Vulmon Recent Vulnerabilities Product List Research Posts Trends Blog About Contact

adobe commerce 2.4.1 vulnerabilities and exploits

(subscribe to this query)
6.6
CVSSv3

CVE-2023-38221

Adobe Commerce versions 2.4.7-beta1 (and previous versions), 2.4.6-p2 (and previous versions), 2.4.5-p4 (and previous versions) and 2.4.4-p5 (and previous versions) are affected by an Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') v...
Adobe Commerce 2.3.7Adobe Commerce 2.4.0Adobe Commerce 2.4.1Adobe Commerce 2.4.2Adobe Commerce 2.4.3Adobe Commerce 2.4.4Adobe Commerce 2.4.5Adobe Commerce 2.4.6Adobe Commerce 2.4.7Adobe Magento 2.4.4Adobe Magento 2.4.5Adobe Magento 2.4.6
9.8
CVSSv3

CVE-2024-45115

Adobe Commerce versions 2.4.7-p2, 2.4.6-p7, 2.4.5-p9, 2.4.4-p10 and previous versions are affected by an Improper Authentication vulnerability that could result in privilege escalation. An attacker could exploit this vulnerability to gain unauthorized access or elevated privilege...
Adobe Commerce -Adobe Commerce 2.3.7Adobe Commerce 2.4.0Adobe Commerce 2.4.1Adobe Commerce 2.4.2Adobe Commerce 2.4.3Adobe Commerce 2.4.4Adobe Commerce 2.4.5Adobe Commerce 2.4.6Adobe Commerce 2.4.7Adobe Commerce B2b 1.3.3Adobe Commerce B2b 1.3.4
8.1
CVSSv3

CVE-2024-45116

Adobe Commerce versions 2.4.7-p2, 2.4.6-p7, 2.4.5-p9, 2.4.4-p10 and previous versions are affected by a Cross-Site Scripting (XSS) vulnerability that could be exploited to execute arbitrary code. If an admin attacker can trick a user into clicking a specially crafted link or subm...
Adobe Commerce -Adobe Commerce 2.3.7Adobe Commerce 2.4.0Adobe Commerce 2.4.1Adobe Commerce 2.4.2Adobe Commerce 2.4.3Adobe Commerce 2.4.4Adobe Commerce 2.4.5Adobe Commerce 2.4.6Adobe Commerce 2.4.7Adobe Commerce B2b 1.3.3Adobe Commerce B2b 1.3.4
7.6
CVSSv3

CVE-2024-45117

Adobe Commerce versions 2.4.7-p2, 2.4.6-p7, 2.4.5-p9, 2.4.4-p10 and previous versions are affected by an Improper Input Validation vulnerability that could lead to arbitrary file system read. An admin attacker could exploit this vulnerability to read files from the system outside...
Adobe Commerce -Adobe Commerce 2.3.7Adobe Commerce 2.4.0Adobe Commerce 2.4.1Adobe Commerce 2.4.2Adobe Commerce 2.4.3Adobe Commerce 2.4.4Adobe Commerce 2.4.5Adobe Commerce 2.4.6Adobe Commerce 2.4.7Adobe Commerce B2b 1.3.3Adobe Commerce B2b 1.3.4
6.5
CVSSv3

CVE-2024-45118

Adobe Commerce versions 2.4.7-p2, 2.4.6-p7, 2.4.5-p9, 2.4.4-p10 and previous versions are affected by an Improper Access Control vulnerability that could result in a Security feature bypass. A low-privileged attacker could leverage this vulnerability to bypass security measures a...
Adobe Commerce -Adobe Commerce 2.3.7Adobe Commerce 2.4.0Adobe Commerce 2.4.1Adobe Commerce 2.4.2Adobe Commerce 2.4.3Adobe Commerce 2.4.4Adobe Commerce 2.4.5Adobe Commerce 2.4.6Adobe Commerce 2.4.7Adobe Commerce B2b 1.3.3Adobe Commerce B2b 1.3.4
4.3
CVSSv3

CVE-2024-45121

Adobe Commerce versions 2.4.7-p2, 2.4.6-p7, 2.4.5-p9, 2.4.4-p10 and previous versions are affected by an Improper Access Control vulnerability that could result in a Security feature bypass. A low-privileged attacker could leverage this vulnerability to bypass security measures a...
Adobe Commerce -Adobe Commerce 2.3.7Adobe Commerce 2.4.0Adobe Commerce 2.4.1Adobe Commerce 2.4.2Adobe Commerce 2.4.3Adobe Commerce 2.4.4Adobe Commerce 2.4.5Adobe Commerce 2.4.6Adobe Commerce 2.4.7Adobe Commerce B2b 1.3.3Adobe Commerce B2b 1.3.4
4.3
CVSSv3

CVE-2024-45122

Adobe Commerce versions 2.4.7-p2, 2.4.6-p7, 2.4.5-p9, 2.4.4-p10 and previous versions are affected by an Improper Access Control vulnerability that could result in a Security feature bypass. A low-privileged attacker could leverage this vulnerability to bypass security measures a...
Adobe Commerce -Adobe Commerce 2.3.7Adobe Commerce 2.4.0Adobe Commerce 2.4.1Adobe Commerce 2.4.2Adobe Commerce 2.4.3Adobe Commerce 2.4.4Adobe Commerce 2.4.5Adobe Commerce 2.4.6Adobe Commerce 2.4.7Adobe Commerce B2b 1.3.3Adobe Commerce B2b 1.3.4
6.1
CVSSv3

CVE-2024-45123

Adobe Commerce versions 2.4.7-p2, 2.4.6-p7, 2.4.5-p9, 2.4.4-p10 and previous versions are affected by a reflected Cross-Site Scripting (XSS) vulnerability. If an attacker is able to convince a victim to visit a URL referencing a vulnerable page, malicious JavaScript content may b...
Adobe Commerce -Adobe Commerce 2.3.7Adobe Commerce 2.4.0Adobe Commerce 2.4.1Adobe Commerce 2.4.2Adobe Commerce 2.4.3Adobe Commerce 2.4.4Adobe Commerce 2.4.5Adobe Commerce 2.4.6Adobe Commerce 2.4.7Adobe Commerce B2b 1.3.3Adobe Commerce B2b 1.3.4
5.3
CVSSv3

CVE-2024-45124

Adobe Commerce versions 2.4.7-p2, 2.4.6-p7, 2.4.5-p9, 2.4.4-p10 and previous versions are affected by an Improper Access Control vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to bypass security measures and have a low ...
Adobe Commerce -Adobe Commerce 2.3.7Adobe Commerce 2.4.0Adobe Commerce 2.4.1Adobe Commerce 2.4.2Adobe Commerce 2.4.3Adobe Commerce 2.4.4Adobe Commerce 2.4.5Adobe Commerce 2.4.6Adobe Commerce 2.4.7Adobe Commerce B2b 1.3.3Adobe Commerce B2b 1.3.4
4.3
CVSSv3

CVE-2024-45125

Adobe Commerce versions 2.4.7-p2, 2.4.6-p7, 2.4.5-p9, 2.4.4-p10 and previous versions are affected by an Incorrect Authorization vulnerability that could result in a security feature bypass. A low-privileged attacker could exploit this vulnerability to have a low impact on integr...
Adobe Commerce -Adobe Commerce 2.3.7Adobe Commerce 2.4.0Adobe Commerce 2.4.1Adobe Commerce 2.4.2Adobe Commerce 2.4.3Adobe Commerce 2.4.4Adobe Commerce 2.4.5Adobe Commerce 2.4.6Adobe Commerce 2.4.7Adobe Commerce B2b 1.3.3Adobe Commerce B2b 1.3.4
Preferred Score:
CVSSv3
CVSSv2
CVSSv3
CVSSv4
EPSS
VMScore
Recommendations:
booking & appointment - repute infosystemsCVE-2024-12826stored XSS7-zipCVE-2025-0703CVE-2025-0411CVE-2024-43468themerex addonswirelessCVE-2025-23006herd effectsCVE-2025-0707information disclosure
Home
/
Search Results
Vulmon Logo Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Product List Vendor List Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook