TI-2025-16287 CVE-2025-22387 · GHSA-p626-9v99-xc4x
An issue was discovered in Optimizely Configured Commerce before 5.2.2408.
Priority LOW 39
An issue was discovered in Optimizely Configured Commerce before 5.2.2408.
Optimizely
Records15All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high6CVSS 7.0–8.9
Exploited now
Optimizely records in CISA KEVNo Optimizely vulnerabilities are listed in CISA KEV.
Components
Products in the NVD configurations · select one to filter the recordsRecords
8 records in Configured Commerce · all components
TI-2025-16284 CVE-2025-22384 · GHSA-5jx8-96f6-fv22
An issue was discovered in Optimizely Configured Commerce before 5.2.2408.
Priority LOW 39
An issue was discovered in Optimizely Configured Commerce before 5.2.2408.
TI-2024-37148 CVE-2024-56174 · GHSA-244c-824v-c69g
In Optimizely Configured Commerce before 5.2.2408, malicious payloads can be stored and…
Priority LOW 37
In Optimizely Configured Commerce before 5.2.2408, malicious payloads can be stored and subsequently executed in users' browsers under specific conditions: XSS from client-side template injection in search history.
TI-2025-16286 CVE-2025-22386 · GHSA-jcgv-xjw5-6wp4
An issue was discovered in Optimizely Configured Commerce before 5.2.2408.
Priority LOW 34
An issue was discovered in Optimizely Configured Commerce before 5.2.2408.
TI-2024-37149 CVE-2024-56175 · GHSA-xjfx-ffgc-2697
In Optimizely Configured Commerce before 5.2.2408, malicious payloads can be stored and…
Priority LOW 27
In Optimizely Configured Commerce before 5.2.2408, malicious payloads can be stored and subsequently executed in users' browsers under specific conditions: XSS from client-side template injection in list item names.
TI-2025-16285 CVE-2025-22385 · GHSA-f98m-7gfc-g33x
An issue was discovered in Optimizely Configured Commerce before 5.2.2408.
Priority LOW 26
An issue was discovered in Optimizely Configured Commerce before 5.2.2408.
TI-2025-16283 CVE-2025-22383 · GHSA-79xq-2cpc-pjfm
An issue was discovered in Optimizely Configured Commerce before 5.2.2408.
Priority LOW 21
An issue was discovered in Optimizely Configured Commerce before 5.2.2408.
TI-2024-37147 CVE-2024-56173 · GHSA-jwm8-5prh-37pj
In Optimizely Configured Commerce before 5.2.2408, malicious payloads can be stored and…
Priority LOW 21
In Optimizely Configured Commerce before 5.2.2408, malicious payloads can be stored and subsequently executed in users' browsers under specific conditions: XSS from JavaScript in an SVG document.