Vulmon Recent Vulnerabilities Product List Research Posts Trends Blog About Contact

adobe commerce 2.4.1 vulnerabilities and exploits

(subscribe to this query)
5.3
CVSSv3

CVE-2023-29287

Adobe Commerce versions 2.4.6 (and previous versions), 2.4.5-p2 (and previous versions) and 2.4.4-p3 (and previous versions) are affected by an Information Exposure vulnerability that could lead to a security feature bypass. An attacker could leverage this vulnerability to leak m...
Adobe Commerce 2.3.7Adobe Commerce 2.4.0Adobe Commerce 2.4.1Adobe Commerce 2.4.2Adobe Commerce 2.4.3Adobe Commerce 2.4.4Adobe Commerce 2.4.5Adobe Commerce 2.4.6Adobe Magento 2.4.4Adobe Magento 2.4.5Adobe Magento 2.4.6
4.3
CVSSv3

CVE-2023-29296

Adobe Commerce versions 2.4.6 (and previous versions), 2.4.5-p2 (and previous versions) and 2.4.4-p3 (and previous versions) are affected by an Incorrect Authorization vulnerability that could result in a security feature bypass. A low-privileged attacker could leverage this vuln...
Adobe Commerce 2.3.7Adobe Commerce 2.4.0Adobe Commerce 2.4.1Adobe Commerce 2.4.2Adobe Commerce 2.4.3Adobe Commerce 2.4.4Adobe Commerce 2.4.5Adobe Commerce 2.4.6Adobe Magento 2.4.4Adobe Magento 2.4.5Adobe Magento 2.4.6
7.2
CVSSv3

CVE-2023-29297

Adobe Commerce versions 2.4.6 (and previous versions), 2.4.5-p2 (and previous versions) and 2.4.4-p3 (and previous versions) are affected by a Improper Neutralization of Special Elements Used in a Template Engine vulnerability that could lead to arbitrary code execution by an adm...
Adobe Commerce 2.3.7Adobe Commerce 2.4.0Adobe Commerce 2.4.1Adobe Commerce 2.4.2Adobe Commerce 2.4.3Adobe Commerce 2.4.4Adobe Commerce 2.4.5Adobe Commerce 2.4.6Adobe Magento 2.4.4Adobe Magento 2.4.5Adobe Magento 2.4.6
6.6
CVSSv3

CVE-2023-38249

Adobe Commerce versions 2.4.7-beta1 (and previous versions), 2.4.6-p2 (and previous versions), 2.4.5-p4 (and previous versions) and 2.4.4-p5 (and previous versions) are affected by an Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') v...
Adobe Commerce 2.3.7Adobe Commerce 2.4.0Adobe Commerce 2.4.1Adobe Commerce 2.4.2Adobe Commerce 2.4.3Adobe Commerce 2.4.4Adobe Commerce 2.4.5Adobe Commerce 2.4.6Adobe Commerce 2.4.7Adobe Magento 2.4.4Adobe Magento 2.4.5Adobe Magento 2.4.6
5.3
CVSSv3

CVE-2023-38251

Adobe Commerce versions 2.4.7-beta1 (and previous versions), 2.4.6-p2 (and previous versions), 2.4.5-p4 (and previous versions) and 2.4.4-p5 (and previous versions) are affected by a Uncontrolled Resource Consumption vulnerability that could lead in minor application denial-of-se...
Adobe Commerce 2.3.7Adobe Commerce 2.4.0Adobe Commerce 2.4.1Adobe Commerce 2.4.2Adobe Commerce 2.4.3Adobe Commerce 2.4.4Adobe Commerce 2.4.5Adobe Commerce 2.4.6Adobe Commerce 2.4.7Adobe Magento 2.4.4Adobe Magento 2.4.5Adobe Magento 2.4.6
7.2
CVSSv3

CVE-2024-34109

Adobe Commerce versions 2.4.7, 2.4.6-p5, 2.4.5-p7, 2.4.4-p8 and previous versions are affected by an Improper Input Validation vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue does not require user interact...
Adobe Commerce 2.3.7Adobe Commerce 2.4.0Adobe Commerce 2.4.1Adobe Commerce 2.4.2Adobe Commerce 2.4.3Adobe Commerce 2.4.4Adobe Commerce 2.4.5Adobe Commerce 2.4.6Adobe Commerce WebhooksAdobe Magento 2.4.4Adobe Magento 2.4.5Adobe Magento 2.4.6
6.8
CVSSv3

CVE-2023-26366

Adobe Commerce versions 2.4.7-beta1 (and previous versions), 2.4.6-p2 (and previous versions), 2.4.5-p4 (and previous versions) and 2.4.4-p5 (and previous versions) are affected by a Server-Side Request Forgery (SSRF) vulnerability that could lead to arbitrary file system read. A...
Adobe Commerce 2.3.7Adobe Commerce 2.4.0Adobe Commerce 2.4.1Adobe Commerce 2.4.2Adobe Commerce 2.4.3Adobe Commerce 2.4.4Adobe Commerce 2.4.5Adobe Commerce 2.4.6Adobe Commerce 2.4.7Adobe Magento 2.4.4Adobe Magento 2.4.5Adobe Magento 2.4.6
4.9
CVSSv3

CVE-2023-26367

Adobe Commerce versions 2.4.7-beta1 (and previous versions), 2.4.6-p2 (and previous versions), 2.4.5-p4 (and previous versions) and 2.4.4-p5 (and previous versions) are affected by an Improper Input Validation vulnerability that could lead to arbitrary file system read by an admi...
Adobe Commerce 2.3.7Adobe Commerce 2.4.0Adobe Commerce 2.4.1Adobe Commerce 2.4.2Adobe Commerce 2.4.3Adobe Commerce 2.4.4Adobe Commerce 2.4.5Adobe Commerce 2.4.6Adobe Commerce 2.4.7Adobe Magento 2.4.4Adobe Magento 2.4.5Adobe Magento 2.4.6
8.1
CVSSv3

CVE-2024-34103

Adobe Commerce versions 2.4.7, 2.4.6-p5, 2.4.5-p7, 2.4.4-p8 and previous versions are affected by an Improper Authentication vulnerability that could result in privilege escalation. An attacker could exploit this vulnerability to gain unauthorized access or elevated privileges wi...
Adobe Commerce 2.3.7Adobe Commerce 2.4.0Adobe Commerce 2.4.1Adobe Commerce 2.4.2Adobe Commerce 2.4.3Adobe Commerce 2.4.4Adobe Commerce 2.4.5Adobe Commerce 2.4.6Adobe Commerce WebhooksAdobe Magento 2.4.4Adobe Magento 2.4.5Adobe Magento 2.4.6
8.2
CVSSv3

CVE-2024-34104

Adobe Commerce versions 2.4.7, 2.4.6-p5, 2.4.5-p7, 2.4.4-p8 and previous versions are affected by an Improper Authorization vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to bypass security measures and gain unauthorize...
Adobe Commerce 2.3.7Adobe Commerce 2.4.0Adobe Commerce 2.4.1Adobe Commerce 2.4.2Adobe Commerce 2.4.3Adobe Commerce 2.4.4Adobe Commerce 2.4.5Adobe Commerce 2.4.6Adobe Commerce WebhooksAdobe Magento 2.4.4Adobe Magento 2.4.5Adobe Magento 2.4.6
Preferred Score:
CVSSv3
CVSSv2
CVSSv3
CVSSv4
EPSS
VMScore
Recommendations:
booking & appointment - repute infosystemsCVE-2024-12826stored XSS7-zipCVE-2025-0703CVE-2025-0411CVE-2024-43468themerex addonswirelessCVE-2025-23006herd effectsCVE-2025-0707information disclosure
Home
/
Search Results
Vulmon Logo Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Product List Vendor List Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook