Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

Adobe Commerce — Vulnerabilities & Security Advisories 210

All 210 CVE vulnerabilities found in Adobe Commerce, with AI-generated Chinese analysis, references, and POCs.

This page aggregates security vulnerabilities associated with the Adobe Commerce vendor and product under the general category of software weakness types. It collects a comprehensive list of security flaws, ranging from critical remote code execution risks to minor configuration issues, covering the time period from early 2019 through the present day. By examining this curated data, users can effectively track Adobe’s security advisories to stay informed about recent patch releases, understand the characteristics and impact of specific weakness classes prevalent in e-commerce platforms, and look up a detailed history of vulnerabilities affecting this specific product. This resource serves as a central reference for security professionals, developers, and system administrators who need to assess the risk posture of their Adobe Commerce deployments. The information includes details on affected versions, exploit availability, and remediation guidance where applicable. Reviewing these entries helps organizations prioritize their patching strategies and ensures that known security gaps are addressed promptly. The data is organized to facilitate easy searching by vulnerability identifier, severity score, or release date, allowing for efficient integration into vulnerability management workflows. Understanding the historical context of these weaknesses provides valuable insights into the evolution of security practices within the Adobe ecosystem and helps predict potential future risks based on past trends and patterns in code quality and dependency management.

Vendor: Adobe

CVE ID Title CVSS Severity Published
CVE-2025-24409 Adobe Commerce | Incorrect Authorization (CWE-863) CWE-863 8.2 High 2025-02-11
CVE-2025-24425 Adobe Commerce | Business Logic Errors (CWE-840) CWE-840 5.3 Medium 2025-02-11
CVE-2025-24421 Adobe Commerce | Incorrect Authorization (CWE-863) CWE-863 4.3 Medium 2025-02-11
CVE-2025-24412 Adobe Commerce | Cross-site Scripting (Stored XSS) (CWE-79) CWE-79 8.7 High 2025-02-11
CVE-2025-24426 Adobe Commerce | Improper Access Control (CWE-284) CWE-284 6.5 Medium 2025-02-11
CVE-2025-24427 Adobe Commerce | Improper Access Control (CWE-284) CWE-284 6.5 Medium 2025-02-11
CVE-2025-24428 Adobe Commerce | Cross-site Scripting (Stored XSS) (CWE-79) CWE-79 5.4 Medium 2025-02-11
CVE-2025-24410 Adobe Commerce | Cross-site Scripting (Stored XSS) (CWE-79) CWE-79 8.7 High 2025-02-11
CVE-2025-24408 Adobe Commerce | Information Exposure (CWE-200) CWE-200 6.5 Medium 2025-02-11
CVE-2025-24435 Adobe Commerce | Improper Access Control (CWE-284) CWE-284 4.3 Medium 2025-02-11
CVE-2024-49521 Adobe Commerce | Server-Side Request Forgery (SSRF) (CWE-918) CWE-918 7.7 High 2024-11-12
CVE-2024-45127 Adobe Commerce | Cross-site Scripting (Stored XSS) (CWE-79) CWE-79 4.8 Medium 2024-10-10
CVE-2024-45128 Adobe Commerce | Incorrect Authorization (CWE-863) CWE-863 5.4 Medium 2024-10-10
CVE-2024-45133 Adobe Commerce | Improper Access Control (CWE-284) CWE-284 2.7 Low 2024-10-10
CVE-2024-45124 Adobe Commerce | Improper Access Control (CWE-284) CWE-284 5.3 Medium 2024-10-10
CVE-2024-45123 Adobe Commerce | Cross-site Scripting (Reflected XSS) (CWE-79) CWE-79 6.1 Medium 2024-10-10
CVE-2024-45121 Adobe Commerce | Improper Access Control (CWE-284) CWE-284 4.3 Medium 2024-10-10
CVE-2024-45117 Adobe Commerce | Improper Input Validation (CWE-20) CWE-20 7.6 High 2024-10-10
CVE-2024-45115 Adobe Commerce | Improper Authentication (CWE-287) CWE-287 9.8 Critical 2024-10-10
CVE-2024-45116 Adobe Commerce | Cross-site Scripting (XSS) (CWE-79) CWE-79 8.1 High 2024-10-10
CVE-2024-45119 Adobe Commerce | Server-Side Request Forgery (SSRF) (CWE-918) CWE-918 4.9 Medium 2024-10-10
CVE-2024-45122 Adobe Commerce | Improper Access Control (CWE-284) CWE-284 4.3 Medium 2024-10-10
CVE-2024-45120 Adobe Commerce | Time-of-check Time-of-use (TOCTOU) Race Condition (CWE-367) CWE-367 3.1 Low 2024-10-10
CVE-2024-45135 Adobe Commerce | Improper Access Control (CWE-284) CWE-284 2.7 Low 2024-10-10
CVE-2024-45130 Adobe Commerce | Improper Access Control (CWE-284) CWE-284 4.3 Medium 2024-10-10
CVE-2024-45132 Adobe Commerce | Incorrect Authorization (CWE-863) CWE-863 6.5 Medium 2024-10-10
CVE-2024-45148 Adobe Commerce | Improper Authentication (CWE-287) CWE-287 8.8 High 2024-10-10
CVE-2024-45131 Adobe Commerce | Incorrect Authorization (CWE-863) CWE-863 5.4 Medium 2024-10-10
CVE-2024-45134 Adobe Commerce | Information Exposure (CWE-200) CWE-200 2.7 Low 2024-10-10
CVE-2024-45129 Adobe Commerce | Improper Access Control (CWE-284) CWE-284 4.3 Medium 2024-10-10

All 210 known CVE vulnerabilities affecting Adobe Commerce with full Chinese analysis, references, and POCs where available.