Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

Adobe Commerce — Vulnerabilities & Security Advisories 210

All 210 CVE vulnerabilities found in Adobe Commerce, with AI-generated Chinese analysis, references, and POCs.

This page aggregates security vulnerabilities associated with the Adobe Commerce vendor and product under the general category of software weakness types. It collects a comprehensive list of security flaws, ranging from critical remote code execution risks to minor configuration issues, covering the time period from early 2019 through the present day. By examining this curated data, users can effectively track Adobe’s security advisories to stay informed about recent patch releases, understand the characteristics and impact of specific weakness classes prevalent in e-commerce platforms, and look up a detailed history of vulnerabilities affecting this specific product. This resource serves as a central reference for security professionals, developers, and system administrators who need to assess the risk posture of their Adobe Commerce deployments. The information includes details on affected versions, exploit availability, and remediation guidance where applicable. Reviewing these entries helps organizations prioritize their patching strategies and ensures that known security gaps are addressed promptly. The data is organized to facilitate easy searching by vulnerability identifier, severity score, or release date, allowing for efficient integration into vulnerability management workflows. Understanding the historical context of these weaknesses provides valuable insights into the evolution of security practices within the Adobe ecosystem and helps predict potential future risks based on past trends and patterns in code quality and dependency management.

Vendor: Adobe

CVE ID Title CVSS Severity Published
CVE-2025-43586 Adobe Commerce | Improper Access Control (CWE-284) CWE-284 8.1 High 2025-06-10
CVE-2025-47110 Adobe Commerce | Cross-site Scripting (Stored XSS) (CWE-79) CWE-79 8.4 High 2025-06-10
CVE-2025-27207 Adobe Commerce | Improper Access Control (CWE-284) CWE-284 6.5 Medium 2025-06-10
CVE-2025-43585 Adobe Commerce | Improper Authorization (CWE-285) CWE-285 8.2 High 2025-06-10
CVE-2025-27190 Adobe Commerce | Improper Access Control (CWE-284) CWE-284 5.3 Medium 2025-04-08
CVE-2025-27192 Adobe Commerce | Insufficiently Protected Credentials (CWE-522) CWE-522 2.7 Low 2025-04-08
CVE-2025-27191 Adobe Commerce | Improper Access Control (CWE-284) CWE-284 5.3 Medium 2025-04-08
CVE-2025-27188 Adobe Commerce | Incorrect Authorization (CWE-863) CWE-863 4.3 Medium 2025-04-08
CVE-2025-27189 Adobe Commerce | Cross-Site Request Forgery (CSRF) (CWE-352) CWE-352 4.3 Medium 2025-04-08
CVE-2025-24422 Adobe Commerce | Improper Access Control (CWE-284) CWE-284 6.5 Medium 2025-02-11
CVE-2025-24414 Adobe Commerce | Cross-site Scripting (Stored XSS) (CWE-79) CWE-79 8.7 High 2025-02-11
CVE-2025-24437 Adobe Commerce | Incorrect Authorization (CWE-863) CWE-863 5.4 Medium 2025-02-11
CVE-2025-24434 Adobe Commerce | Incorrect Authorization (CWE-863) CWE-863 9.1 Critical 2025-02-11
CVE-2025-24415 Adobe Commerce | Cross-site Scripting (Stored XSS) (CWE-79) CWE-79 8.7 High 2025-02-11
CVE-2025-24411 Adobe Commerce | Improper Access Control (CWE-284) CWE-284 8.1 High 2025-02-11
CVE-2025-24416 Adobe Commerce | Cross-site Scripting (Stored XSS) (CWE-79) CWE-79 8.7 High 2025-02-11
CVE-2025-24420 Adobe Commerce | Incorrect Authorization (CWE-863) CWE-863 4.3 Medium 2025-02-11
CVE-2025-24419 Adobe Commerce | Incorrect Authorization (CWE-863) CWE-863 4.3 Medium 2025-02-11
CVE-2025-24413 Adobe Commerce | Cross-site Scripting (Stored XSS) (CWE-79) CWE-79 8.7 High 2025-02-11
CVE-2025-24432 Adobe Commerce | Time-of-check Time-of-use (TOCTOU) Race Condition (CWE-367) CWE-367 3.7 Low 2025-02-11
CVE-2025-24424 Adobe Commerce | Improper Access Control (CWE-284) CWE-284 6.5 Medium 2025-02-11
CVE-2025-24430 Adobe Commerce | Time-of-check Time-of-use (TOCTOU) Race Condition (CWE-367) CWE-367 3.7 Low 2025-02-11
CVE-2025-24436 Adobe Commerce | Incorrect Authorization (CWE-863) CWE-863 4.3 Medium 2025-02-11
CVE-2025-24429 Adobe Commerce | Improper Access Control (CWE-284) CWE-284 3.5 Low 2025-02-11
CVE-2025-24407 Adobe Commerce | Incorrect Authorization (CWE-863) CWE-863 7.1 High 2025-02-11
CVE-2025-24438 Adobe Commerce | Cross-site Scripting (Stored XSS) (CWE-79) CWE-79 8.7 High 2025-02-11
CVE-2025-24423 Adobe Commerce | Improper Access Control (CWE-284) CWE-284 4.3 Medium 2025-02-11
CVE-2025-24418 Adobe Commerce | Improper Authorization (CWE-285) CWE-285 8.1 High 2025-02-11
CVE-2025-24406 Adobe Commerce | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') (CWE-22) CWE-22 7.5 High 2025-02-11
CVE-2025-24417 Adobe Commerce | Cross-site Scripting (Stored XSS) (CWE-79) CWE-79 8.7 High 2025-02-11

All 210 known CVE vulnerabilities affecting Adobe Commerce with full Chinese analysis, references, and POCs where available.