Vulmon Recent Vulnerabilities Product List Research Posts Trends Blog About Contact

adobe magento commerce 2.4.1 vulnerabilities and exploits

(subscribe to this query)
5.3
CVSSv3

CVE-2021-21012

Magento versions 2.4.1 (and previous versions), 2.4.0-p1 (and previous versions) and 2.3.6 (and previous versions) are vulnerable to an insecure direct object vulnerability (IDOR) in the checkout module. Successful exploitation could lead to sensitive information disclosure.
Adobe Magento CommerceAdobe Magento Commerce 2.4.0Adobe Magento Commerce 2.4.1Adobe Magento Open SourceAdobe Magento Open Source 2.4.0Adobe Magento Open Source 2.4.1
6.5
CVSSv3

CVE-2023-29289

Adobe Commerce versions 2.4.6 (and previous versions), 2.4.5-p2 (and previous versions) and 2.4.4-p3 (and previous versions) are affected by an XML Injection vulnerability. An attacker with low privileges can trigger a specially crafted script to a security feature bypass. Exploi...
Adobe Commerce 2.3.7Adobe Commerce 2.4.0Adobe Commerce 2.4.1Adobe Commerce 2.4.2Adobe Commerce 2.4.3Adobe Commerce 2.4.4Adobe Commerce 2.4.5Adobe Commerce 2.4.6Adobe Magento 2.4.4Adobe Magento 2.4.5Adobe Magento 2.4.6
5.3
CVSSv3

CVE-2023-29290

Adobe Commerce versions 2.4.6 (and previous versions), 2.4.5-p2 (and previous versions) and 2.4.4-p3 (and previous versions) are affected by an Incorrect Authorization vulnerability that could result in a security feature bypass. An attacker could leverage this vulnerability to b...
Adobe Commerce 2.3.7Adobe Commerce 2.4.0Adobe Commerce 2.4.1Adobe Commerce 2.4.2Adobe Commerce 2.4.3Adobe Commerce 2.4.4Adobe Commerce 2.4.5Adobe Commerce 2.4.6Adobe Magento 2.4.4Adobe Magento 2.4.5Adobe Magento 2.4.6
4.9
CVSSv3

CVE-2023-29291

Adobe Commerce versions 2.4.6 (and previous versions), 2.4.5-p2 (and previous versions) and 2.4.4-p3 (and previous versions) are affected by a Server-Side Request Forgery (SSRF) vulnerability that could lead to arbitrary file system read. An admin-privilege authenticated attacker...
Adobe Commerce 2.3.7Adobe Commerce 2.4.0Adobe Commerce 2.4.1Adobe Commerce 2.4.2Adobe Commerce 2.4.3Adobe Commerce 2.4.4Adobe Commerce 2.4.5Adobe Commerce 2.4.6Adobe Magento 2.4.4Adobe Magento 2.4.5Adobe Magento 2.4.6
4.9
CVSSv3

CVE-2023-29292

Adobe Commerce versions 2.4.6 (and previous versions), 2.4.5-p2 (and previous versions) and 2.4.4-p3 (and previous versions) are affected by a Server-Side Request Forgery (SSRF) vulnerability that could lead to arbitrary file system read. An admin-privilege authenticated attacker...
Adobe Commerce 2.3.7Adobe Commerce 2.4.0Adobe Commerce 2.4.1Adobe Commerce 2.4.2Adobe Commerce 2.4.3Adobe Commerce 2.4.4Adobe Commerce 2.4.5Adobe Commerce 2.4.6Adobe Magento 2.4.4Adobe Magento 2.4.5Adobe Magento 2.4.6
2.7
CVSSv3

CVE-2023-29293

Adobe Commerce versions 2.4.6 (and previous versions), 2.4.5-p2 (and previous versions) and 2.4.4-p3 (and previous versions) are affected by an Improper Input Validation vulnerability that could result in a Security feature bypass. An admin privileged attacker could leverage this...
Adobe Commerce 2.3.7Adobe Commerce 2.4.0Adobe Commerce 2.4.1Adobe Commerce 2.4.2Adobe Commerce 2.4.3Adobe Commerce 2.4.4Adobe Commerce 2.4.5Adobe Commerce 2.4.6Adobe Magento 2.4.4Adobe Magento 2.4.5Adobe Magento 2.4.6
4.3
CVSSv3

CVE-2023-29294

Adobe Commerce versions 2.4.6 (and previous versions), 2.4.5-p2 (and previous versions) and 2.4.4-p3 (and previous versions) are affected by a Business Logic Errors vulnerability that could result in a security feature bypass. A low-privileged attacker could leverage this vulnera...
Adobe Commerce 2.3.7Adobe Commerce 2.4.0Adobe Commerce 2.4.1Adobe Commerce 2.4.2Adobe Commerce 2.4.3Adobe Commerce 2.4.4Adobe Commerce 2.4.5Adobe Commerce 2.4.6Adobe Magento 2.4.4Adobe Magento 2.4.5Adobe Magento 2.4.6
4.3
CVSSv3

CVE-2023-29295

Adobe Commerce versions 2.4.6 (and previous versions), 2.4.5-p2 (and previous versions) and 2.4.4-p3 (and previous versions) are affected by an Incorrect Authorization vulnerability that could result in a security feature bypass. A low-privileged attacker could leverage this vuln...
Adobe Commerce 2.3.7Adobe Commerce 2.4.0Adobe Commerce 2.4.1Adobe Commerce 2.4.2Adobe Commerce 2.4.3Adobe Commerce 2.4.4Adobe Commerce 2.4.5Adobe Commerce 2.4.6Adobe Magento 2.4.4Adobe Magento 2.4.5Adobe Magento 2.4.6
4.3
CVSSv3

CVE-2023-29288

Adobe Commerce versions 2.4.6 (and previous versions), 2.4.5-p2 (and previous versions) and 2.4.4-p3 (and previous versions) are affected by an Incorrect Authorization vulnerability that could result in a security feature bypass. A privileged attacker could leverage this vulnerab...
Adobe Commerce 2.3.7Adobe Commerce 2.4.0Adobe Commerce 2.4.1Adobe Commerce 2.4.2Adobe Commerce 2.4.3Adobe Commerce 2.4.4Adobe Commerce 2.4.5Adobe Commerce 2.4.6Adobe Magento 2.4.4Adobe Magento 2.4.5Adobe Magento 2.4.6
7.5
CVSSv3

CVE-2023-22248

Adobe Commerce versions 2.4.6 (and previous versions), 2.4.5-p2 (and previous versions) and 2.4.4-p3 (and previous versions) are affected by an Incorrect Authorization vulnerability that could result in a security feature bypass. An attacker could leverage this vulnerability to l...
Adobe Commerce 2.3.7Adobe Commerce 2.4.0Adobe Commerce 2.4.1Adobe Commerce 2.4.2Adobe Commerce 2.4.3Adobe Commerce 2.4.4Adobe Commerce 2.4.5Adobe Commerce 2.4.6Adobe Magento 2.4.4Adobe Magento 2.4.5Adobe Magento 2.4.6
Preferred Score:
CVSSv3
CVSSv2
CVSSv3
CVSSv4
EPSS
VMScore
Recommendations:
booking & appointment - repute infosystemsCVE-2024-12826stored XSS7-zipCVE-2025-0703CVE-2025-0411CVE-2024-43468themerex addonswirelessCVE-2025-23006herd effectsCVE-2025-0707information disclosure
Home
/
Search Results
Vulmon Logo Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Product List Vendor List Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook