Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1110 CNY

100%

Adobe — Vulnerabilities & Security Advisories 4340

Browse all 4340 CVE security advisories affecting Adobe. AI-powered Chinese analysis, POCs, and references for each vulnerability.

Adobe Systems Incorporated primarily develops multimedia and creativity software, most notably the PDF format and the Creative Cloud suite. With a vast attack surface encompassing 4,289 recorded CVEs, the company has historically faced significant security challenges. Common vulnerability classes include remote code execution (RCE), cross-site scripting (XSS), and privilege escalation flaws, often stemming from complex legacy codebases and third-party integrations. Notable incidents include critical RCE vulnerabilities in Acrobat Reader and Flash Player, which were frequently exploited by state-sponsored actors and criminal syndicates. The discontinuation of Flash Player marked a pivotal shift, yet the persistence of high-severity bugs in PDF parsing and document processing engines continues to pose risks. Adobe’s extensive market share makes it a high-value target, necessitating rigorous patch management and secure coding practices to mitigate the ongoing threat landscape associated with its widely deployed enterprise and consumer applications.

Found 169 results / 4340Clear Filters
CVE IDTitleCVSSSeverityPublished
CVE-2024-39398 OTP 2FA can be bruteforced — Adobe CommerceCWE-307 7.4 High2024-08-14
CVE-2024-39407 Adobe Commerce | Improper Authorization (CWE-285) — Adobe CommerceCWE-285 4.3 Medium2024-08-14
CVE-2024-39401 Adobe Commerce | Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') (CWE-78) — Adobe CommerceCWE-78 8.4 High2024-08-14
CVE-2024-39397 Adobe Commerce | Unrestricted Upload of File with Dangerous Type (CWE-434) — Adobe CommerceCWE-434 9.0 Critical2024-08-14
CVE-2024-39411 Adobe Commerce | Improper Authorization (CWE-285) — Adobe CommerceCWE-285 4.3 Medium2024-08-14
CVE-2024-39409 Adobe Commerce | Cross-Site Request Forgery (CSRF) (CWE-352) — Adobe CommerceCWE-352 4.3 Medium2024-08-14
CVE-2024-39416 Unauthorized user can export Orders Sale Report — Adobe CommerceCWE-285 4.3 Medium2024-08-14
CVE-2024-39414 Being able to import/export tax rates without proper privileges — Adobe CommerceCWE-284 4.3 Medium2024-08-14
CVE-2024-39412 Adobe Commerce | Improper Authorization (CWE-285) — Adobe CommerceCWE-285 4.3 Medium2024-08-14
CVE-2024-39406 Adobe Commerce | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') (CWE-22) — Adobe CommerceCWE-22 6.8 Medium2024-08-14
CVE-2024-39402 Adobe Commerce | Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') (CWE-78) — Adobe CommerceCWE-78 8.4 High2024-08-14
CVE-2024-39400 DOM XSS through integrations can impact other admins — Adobe CommerceCWE-79 8.1 High2024-08-14
CVE-2024-39404 A user without Shop Policy Parameters section privilege can alter the shop policy parameters section — Adobe CommerceCWE-285 4.3 Medium2024-08-14
CVE-2024-39405 Adobe Commerce | Improper Authorization (CWE-285) — Adobe CommerceCWE-285 4.3 Medium2024-08-14
CVE-2024-39415 An unauthorized user can export the Tax Sales Report — Adobe CommerceCWE-285 4.3 Medium2024-08-14
CVE-2024-34106 Insecure Direct Object Reference - An attacker can able to erase the victim quote details — Adobe CommerceCWE-863 5.3 Medium2024-06-13
CVE-2024-34109 Adobe Commerce | Improper Input Validation (CWE-20) — Adobe CommerceCWE-20 7.2 High2024-06-13
CVE-2024-34103 Customer account takeover via web API call & subsequent password reset — Adobe CommerceCWE-287 8.1 High2024-06-13
CVE-2024-34110 RCE in the Adobe Commerce Webhook module through a legit webhook definition — Adobe CommerceCWE-434 7.2 High2024-06-13
CVE-2024-34111 SSRF in service connector — Adobe CommerceCWE-918 6.5 Medium2024-06-13
CVE-2024-34105 Stored Cross Site Scripting in Order Comment — Adobe CommerceCWE-79 4.8 Medium2024-06-13
CVE-2024-34107 Adobe Commerce | Improper Access Control (CWE-284) — Adobe CommerceCWE-284 5.3 Medium2024-06-13
CVE-2024-34104 Adobe Commerce | Improper Authorization (CWE-285) — Adobe CommerceCWE-285 8.2 High2024-06-13
CVE-2024-34102 XXE can expose crypt key and other secrets granting full admin access — Adobe CommerceCWE-611 9.8 Critical2024-06-13
CVE-2024-34108 Large attack surface through legit webhook usage in Adobe Commerce — Adobe CommerceCWE-20 9.1 Critical2024-06-13
CVE-2024-20758 Adobe Commerce | Improper Input Validation (CWE-20) — Adobe CommerceCWE-20 9.0 Critical2024-04-10
CVE-2024-20759 Adobe Commerce | Cross-site Scripting (Stored XSS) (CWE-79) — Adobe CommerceCWE-79 8.1 High2024-04-10
CVE-2024-20716 Force high-usage of resources by generating unlimited coupons: Adobe Commerce — Adobe CommerceCWE-400 4.9 Medium2024-02-15
CVE-2024-20717 Stored admin XSS via PayPal authentication certificate — Adobe CommerceCWE-79 5.4 Medium2024-02-15
CVE-2024-20718 [Spain] CSRF to delete Requisition Lists at Adobe Commerce — Adobe CommerceCWE-352 4.3 Medium2024-02-15

This page lists every published CVE security advisory associated with Adobe. Each entry links to a detailed page with CVSS scoring, CWE classification, affected products and references. AI-generated Chinese analysis is provided for fast triage.