adobe Commerce 2.4.6Adobe Commerce 2.4.7Adobe MagentoAdobe Magento 2.4.4Adobe Magento 2.4.5Adobe Magento 2.4.6Adobe Magento 2.4.7
Preferred Score:
CVSSv3
CVSSv2
CVSSv3
CVSSv4
EPSS
VMScore
Recommendations:
booking & appointment - repute infosystemsCVE-2024-12826stored XSS7-zipCVE-2025-0703CVE-2025-0411CVE-2024-43468themerex addonswirelessCVE-2025-23006herd effectsCVE-2025-0707information disclosure
Home
/
Search Results
Vulmon Logo Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Product List Vendor List Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook