Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1000 CNY

100.0%
Buy Us a Coffee

Adobe Commerce — Vulnerabilities & Security Advisories 154

All 154 CVE vulnerabilities found in Adobe Commerce, with AI-generated Chinese analysis, references, and POCs.

Vendor: Adobe

CVE IDTitleCVSSSeverityPublished
CVE-2024-45148 Adobe Commerce | Improper Authentication (CWE-287) CWE-287 8.8 High2024-10-10
CVE-2024-45131 Adobe Commerce | Incorrect Authorization (CWE-863) CWE-863 5.4 Medium2024-10-10
CVE-2024-45134 Adobe Commerce | Information Exposure (CWE-200) CWE-200 2.7 Low2024-10-10
CVE-2024-45129 Adobe Commerce | Improper Access Control (CWE-284) CWE-284 4.3 Medium2024-10-10
CVE-2024-45118 Adobe Commerce | Improper Access Control (CWE-284) CWE-284 6.5 Medium2024-10-10
CVE-2024-45125 Adobe Commerce | Incorrect Authorization (CWE-863) CWE-863 4.3 Medium2024-10-10
CVE-2024-45149 Adobe Commerce | Improper Access Control (CWE-284) CWE-284 2.7 Low2024-10-10
CVE-2024-39419 A user without ship permissions can ship the orders CWE-285 4.3 Medium2024-08-14
CVE-2024-39403 Stored XSS through Webhook module public key configuration CWE-79 7.6 High2024-08-14
CVE-2024-39418 Adobe Commerce | Improper Authorization (CWE-285) CWE-285 5.4 Medium2024-08-14
CVE-2024-39413 An unauthorized user can export the Invoiced Sales Report CWE-285 4.3 Medium2024-08-14
CVE-2024-39408 Adobe Commerce | Cross-Site Request Forgery (CSRF) (CWE-352) CWE-352 4.3 Medium2024-08-14
CVE-2024-39399 [Paris] Path Traversal lead to local file read CWE-22 7.7 High2024-08-14
CVE-2024-39417 An unauthorized user can export the Shipping Report CWE-285 4.3 Medium2024-08-14
CVE-2024-39410 Adobe Commerce | Cross-Site Request Forgery (CSRF) (CWE-352) CWE-352 4.3 Medium2024-08-14
CVE-2024-39398 OTP 2FA can be bruteforced CWE-307 7.4 High2024-08-14
CVE-2024-39407 Adobe Commerce | Improper Authorization (CWE-285) CWE-285 4.3 Medium2024-08-14
CVE-2024-39401 Adobe Commerce | Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') (CWE-78) CWE-78 8.4 High2024-08-14
CVE-2024-39397 Adobe Commerce | Unrestricted Upload of File with Dangerous Type (CWE-434) CWE-434 9.0 Critical2024-08-14
CVE-2024-39411 Adobe Commerce | Improper Authorization (CWE-285) CWE-285 4.3 Medium2024-08-14
CVE-2024-39409 Adobe Commerce | Cross-Site Request Forgery (CSRF) (CWE-352) CWE-352 4.3 Medium2024-08-14
CVE-2024-39416 Unauthorized user can export Orders Sale Report CWE-285 4.3 Medium2024-08-14
CVE-2024-39414 Being able to import/export tax rates without proper privileges CWE-284 4.3 Medium2024-08-14
CVE-2024-39412 Adobe Commerce | Improper Authorization (CWE-285) CWE-285 4.3 Medium2024-08-14
CVE-2024-39406 Adobe Commerce | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') (CWE-22) CWE-22 6.8 Medium2024-08-14
CVE-2024-39402 Adobe Commerce | Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') (CWE-78) CWE-78 8.4 High2024-08-14
CVE-2024-39400 DOM XSS through integrations can impact other admins CWE-79 8.1 High2024-08-14
CVE-2024-39404 A user without Shop Policy Parameters section privilege can alter the shop policy parameters section CWE-285 4.3 Medium2024-08-14
CVE-2024-39405 Adobe Commerce | Improper Authorization (CWE-285) CWE-285 4.3 Medium2024-08-14
CVE-2024-39415 An unauthorized user can export the Tax Sales Report CWE-285 4.3 Medium2024-08-14

All 154 known CVE vulnerabilities affecting Adobe Commerce with full Chinese analysis, references, and POCs where available.