Read the docs
TI-2026-17193 Aliases CVE-2026-21289GHSA-5rxc-xrpx-c9wf

Adobe Commerce | Incorrect Authorization (CWE-863)

Priority MEDIUM 40CWE-863Published · Updated

Key facts

Attack vector
Network
Privileges required
None
User interaction
None
Attack complexity
Low
Impact type
Security bypass
Confidentiality · integrity · availability
High · None · None
Fix status
Fixed

Attack profile from CVSS 3.1 · CNA. Fix status from CNA. Impact type from CWE-863.

Summary

Adobe Commerce versions 2.4.9-alpha3, 2.4.8-p3, 2.4.7-p8, 2.4.6-p13, 2.4.5-p15, 2.4.4-p16 and earlier are affected by an Incorrect Authorization vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to bypass security measures and gain unauthorized view access of data. Exploitation of this issue does not require user interaction.

Why it matters now

Exploitation None reported CISA SSVC · not in CISA KEV
EPSS 0.00692 53rd percentileScored 2026-11-07
Fix Fixed Adobe Commerce (Adobe): 2.4.9-beta1, 2.4.8-p4, 2.4.7-p9 +3Adobe Commerce B2B (Adobe): 1.5.3-beta1, 1.5.2-p4, 1.4.2-p9 +3+1 more product

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation
None
Automatable
Yes
Technical impact
Partial

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

VendorProductAffected versionsFixed inStatusSource
AdobeAdobe Commerceup to 2.4.9-alpha3, 2.4.8-p3, 2.4.7-p8, 2.4.6-p13, 2.4.5-p15, 2.4.4-p162.4.9-beta1, 2.4.8-p4, 2.4.7-p9, 2.4.6-p14, 2.4.5-p16, 2.4.4-p17Patch availableCNA
AdobeAdobe Commerce B2Bup to 1.5.3-alpha3, 1.5.2-p3, 1.4.2-p8, 1.3.5-p13, 1.3.4-p15, 1.3.3-p161.5.3-beta1, 1.5.2-p4, 1.4.2-p9, 1.3.5-p14, 1.3.4-p16, 1.3.3-p17Patch availableCNA
AdobeMagento Open Sourceup to 2.4.9-alpha3, 2.4.8-p3, 2.4.7-p8, 2.4.6-p13, 2.4.5-p152.4.9-beta1, 2.4.8-p4, 2.4.7-p9, 2.4.6-p14, 2.4.5-p16Patch availableCNA
  • Adobe Commerce VendorAdobe Affected up to 2.4.9-alpha3, 2.4.8-p3, 2.4.7-p8, 2.4.6-p13, 2.4.5-p15, 2.4.4-p16 Fixed in 2.4.9-beta1, 2.4.8-p4, 2.4.7-p9, 2.4.6-p14, 2.4.5-p16, 2.4.4-p17 Patch available CNA
  • Adobe Commerce B2B VendorAdobe Affected up to 1.5.3-alpha3, 1.5.2-p3, 1.4.2-p8, 1.3.5-p13, 1.3.4-p15, 1.3.3-p16 Fixed in 1.5.3-beta1, 1.5.2-p4, 1.4.2-p9, 1.3.5-p14, 1.3.4-p16, 1.3.3-p17 Patch available CNA
  • Magento Open Source VendorAdobe Affected up to 2.4.9-alpha3, 2.4.8-p3, 2.4.7-p8, 2.4.6-p13, 2.4.5-p15 Fixed in 2.4.9-beta1, 2.4.8-p4, 2.4.7-p9, 2.4.6-p14, 2.4.5-p16 Patch available CNA

CPE configurations NVD · 183

CPEVersionsRoleVendor
cpe:2.3:a:adobe:commerce_b2b:*:*:*:*:*:*:*:*before 1.3.3VulnerableAdobe
cpe:2.3:a:adobe:commerce_b2b:1.3.3:-:*:*:*:*:*:*1.3.3VulnerableAdobe
cpe:2.3:a:adobe:commerce_b2b:1.3.3:p1:*:*:*:*:*:*1.3.3 p1VulnerableAdobe
cpe:2.3:a:adobe:commerce_b2b:1.3.3:p10:*:*:*:*:*:*1.3.3 p10VulnerableAdobe
cpe:2.3:a:adobe:commerce_b2b:1.3.3:p11:*:*:*:*:*:*1.3.3 p11VulnerableAdobe
cpe:2.3:a:adobe:commerce_b2b:1.3.3:p12:*:*:*:*:*:*1.3.3 p12VulnerableAdobe
cpe:2.3:a:adobe:commerce_b2b:1.3.3:p13:*:*:*:*:*:*1.3.3 p13VulnerableAdobe
cpe:2.3:a:adobe:commerce_b2b:1.3.3:p14:*:*:*:*:*:*1.3.3 p14VulnerableAdobe
cpe:2.3:a:adobe:commerce_b2b:1.3.3:p15:*:*:*:*:*:*1.3.3 p15VulnerableAdobe
cpe:2.3:a:adobe:commerce_b2b:1.3.3:p16:*:*:*:*:*:*1.3.3 p16VulnerableAdobe
  • cpe:2.3:a:adobe:commerce_b2b:*:*:*:*:*:*:*:* Versions before 1.3.3 Vulnerable ·Adobe
  • cpe:2.3:a:adobe:commerce_b2b:1.3.3:-:*:*:*:*:*:* Versions 1.3.3 Vulnerable ·Adobe
  • cpe:2.3:a:adobe:commerce_b2b:1.3.3:p1:*:*:*:*:*:* Versions 1.3.3 p1 Vulnerable ·Adobe
  • cpe:2.3:a:adobe:commerce_b2b:1.3.3:p10:*:*:*:*:*:* Versions 1.3.3 p10 Vulnerable ·Adobe
  • cpe:2.3:a:adobe:commerce_b2b:1.3.3:p11:*:*:*:*:*:* Versions 1.3.3 p11 Vulnerable ·Adobe
  • cpe:2.3:a:adobe:commerce_b2b:1.3.3:p12:*:*:*:*:*:* Versions 1.3.3 p12 Vulnerable ·Adobe
  • cpe:2.3:a:adobe:commerce_b2b:1.3.3:p13:*:*:*:*:*:* Versions 1.3.3 p13 Vulnerable ·Adobe
  • cpe:2.3:a:adobe:commerce_b2b:1.3.3:p14:*:*:*:*:*:* Versions 1.3.3 p14 Vulnerable ·Adobe
  • cpe:2.3:a:adobe:commerce_b2b:1.3.3:p15:*:*:*:*:*:* Versions 1.3.3 p15 Vulnerable ·Adobe
  • cpe:2.3:a:adobe:commerce_b2b:1.3.3:p16:*:*:*:*:*:* Versions 1.3.3 p16 Vulnerable ·Adobe
Show 173 more CPE
CPEVersionsRoleVendor
cpe:2.3:a:adobe:commerce_b2b:1.3.3:p2:*:*:*:*:*:*1.3.3 p2VulnerableAdobe
cpe:2.3:a:adobe:commerce_b2b:1.3.3:p3:*:*:*:*:*:*1.3.3 p3VulnerableAdobe
cpe:2.3:a:adobe:commerce_b2b:1.3.3:p4:*:*:*:*:*:*1.3.3 p4VulnerableAdobe
cpe:2.3:a:adobe:commerce_b2b:1.3.3:p5:*:*:*:*:*:*1.3.3 p5VulnerableAdobe
cpe:2.3:a:adobe:commerce_b2b:1.3.3:p6:*:*:*:*:*:*1.3.3 p6VulnerableAdobe
cpe:2.3:a:adobe:commerce_b2b:1.3.3:p7:*:*:*:*:*:*1.3.3 p7VulnerableAdobe
cpe:2.3:a:adobe:commerce_b2b:1.3.3:p8:*:*:*:*:*:*1.3.3 p8VulnerableAdobe
cpe:2.3:a:adobe:commerce_b2b:1.3.3:p9:*:*:*:*:*:*1.3.3 p9VulnerableAdobe
cpe:2.3:a:adobe:commerce_b2b:1.3.4:-:*:*:*:*:*:*1.3.4VulnerableAdobe
cpe:2.3:a:adobe:commerce_b2b:1.3.4:p1:*:*:*:*:*:*1.3.4 p1VulnerableAdobe
cpe:2.3:a:adobe:commerce_b2b:1.3.4:p10:*:*:*:*:*:*1.3.4 p10VulnerableAdobe
cpe:2.3:a:adobe:commerce_b2b:1.3.4:p11:*:*:*:*:*:*1.3.4 p11VulnerableAdobe
cpe:2.3:a:adobe:commerce_b2b:1.3.4:p12:*:*:*:*:*:*1.3.4 p12VulnerableAdobe
cpe:2.3:a:adobe:commerce_b2b:1.3.4:p13:*:*:*:*:*:*1.3.4 p13VulnerableAdobe
cpe:2.3:a:adobe:commerce_b2b:1.3.4:p14:*:*:*:*:*:*1.3.4 p14VulnerableAdobe
cpe:2.3:a:adobe:commerce_b2b:1.3.4:p15:*:*:*:*:*:*1.3.4 p15VulnerableAdobe
cpe:2.3:a:adobe:commerce_b2b:1.3.4:p2:*:*:*:*:*:*1.3.4 p2VulnerableAdobe
cpe:2.3:a:adobe:commerce_b2b:1.3.4:p3:*:*:*:*:*:*1.3.4 p3VulnerableAdobe
cpe:2.3:a:adobe:commerce_b2b:1.3.4:p4:*:*:*:*:*:*1.3.4 p4VulnerableAdobe
cpe:2.3:a:adobe:commerce_b2b:1.3.4:p5:*:*:*:*:*:*1.3.4 p5VulnerableAdobe
cpe:2.3:a:adobe:commerce_b2b:1.3.4:p6:*:*:*:*:*:*1.3.4 p6VulnerableAdobe
cpe:2.3:a:adobe:commerce_b2b:1.3.4:p7:*:*:*:*:*:*1.3.4 p7VulnerableAdobe
cpe:2.3:a:adobe:commerce_b2b:1.3.4:p8:*:*:*:*:*:*1.3.4 p8VulnerableAdobe
cpe:2.3:a:adobe:commerce_b2b:1.3.4:p9:*:*:*:*:*:*1.3.4 p9VulnerableAdobe
cpe:2.3:a:adobe:commerce_b2b:1.3.5:-:*:*:*:*:*:*1.3.5VulnerableAdobe
cpe:2.3:a:adobe:commerce_b2b:1.3.5:p1:*:*:*:*:*:*1.3.5 p1VulnerableAdobe
cpe:2.3:a:adobe:commerce_b2b:1.3.5:p10:*:*:*:*:*:*1.3.5 p10VulnerableAdobe
cpe:2.3:a:adobe:commerce_b2b:1.3.5:p11:*:*:*:*:*:*1.3.5 p11VulnerableAdobe
cpe:2.3:a:adobe:commerce_b2b:1.3.5:p12:*:*:*:*:*:*1.3.5 p12VulnerableAdobe
cpe:2.3:a:adobe:commerce_b2b:1.3.5:p13:*:*:*:*:*:*1.3.5 p13VulnerableAdobe
cpe:2.3:a:adobe:commerce_b2b:1.3.5:p2:*:*:*:*:*:*1.3.5 p2VulnerableAdobe
cpe:2.3:a:adobe:commerce_b2b:1.3.5:p3:*:*:*:*:*:*1.3.5 p3VulnerableAdobe
cpe:2.3:a:adobe:commerce_b2b:1.3.5:p4:*:*:*:*:*:*1.3.5 p4VulnerableAdobe
cpe:2.3:a:adobe:commerce_b2b:1.3.5:p5:*:*:*:*:*:*1.3.5 p5VulnerableAdobe
cpe:2.3:a:adobe:commerce_b2b:1.3.5:p6:*:*:*:*:*:*1.3.5 p6VulnerableAdobe
cpe:2.3:a:adobe:commerce_b2b:1.3.5:p7:*:*:*:*:*:*1.3.5 p7VulnerableAdobe
cpe:2.3:a:adobe:commerce_b2b:1.3.5:p8:*:*:*:*:*:*1.3.5 p8VulnerableAdobe
cpe:2.3:a:adobe:commerce_b2b:1.3.5:p9:*:*:*:*:*:*1.3.5 p9VulnerableAdobe
cpe:2.3:a:adobe:commerce_b2b:1.4.2:-:*:*:*:*:*:*1.4.2VulnerableAdobe
cpe:2.3:a:adobe:commerce_b2b:1.4.2:p1:*:*:*:*:*:*1.4.2 p1VulnerableAdobe
cpe:2.3:a:adobe:commerce_b2b:1.4.2:p2:*:*:*:*:*:*1.4.2 p2VulnerableAdobe
cpe:2.3:a:adobe:commerce_b2b:1.4.2:p3:*:*:*:*:*:*1.4.2 p3VulnerableAdobe
cpe:2.3:a:adobe:commerce_b2b:1.4.2:p4:*:*:*:*:*:*1.4.2 p4VulnerableAdobe
cpe:2.3:a:adobe:commerce_b2b:1.4.2:p5:*:*:*:*:*:*1.4.2 p5VulnerableAdobe
cpe:2.3:a:adobe:commerce_b2b:1.4.2:p6:*:*:*:*:*:*1.4.2 p6VulnerableAdobe
cpe:2.3:a:adobe:commerce_b2b:1.4.2:p7:*:*:*:*:*:*1.4.2 p7VulnerableAdobe
cpe:2.3:a:adobe:commerce_b2b:1.4.2:p8:*:*:*:*:*:*1.4.2 p8VulnerableAdobe
cpe:2.3:a:adobe:commerce_b2b:1.5.2:-:*:*:*:*:*:*1.5.2VulnerableAdobe
cpe:2.3:a:adobe:commerce_b2b:1.5.2:p1:*:*:*:*:*:*1.5.2 p1VulnerableAdobe
cpe:2.3:a:adobe:commerce_b2b:1.5.2:p2:*:*:*:*:*:*1.5.2 p2VulnerableAdobe
cpe:2.3:a:adobe:commerce_b2b:1.5.2:p3:*:*:*:*:*:*1.5.2 p3VulnerableAdobe
cpe:2.3:a:adobe:commerce_b2b:1.5.3:alpha1:*:*:*:*:*:*1.5.3 alpha1VulnerableAdobe
cpe:2.3:a:adobe:commerce_b2b:1.5.3:alpha2:*:*:*:*:*:*1.5.3 alpha2VulnerableAdobe
cpe:2.3:a:adobe:commerce_b2b:1.5.3:alpha3:*:*:*:*:*:*1.5.3 alpha3VulnerableAdobe
cpe:2.3:a:adobe:commerce:*:*:*:*:*:*:*:*before 2.4.4VulnerableAdobe
cpe:2.3:a:adobe:commerce:2.4.4:-:*:*:*:*:*:*2.4.4VulnerableAdobe
cpe:2.3:a:adobe:commerce:2.4.4:p1:*:*:*:*:*:*2.4.4 p1VulnerableAdobe
cpe:2.3:a:adobe:commerce:2.4.4:p10:*:*:*:*:*:*2.4.4 p10VulnerableAdobe
cpe:2.3:a:adobe:commerce:2.4.4:p11:*:*:*:*:*:*2.4.4 p11VulnerableAdobe
cpe:2.3:a:adobe:commerce:2.4.4:p12:*:*:*:*:*:*2.4.4 p12VulnerableAdobe
cpe:2.3:a:adobe:commerce:2.4.4:p13:*:*:*:*:*:*2.4.4 p13VulnerableAdobe
cpe:2.3:a:adobe:commerce:2.4.4:p14:*:*:*:*:*:*2.4.4 p14VulnerableAdobe
cpe:2.3:a:adobe:commerce:2.4.4:p15:*:*:*:*:*:*2.4.4 p15VulnerableAdobe
cpe:2.3:a:adobe:commerce:2.4.4:p16:*:*:*:*:*:*2.4.4 p16VulnerableAdobe
cpe:2.3:a:adobe:commerce:2.4.4:p2:*:*:*:*:*:*2.4.4 p2VulnerableAdobe
cpe:2.3:a:adobe:commerce:2.4.4:p3:*:*:*:*:*:*2.4.4 p3VulnerableAdobe
cpe:2.3:a:adobe:commerce:2.4.4:p4:*:*:*:*:*:*2.4.4 p4VulnerableAdobe
cpe:2.3:a:adobe:commerce:2.4.4:p5:*:*:*:*:*:*2.4.4 p5VulnerableAdobe
cpe:2.3:a:adobe:commerce:2.4.4:p6:*:*:*:*:*:*2.4.4 p6VulnerableAdobe
cpe:2.3:a:adobe:commerce:2.4.4:p7:*:*:*:*:*:*2.4.4 p7VulnerableAdobe
cpe:2.3:a:adobe:commerce:2.4.4:p8:*:*:*:*:*:*2.4.4 p8VulnerableAdobe
cpe:2.3:a:adobe:commerce:2.4.4:p9:*:*:*:*:*:*2.4.4 p9VulnerableAdobe
cpe:2.3:a:adobe:commerce:2.4.5:-:*:*:*:*:*:*2.4.5VulnerableAdobe
cpe:2.3:a:adobe:commerce:2.4.5:p1:*:*:*:*:*:*2.4.5 p1VulnerableAdobe
cpe:2.3:a:adobe:commerce:2.4.5:p10:*:*:*:*:*:*2.4.5 p10VulnerableAdobe
cpe:2.3:a:adobe:commerce:2.4.5:p11:*:*:*:*:*:*2.4.5 p11VulnerableAdobe
cpe:2.3:a:adobe:commerce:2.4.5:p12:*:*:*:*:*:*2.4.5 p12VulnerableAdobe
cpe:2.3:a:adobe:commerce:2.4.5:p13:*:*:*:*:*:*2.4.5 p13VulnerableAdobe
cpe:2.3:a:adobe:commerce:2.4.5:p14:*:*:*:*:*:*2.4.5 p14VulnerableAdobe
cpe:2.3:a:adobe:commerce:2.4.5:p15:*:*:*:*:*:*2.4.5 p15VulnerableAdobe
cpe:2.3:a:adobe:commerce:2.4.5:p2:*:*:*:*:*:*2.4.5 p2VulnerableAdobe
cpe:2.3:a:adobe:commerce:2.4.5:p3:*:*:*:*:*:*2.4.5 p3VulnerableAdobe
cpe:2.3:a:adobe:commerce:2.4.5:p4:*:*:*:*:*:*2.4.5 p4VulnerableAdobe
cpe:2.3:a:adobe:commerce:2.4.5:p5:*:*:*:*:*:*2.4.5 p5VulnerableAdobe
cpe:2.3:a:adobe:commerce:2.4.5:p6:*:*:*:*:*:*2.4.5 p6VulnerableAdobe
cpe:2.3:a:adobe:commerce:2.4.5:p7:*:*:*:*:*:*2.4.5 p7VulnerableAdobe
cpe:2.3:a:adobe:commerce:2.4.5:p8:*:*:*:*:*:*2.4.5 p8VulnerableAdobe
cpe:2.3:a:adobe:commerce:2.4.5:p9:*:*:*:*:*:*2.4.5 p9VulnerableAdobe
cpe:2.3:a:adobe:commerce:2.4.6:-:*:*:*:*:*:*2.4.6VulnerableAdobe
cpe:2.3:a:adobe:commerce:2.4.6:p1:*:*:*:*:*:*2.4.6 p1VulnerableAdobe
cpe:2.3:a:adobe:commerce:2.4.6:p10:*:*:*:*:*:*2.4.6 p10VulnerableAdobe
cpe:2.3:a:adobe:commerce:2.4.6:p11:*:*:*:*:*:*2.4.6 p11VulnerableAdobe
cpe:2.3:a:adobe:commerce:2.4.6:p12:*:*:*:*:*:*2.4.6 p12VulnerableAdobe
cpe:2.3:a:adobe:commerce:2.4.6:p13:*:*:*:*:*:*2.4.6 p13VulnerableAdobe
cpe:2.3:a:adobe:commerce:2.4.6:p2:*:*:*:*:*:*2.4.6 p2VulnerableAdobe
cpe:2.3:a:adobe:commerce:2.4.6:p3:*:*:*:*:*:*2.4.6 p3VulnerableAdobe
cpe:2.3:a:adobe:commerce:2.4.6:p4:*:*:*:*:*:*2.4.6 p4VulnerableAdobe
cpe:2.3:a:adobe:commerce:2.4.6:p5:*:*:*:*:*:*2.4.6 p5VulnerableAdobe
cpe:2.3:a:adobe:commerce:2.4.6:p6:*:*:*:*:*:*2.4.6 p6VulnerableAdobe
cpe:2.3:a:adobe:commerce:2.4.6:p7:*:*:*:*:*:*2.4.6 p7VulnerableAdobe
cpe:2.3:a:adobe:commerce:2.4.6:p8:*:*:*:*:*:*2.4.6 p8VulnerableAdobe
cpe:2.3:a:adobe:commerce:2.4.6:p9:*:*:*:*:*:*2.4.6 p9VulnerableAdobe
cpe:2.3:a:adobe:commerce:2.4.7:-:*:*:*:*:*:*2.4.7VulnerableAdobe
cpe:2.3:a:adobe:commerce:2.4.7:b1:*:*:*:*:*:*2.4.7 b1VulnerableAdobe
cpe:2.3:a:adobe:commerce:2.4.7:b2:*:*:*:*:*:*2.4.7 b2VulnerableAdobe
cpe:2.3:a:adobe:commerce:2.4.7:beta3:*:*:*:*:*:*2.4.7 beta3VulnerableAdobe
cpe:2.3:a:adobe:commerce:2.4.7:p1:*:*:*:*:*:*2.4.7 p1VulnerableAdobe
cpe:2.3:a:adobe:commerce:2.4.7:p2:*:*:*:*:*:*2.4.7 p2VulnerableAdobe
cpe:2.3:a:adobe:commerce:2.4.7:p3:*:*:*:*:*:*2.4.7 p3VulnerableAdobe
cpe:2.3:a:adobe:commerce:2.4.7:p4:*:*:*:*:*:*2.4.7 p4VulnerableAdobe
cpe:2.3:a:adobe:commerce:2.4.7:p5:*:*:*:*:*:*2.4.7 p5VulnerableAdobe
cpe:2.3:a:adobe:commerce:2.4.7:p6:*:*:*:*:*:*2.4.7 p6VulnerableAdobe
cpe:2.3:a:adobe:commerce:2.4.7:p7:*:*:*:*:*:*2.4.7 p7VulnerableAdobe
cpe:2.3:a:adobe:commerce:2.4.7:p8:*:*:*:*:*:*2.4.7 p8VulnerableAdobe
cpe:2.3:a:adobe:commerce:2.4.8:-:*:*:*:*:*:*2.4.8VulnerableAdobe
cpe:2.3:a:adobe:commerce:2.4.8:beta1:*:*:*:*:*:*2.4.8 beta1VulnerableAdobe
cpe:2.3:a:adobe:commerce:2.4.8:beta2:*:*:*:*:*:*2.4.8 beta2VulnerableAdobe
cpe:2.3:a:adobe:commerce:2.4.8:p1:*:*:*:*:*:*2.4.8 p1VulnerableAdobe
cpe:2.3:a:adobe:commerce:2.4.8:p2:*:*:*:*:*:*2.4.8 p2VulnerableAdobe
cpe:2.3:a:adobe:commerce:2.4.8:p3:*:*:*:*:*:*2.4.8 p3VulnerableAdobe
cpe:2.3:a:adobe:commerce:2.4.9:alpha1:*:*:*:*:*:*2.4.9 alpha1VulnerableAdobe
cpe:2.3:a:adobe:commerce:2.4.9:alpha2:*:*:*:*:*:*2.4.9 alpha2VulnerableAdobe
cpe:2.3:a:adobe:commerce:2.4.9:alpha3:*:*:*:*:*:*2.4.9 alpha3VulnerableAdobe
cpe:2.3:a:adobe:magento:*:*:*:*:open_source:*:*:*before 2.4.5VulnerableAdobe
cpe:2.3:a:adobe:magento:2.4.5:-:*:*:open_source:*:*:*2.4.5VulnerableAdobe
cpe:2.3:a:adobe:magento:2.4.5:p1:*:*:open_source:*:*:*2.4.5 p1VulnerableAdobe
cpe:2.3:a:adobe:magento:2.4.5:p10:*:*:open_source:*:*:*2.4.5 p10VulnerableAdobe
cpe:2.3:a:adobe:magento:2.4.5:p11:*:*:open_source:*:*:*2.4.5 p11VulnerableAdobe
cpe:2.3:a:adobe:magento:2.4.5:p12:*:*:open_source:*:*:*2.4.5 p12VulnerableAdobe
cpe:2.3:a:adobe:magento:2.4.5:p13:*:*:open_source:*:*:*2.4.5 p13VulnerableAdobe
cpe:2.3:a:adobe:magento:2.4.5:p14:*:*:open_source:*:*:*2.4.5 p14VulnerableAdobe
cpe:2.3:a:adobe:magento:2.4.5:p15:*:*:open_source:*:*:*2.4.5 p15VulnerableAdobe
cpe:2.3:a:adobe:magento:2.4.5:p2:*:*:open_source:*:*:*2.4.5 p2VulnerableAdobe
cpe:2.3:a:adobe:magento:2.4.5:p3:*:*:open_source:*:*:*2.4.5 p3VulnerableAdobe
cpe:2.3:a:adobe:magento:2.4.5:p4:*:*:open_source:*:*:*2.4.5 p4VulnerableAdobe
cpe:2.3:a:adobe:magento:2.4.5:p5:*:*:open_source:*:*:*2.4.5 p5VulnerableAdobe
cpe:2.3:a:adobe:magento:2.4.5:p6:*:*:open_source:*:*:*2.4.5 p6VulnerableAdobe
cpe:2.3:a:adobe:magento:2.4.5:p7:*:*:open_source:*:*:*2.4.5 p7VulnerableAdobe
cpe:2.3:a:adobe:magento:2.4.5:p8:*:*:open_source:*:*:*2.4.5 p8VulnerableAdobe
cpe:2.3:a:adobe:magento:2.4.5:p9:*:*:open_source:*:*:*2.4.5 p9VulnerableAdobe
cpe:2.3:a:adobe:magento:2.4.6:-:*:*:open_source:*:*:*2.4.6VulnerableAdobe
cpe:2.3:a:adobe:magento:2.4.6:p1:*:*:open_source:*:*:*2.4.6 p1VulnerableAdobe
cpe:2.3:a:adobe:magento:2.4.6:p10:*:*:open_source:*:*:*2.4.6 p10VulnerableAdobe
cpe:2.3:a:adobe:magento:2.4.6:p11:*:*:open_source:*:*:*2.4.6 p11VulnerableAdobe
cpe:2.3:a:adobe:magento:2.4.6:p12:*:*:open_source:*:*:*2.4.6 p12VulnerableAdobe
cpe:2.3:a:adobe:magento:2.4.6:p13:*:*:open_source:*:*:*2.4.6 p13VulnerableAdobe
cpe:2.3:a:adobe:magento:2.4.6:p2:*:*:open_source:*:*:*2.4.6 p2VulnerableAdobe
cpe:2.3:a:adobe:magento:2.4.6:p3:*:*:open_source:*:*:*2.4.6 p3VulnerableAdobe
cpe:2.3:a:adobe:magento:2.4.6:p4:*:*:open_source:*:*:*2.4.6 p4VulnerableAdobe
cpe:2.3:a:adobe:magento:2.4.6:p5:*:*:open_source:*:*:*2.4.6 p5VulnerableAdobe
cpe:2.3:a:adobe:magento:2.4.6:p6:*:*:open_source:*:*:*2.4.6 p6VulnerableAdobe
cpe:2.3:a:adobe:magento:2.4.6:p7:*:*:open_source:*:*:*2.4.6 p7VulnerableAdobe
cpe:2.3:a:adobe:magento:2.4.6:p8:*:*:open_source:*:*:*2.4.6 p8VulnerableAdobe
cpe:2.3:a:adobe:magento:2.4.6:p9:*:*:open_source:*:*:*2.4.6 p9VulnerableAdobe
cpe:2.3:a:adobe:magento:2.4.7:-:*:*:open_source:*:*:*2.4.7VulnerableAdobe
cpe:2.3:a:adobe:magento:2.4.7:b1:*:*:open_source:*:*:*2.4.7 b1VulnerableAdobe
cpe:2.3:a:adobe:magento:2.4.7:b2:*:*:open_source:*:*:*2.4.7 b2VulnerableAdobe
cpe:2.3:a:adobe:magento:2.4.7:beta3:*:*:open_source:*:*:*2.4.7 beta3VulnerableAdobe
cpe:2.3:a:adobe:magento:2.4.7:p1:*:*:open_source:*:*:*2.4.7 p1VulnerableAdobe
cpe:2.3:a:adobe:magento:2.4.7:p2:*:*:open_source:*:*:*2.4.7 p2VulnerableAdobe
cpe:2.3:a:adobe:magento:2.4.7:p3:*:*:open_source:*:*:*2.4.7 p3VulnerableAdobe
cpe:2.3:a:adobe:magento:2.4.7:p4:*:*:open_source:*:*:*2.4.7 p4VulnerableAdobe
cpe:2.3:a:adobe:magento:2.4.7:p5:*:*:open_source:*:*:*2.4.7 p5VulnerableAdobe
cpe:2.3:a:adobe:magento:2.4.7:p6:*:*:open_source:*:*:*2.4.7 p6VulnerableAdobe
cpe:2.3:a:adobe:magento:2.4.7:p7:*:*:open_source:*:*:*2.4.7 p7VulnerableAdobe
cpe:2.3:a:adobe:magento:2.4.7:p8:*:*:open_source:*:*:*2.4.7 p8VulnerableAdobe
cpe:2.3:a:adobe:magento:2.4.8:-:*:*:open_source:*:*:*2.4.8VulnerableAdobe
cpe:2.3:a:adobe:magento:2.4.8:beta1:*:*:open_source:*:*:*2.4.8 beta1VulnerableAdobe
cpe:2.3:a:adobe:magento:2.4.8:beta2:*:*:open_source:*:*:*2.4.8 beta2VulnerableAdobe
cpe:2.3:a:adobe:magento:2.4.8:p1:*:*:open_source:*:*:*2.4.8 p1VulnerableAdobe
cpe:2.3:a:adobe:magento:2.4.8:p2:*:*:open_source:*:*:*2.4.8 p2VulnerableAdobe
cpe:2.3:a:adobe:magento:2.4.8:p3:*:*:open_source:*:*:*2.4.8 p3VulnerableAdobe
cpe:2.3:a:adobe:magento:2.4.9:alpha3:*:*:open_source:*:*:*2.4.9 alpha3VulnerableAdobe
  • cpe:2.3:a:adobe:commerce_b2b:1.3.3:p2:*:*:*:*:*:* Versions 1.3.3 p2 Vulnerable ·Adobe
  • cpe:2.3:a:adobe:commerce_b2b:1.3.3:p3:*:*:*:*:*:* Versions 1.3.3 p3 Vulnerable ·Adobe
  • cpe:2.3:a:adobe:commerce_b2b:1.3.3:p4:*:*:*:*:*:* Versions 1.3.3 p4 Vulnerable ·Adobe
  • cpe:2.3:a:adobe:commerce_b2b:1.3.3:p5:*:*:*:*:*:* Versions 1.3.3 p5 Vulnerable ·Adobe
  • cpe:2.3:a:adobe:commerce_b2b:1.3.3:p6:*:*:*:*:*:* Versions 1.3.3 p6 Vulnerable ·Adobe
  • cpe:2.3:a:adobe:commerce_b2b:1.3.3:p7:*:*:*:*:*:* Versions 1.3.3 p7 Vulnerable ·Adobe
  • cpe:2.3:a:adobe:commerce_b2b:1.3.3:p8:*:*:*:*:*:* Versions 1.3.3 p8 Vulnerable ·Adobe
  • cpe:2.3:a:adobe:commerce_b2b:1.3.3:p9:*:*:*:*:*:* Versions 1.3.3 p9 Vulnerable ·Adobe
  • cpe:2.3:a:adobe:commerce_b2b:1.3.4:-:*:*:*:*:*:* Versions 1.3.4 Vulnerable ·Adobe
  • cpe:2.3:a:adobe:commerce_b2b:1.3.4:p1:*:*:*:*:*:* Versions 1.3.4 p1 Vulnerable ·Adobe
  • cpe:2.3:a:adobe:commerce_b2b:1.3.4:p10:*:*:*:*:*:* Versions 1.3.4 p10 Vulnerable ·Adobe
  • cpe:2.3:a:adobe:commerce_b2b:1.3.4:p11:*:*:*:*:*:* Versions 1.3.4 p11 Vulnerable ·Adobe
  • cpe:2.3:a:adobe:commerce_b2b:1.3.4:p12:*:*:*:*:*:* Versions 1.3.4 p12 Vulnerable ·Adobe
  • cpe:2.3:a:adobe:commerce_b2b:1.3.4:p13:*:*:*:*:*:* Versions 1.3.4 p13 Vulnerable ·Adobe
  • cpe:2.3:a:adobe:commerce_b2b:1.3.4:p14:*:*:*:*:*:* Versions 1.3.4 p14 Vulnerable ·Adobe
  • cpe:2.3:a:adobe:commerce_b2b:1.3.4:p15:*:*:*:*:*:* Versions 1.3.4 p15 Vulnerable ·Adobe
  • cpe:2.3:a:adobe:commerce_b2b:1.3.4:p2:*:*:*:*:*:* Versions 1.3.4 p2 Vulnerable ·Adobe
  • cpe:2.3:a:adobe:commerce_b2b:1.3.4:p3:*:*:*:*:*:* Versions 1.3.4 p3 Vulnerable ·Adobe
  • cpe:2.3:a:adobe:commerce_b2b:1.3.4:p4:*:*:*:*:*:* Versions 1.3.4 p4 Vulnerable ·Adobe
  • cpe:2.3:a:adobe:commerce_b2b:1.3.4:p5:*:*:*:*:*:* Versions 1.3.4 p5 Vulnerable ·Adobe
  • cpe:2.3:a:adobe:commerce_b2b:1.3.4:p6:*:*:*:*:*:* Versions 1.3.4 p6 Vulnerable ·Adobe
  • cpe:2.3:a:adobe:commerce_b2b:1.3.4:p7:*:*:*:*:*:* Versions 1.3.4 p7 Vulnerable ·Adobe
  • cpe:2.3:a:adobe:commerce_b2b:1.3.4:p8:*:*:*:*:*:* Versions 1.3.4 p8 Vulnerable ·Adobe
  • cpe:2.3:a:adobe:commerce_b2b:1.3.4:p9:*:*:*:*:*:* Versions 1.3.4 p9 Vulnerable ·Adobe
  • cpe:2.3:a:adobe:commerce_b2b:1.3.5:-:*:*:*:*:*:* Versions 1.3.5 Vulnerable ·Adobe
  • cpe:2.3:a:adobe:commerce_b2b:1.3.5:p1:*:*:*:*:*:* Versions 1.3.5 p1 Vulnerable ·Adobe
  • cpe:2.3:a:adobe:commerce_b2b:1.3.5:p10:*:*:*:*:*:* Versions 1.3.5 p10 Vulnerable ·Adobe
  • cpe:2.3:a:adobe:commerce_b2b:1.3.5:p11:*:*:*:*:*:* Versions 1.3.5 p11 Vulnerable ·Adobe
  • cpe:2.3:a:adobe:commerce_b2b:1.3.5:p12:*:*:*:*:*:* Versions 1.3.5 p12 Vulnerable ·Adobe
  • cpe:2.3:a:adobe:commerce_b2b:1.3.5:p13:*:*:*:*:*:* Versions 1.3.5 p13 Vulnerable ·Adobe
  • cpe:2.3:a:adobe:commerce_b2b:1.3.5:p2:*:*:*:*:*:* Versions 1.3.5 p2 Vulnerable ·Adobe
  • cpe:2.3:a:adobe:commerce_b2b:1.3.5:p3:*:*:*:*:*:* Versions 1.3.5 p3 Vulnerable ·Adobe
  • cpe:2.3:a:adobe:commerce_b2b:1.3.5:p4:*:*:*:*:*:* Versions 1.3.5 p4 Vulnerable ·Adobe
  • cpe:2.3:a:adobe:commerce_b2b:1.3.5:p5:*:*:*:*:*:* Versions 1.3.5 p5 Vulnerable ·Adobe
  • cpe:2.3:a:adobe:commerce_b2b:1.3.5:p6:*:*:*:*:*:* Versions 1.3.5 p6 Vulnerable ·Adobe
  • cpe:2.3:a:adobe:commerce_b2b:1.3.5:p7:*:*:*:*:*:* Versions 1.3.5 p7 Vulnerable ·Adobe
  • cpe:2.3:a:adobe:commerce_b2b:1.3.5:p8:*:*:*:*:*:* Versions 1.3.5 p8 Vulnerable ·Adobe
  • cpe:2.3:a:adobe:commerce_b2b:1.3.5:p9:*:*:*:*:*:* Versions 1.3.5 p9 Vulnerable ·Adobe
  • cpe:2.3:a:adobe:commerce_b2b:1.4.2:-:*:*:*:*:*:* Versions 1.4.2 Vulnerable ·Adobe
  • cpe:2.3:a:adobe:commerce_b2b:1.4.2:p1:*:*:*:*:*:* Versions 1.4.2 p1 Vulnerable ·Adobe
  • cpe:2.3:a:adobe:commerce_b2b:1.4.2:p2:*:*:*:*:*:* Versions 1.4.2 p2 Vulnerable ·Adobe
  • cpe:2.3:a:adobe:commerce_b2b:1.4.2:p3:*:*:*:*:*:* Versions 1.4.2 p3 Vulnerable ·Adobe
  • cpe:2.3:a:adobe:commerce_b2b:1.4.2:p4:*:*:*:*:*:* Versions 1.4.2 p4 Vulnerable ·Adobe
  • cpe:2.3:a:adobe:commerce_b2b:1.4.2:p5:*:*:*:*:*:* Versions 1.4.2 p5 Vulnerable ·Adobe
  • cpe:2.3:a:adobe:commerce_b2b:1.4.2:p6:*:*:*:*:*:* Versions 1.4.2 p6 Vulnerable ·Adobe
  • cpe:2.3:a:adobe:commerce_b2b:1.4.2:p7:*:*:*:*:*:* Versions 1.4.2 p7 Vulnerable ·Adobe
  • cpe:2.3:a:adobe:commerce_b2b:1.4.2:p8:*:*:*:*:*:* Versions 1.4.2 p8 Vulnerable ·Adobe
  • cpe:2.3:a:adobe:commerce_b2b:1.5.2:-:*:*:*:*:*:* Versions 1.5.2 Vulnerable ·Adobe
  • cpe:2.3:a:adobe:commerce_b2b:1.5.2:p1:*:*:*:*:*:* Versions 1.5.2 p1 Vulnerable ·Adobe
  • cpe:2.3:a:adobe:commerce_b2b:1.5.2:p2:*:*:*:*:*:* Versions 1.5.2 p2 Vulnerable ·Adobe
  • cpe:2.3:a:adobe:commerce_b2b:1.5.2:p3:*:*:*:*:*:* Versions 1.5.2 p3 Vulnerable ·Adobe
  • cpe:2.3:a:adobe:commerce_b2b:1.5.3:alpha1:*:*:*:*:*:* Versions 1.5.3 alpha1 Vulnerable ·Adobe
  • cpe:2.3:a:adobe:commerce_b2b:1.5.3:alpha2:*:*:*:*:*:* Versions 1.5.3 alpha2 Vulnerable ·Adobe
  • cpe:2.3:a:adobe:commerce_b2b:1.5.3:alpha3:*:*:*:*:*:* Versions 1.5.3 alpha3 Vulnerable ·Adobe
  • cpe:2.3:a:adobe:commerce:*:*:*:*:*:*:*:* Versions before 2.4.4 Vulnerable ·Adobe
  • cpe:2.3:a:adobe:commerce:2.4.4:-:*:*:*:*:*:* Versions 2.4.4 Vulnerable ·Adobe
  • cpe:2.3:a:adobe:commerce:2.4.4:p1:*:*:*:*:*:* Versions 2.4.4 p1 Vulnerable ·Adobe
  • cpe:2.3:a:adobe:commerce:2.4.4:p10:*:*:*:*:*:* Versions 2.4.4 p10 Vulnerable ·Adobe
  • cpe:2.3:a:adobe:commerce:2.4.4:p11:*:*:*:*:*:* Versions 2.4.4 p11 Vulnerable ·Adobe
  • cpe:2.3:a:adobe:commerce:2.4.4:p12:*:*:*:*:*:* Versions 2.4.4 p12 Vulnerable ·Adobe
  • cpe:2.3:a:adobe:commerce:2.4.4:p13:*:*:*:*:*:* Versions 2.4.4 p13 Vulnerable ·Adobe
  • cpe:2.3:a:adobe:commerce:2.4.4:p14:*:*:*:*:*:* Versions 2.4.4 p14 Vulnerable ·Adobe
  • cpe:2.3:a:adobe:commerce:2.4.4:p15:*:*:*:*:*:* Versions 2.4.4 p15 Vulnerable ·Adobe
  • cpe:2.3:a:adobe:commerce:2.4.4:p16:*:*:*:*:*:* Versions 2.4.4 p16 Vulnerable ·Adobe
  • cpe:2.3:a:adobe:commerce:2.4.4:p2:*:*:*:*:*:* Versions 2.4.4 p2 Vulnerable ·Adobe
  • cpe:2.3:a:adobe:commerce:2.4.4:p3:*:*:*:*:*:* Versions 2.4.4 p3 Vulnerable ·Adobe
  • cpe:2.3:a:adobe:commerce:2.4.4:p4:*:*:*:*:*:* Versions 2.4.4 p4 Vulnerable ·Adobe
  • cpe:2.3:a:adobe:commerce:2.4.4:p5:*:*:*:*:*:* Versions 2.4.4 p5 Vulnerable ·Adobe
  • cpe:2.3:a:adobe:commerce:2.4.4:p6:*:*:*:*:*:* Versions 2.4.4 p6 Vulnerable ·Adobe
  • cpe:2.3:a:adobe:commerce:2.4.4:p7:*:*:*:*:*:* Versions 2.4.4 p7 Vulnerable ·Adobe
  • cpe:2.3:a:adobe:commerce:2.4.4:p8:*:*:*:*:*:* Versions 2.4.4 p8 Vulnerable ·Adobe
  • cpe:2.3:a:adobe:commerce:2.4.4:p9:*:*:*:*:*:* Versions 2.4.4 p9 Vulnerable ·Adobe
  • cpe:2.3:a:adobe:commerce:2.4.5:-:*:*:*:*:*:* Versions 2.4.5 Vulnerable ·Adobe
  • cpe:2.3:a:adobe:commerce:2.4.5:p1:*:*:*:*:*:* Versions 2.4.5 p1 Vulnerable ·Adobe
  • cpe:2.3:a:adobe:commerce:2.4.5:p10:*:*:*:*:*:* Versions 2.4.5 p10 Vulnerable ·Adobe
  • cpe:2.3:a:adobe:commerce:2.4.5:p11:*:*:*:*:*:* Versions 2.4.5 p11 Vulnerable ·Adobe
  • cpe:2.3:a:adobe:commerce:2.4.5:p12:*:*:*:*:*:* Versions 2.4.5 p12 Vulnerable ·Adobe
  • cpe:2.3:a:adobe:commerce:2.4.5:p13:*:*:*:*:*:* Versions 2.4.5 p13 Vulnerable ·Adobe
  • cpe:2.3:a:adobe:commerce:2.4.5:p14:*:*:*:*:*:* Versions 2.4.5 p14 Vulnerable ·Adobe
  • cpe:2.3:a:adobe:commerce:2.4.5:p15:*:*:*:*:*:* Versions 2.4.5 p15 Vulnerable ·Adobe
  • cpe:2.3:a:adobe:commerce:2.4.5:p2:*:*:*:*:*:* Versions 2.4.5 p2 Vulnerable ·Adobe
  • cpe:2.3:a:adobe:commerce:2.4.5:p3:*:*:*:*:*:* Versions 2.4.5 p3 Vulnerable ·Adobe
  • cpe:2.3:a:adobe:commerce:2.4.5:p4:*:*:*:*:*:* Versions 2.4.5 p4 Vulnerable ·Adobe
  • cpe:2.3:a:adobe:commerce:2.4.5:p5:*:*:*:*:*:* Versions 2.4.5 p5 Vulnerable ·Adobe
  • cpe:2.3:a:adobe:commerce:2.4.5:p6:*:*:*:*:*:* Versions 2.4.5 p6 Vulnerable ·Adobe
  • cpe:2.3:a:adobe:commerce:2.4.5:p7:*:*:*:*:*:* Versions 2.4.5 p7 Vulnerable ·Adobe
  • cpe:2.3:a:adobe:commerce:2.4.5:p8:*:*:*:*:*:* Versions 2.4.5 p8 Vulnerable ·Adobe
  • cpe:2.3:a:adobe:commerce:2.4.5:p9:*:*:*:*:*:* Versions 2.4.5 p9 Vulnerable ·Adobe
  • cpe:2.3:a:adobe:commerce:2.4.6:-:*:*:*:*:*:* Versions 2.4.6 Vulnerable ·Adobe
  • cpe:2.3:a:adobe:commerce:2.4.6:p1:*:*:*:*:*:* Versions 2.4.6 p1 Vulnerable ·Adobe
  • cpe:2.3:a:adobe:commerce:2.4.6:p10:*:*:*:*:*:* Versions 2.4.6 p10 Vulnerable ·Adobe
  • cpe:2.3:a:adobe:commerce:2.4.6:p11:*:*:*:*:*:* Versions 2.4.6 p11 Vulnerable ·Adobe
  • cpe:2.3:a:adobe:commerce:2.4.6:p12:*:*:*:*:*:* Versions 2.4.6 p12 Vulnerable ·Adobe
  • cpe:2.3:a:adobe:commerce:2.4.6:p13:*:*:*:*:*:* Versions 2.4.6 p13 Vulnerable ·Adobe
  • cpe:2.3:a:adobe:commerce:2.4.6:p2:*:*:*:*:*:* Versions 2.4.6 p2 Vulnerable ·Adobe
  • cpe:2.3:a:adobe:commerce:2.4.6:p3:*:*:*:*:*:* Versions 2.4.6 p3 Vulnerable ·Adobe
  • cpe:2.3:a:adobe:commerce:2.4.6:p4:*:*:*:*:*:* Versions 2.4.6 p4 Vulnerable ·Adobe
  • cpe:2.3:a:adobe:commerce:2.4.6:p5:*:*:*:*:*:* Versions 2.4.6 p5 Vulnerable ·Adobe
  • cpe:2.3:a:adobe:commerce:2.4.6:p6:*:*:*:*:*:* Versions 2.4.6 p6 Vulnerable ·Adobe
  • cpe:2.3:a:adobe:commerce:2.4.6:p7:*:*:*:*:*:* Versions 2.4.6 p7 Vulnerable ·Adobe
  • cpe:2.3:a:adobe:commerce:2.4.6:p8:*:*:*:*:*:* Versions 2.4.6 p8 Vulnerable ·Adobe
  • cpe:2.3:a:adobe:commerce:2.4.6:p9:*:*:*:*:*:* Versions 2.4.6 p9 Vulnerable ·Adobe
  • cpe:2.3:a:adobe:commerce:2.4.7:-:*:*:*:*:*:* Versions 2.4.7 Vulnerable ·Adobe
  • cpe:2.3:a:adobe:commerce:2.4.7:b1:*:*:*:*:*:* Versions 2.4.7 b1 Vulnerable ·Adobe
  • cpe:2.3:a:adobe:commerce:2.4.7:b2:*:*:*:*:*:* Versions 2.4.7 b2 Vulnerable ·Adobe
  • cpe:2.3:a:adobe:commerce:2.4.7:beta3:*:*:*:*:*:* Versions 2.4.7 beta3 Vulnerable ·Adobe
  • cpe:2.3:a:adobe:commerce:2.4.7:p1:*:*:*:*:*:* Versions 2.4.7 p1 Vulnerable ·Adobe
  • cpe:2.3:a:adobe:commerce:2.4.7:p2:*:*:*:*:*:* Versions 2.4.7 p2 Vulnerable ·Adobe
  • cpe:2.3:a:adobe:commerce:2.4.7:p3:*:*:*:*:*:* Versions 2.4.7 p3 Vulnerable ·Adobe
  • cpe:2.3:a:adobe:commerce:2.4.7:p4:*:*:*:*:*:* Versions 2.4.7 p4 Vulnerable ·Adobe
  • cpe:2.3:a:adobe:commerce:2.4.7:p5:*:*:*:*:*:* Versions 2.4.7 p5 Vulnerable ·Adobe
  • cpe:2.3:a:adobe:commerce:2.4.7:p6:*:*:*:*:*:* Versions 2.4.7 p6 Vulnerable ·Adobe
  • cpe:2.3:a:adobe:commerce:2.4.7:p7:*:*:*:*:*:* Versions 2.4.7 p7 Vulnerable ·Adobe
  • cpe:2.3:a:adobe:commerce:2.4.7:p8:*:*:*:*:*:* Versions 2.4.7 p8 Vulnerable ·Adobe
  • cpe:2.3:a:adobe:commerce:2.4.8:-:*:*:*:*:*:* Versions 2.4.8 Vulnerable ·Adobe
  • cpe:2.3:a:adobe:commerce:2.4.8:beta1:*:*:*:*:*:* Versions 2.4.8 beta1 Vulnerable ·Adobe
  • cpe:2.3:a:adobe:commerce:2.4.8:beta2:*:*:*:*:*:* Versions 2.4.8 beta2 Vulnerable ·Adobe
  • cpe:2.3:a:adobe:commerce:2.4.8:p1:*:*:*:*:*:* Versions 2.4.8 p1 Vulnerable ·Adobe
  • cpe:2.3:a:adobe:commerce:2.4.8:p2:*:*:*:*:*:* Versions 2.4.8 p2 Vulnerable ·Adobe
  • cpe:2.3:a:adobe:commerce:2.4.8:p3:*:*:*:*:*:* Versions 2.4.8 p3 Vulnerable ·Adobe
  • cpe:2.3:a:adobe:commerce:2.4.9:alpha1:*:*:*:*:*:* Versions 2.4.9 alpha1 Vulnerable ·Adobe
  • cpe:2.3:a:adobe:commerce:2.4.9:alpha2:*:*:*:*:*:* Versions 2.4.9 alpha2 Vulnerable ·Adobe
  • cpe:2.3:a:adobe:commerce:2.4.9:alpha3:*:*:*:*:*:* Versions 2.4.9 alpha3 Vulnerable ·Adobe
  • cpe:2.3:a:adobe:magento:*:*:*:*:open_source:*:*:* Versions before 2.4.5 Vulnerable ·Adobe
  • cpe:2.3:a:adobe:magento:2.4.5:-:*:*:open_source:*:*:* Versions 2.4.5 Vulnerable ·Adobe
  • cpe:2.3:a:adobe:magento:2.4.5:p1:*:*:open_source:*:*:* Versions 2.4.5 p1 Vulnerable ·Adobe
  • cpe:2.3:a:adobe:magento:2.4.5:p10:*:*:open_source:*:*:* Versions 2.4.5 p10 Vulnerable ·Adobe
  • cpe:2.3:a:adobe:magento:2.4.5:p11:*:*:open_source:*:*:* Versions 2.4.5 p11 Vulnerable ·Adobe
  • cpe:2.3:a:adobe:magento:2.4.5:p12:*:*:open_source:*:*:* Versions 2.4.5 p12 Vulnerable ·Adobe
  • cpe:2.3:a:adobe:magento:2.4.5:p13:*:*:open_source:*:*:* Versions 2.4.5 p13 Vulnerable ·Adobe
  • cpe:2.3:a:adobe:magento:2.4.5:p14:*:*:open_source:*:*:* Versions 2.4.5 p14 Vulnerable ·Adobe
  • cpe:2.3:a:adobe:magento:2.4.5:p15:*:*:open_source:*:*:* Versions 2.4.5 p15 Vulnerable ·Adobe
  • cpe:2.3:a:adobe:magento:2.4.5:p2:*:*:open_source:*:*:* Versions 2.4.5 p2 Vulnerable ·Adobe
  • cpe:2.3:a:adobe:magento:2.4.5:p3:*:*:open_source:*:*:* Versions 2.4.5 p3 Vulnerable ·Adobe
  • cpe:2.3:a:adobe:magento:2.4.5:p4:*:*:open_source:*:*:* Versions 2.4.5 p4 Vulnerable ·Adobe
  • cpe:2.3:a:adobe:magento:2.4.5:p5:*:*:open_source:*:*:* Versions 2.4.5 p5 Vulnerable ·Adobe
  • cpe:2.3:a:adobe:magento:2.4.5:p6:*:*:open_source:*:*:* Versions 2.4.5 p6 Vulnerable ·Adobe
  • cpe:2.3:a:adobe:magento:2.4.5:p7:*:*:open_source:*:*:* Versions 2.4.5 p7 Vulnerable ·Adobe
  • cpe:2.3:a:adobe:magento:2.4.5:p8:*:*:open_source:*:*:* Versions 2.4.5 p8 Vulnerable ·Adobe
  • cpe:2.3:a:adobe:magento:2.4.5:p9:*:*:open_source:*:*:* Versions 2.4.5 p9 Vulnerable ·Adobe
  • cpe:2.3:a:adobe:magento:2.4.6:-:*:*:open_source:*:*:* Versions 2.4.6 Vulnerable ·Adobe
  • cpe:2.3:a:adobe:magento:2.4.6:p1:*:*:open_source:*:*:* Versions 2.4.6 p1 Vulnerable ·Adobe
  • cpe:2.3:a:adobe:magento:2.4.6:p10:*:*:open_source:*:*:* Versions 2.4.6 p10 Vulnerable ·Adobe
  • cpe:2.3:a:adobe:magento:2.4.6:p11:*:*:open_source:*:*:* Versions 2.4.6 p11 Vulnerable ·Adobe
  • cpe:2.3:a:adobe:magento:2.4.6:p12:*:*:open_source:*:*:* Versions 2.4.6 p12 Vulnerable ·Adobe
  • cpe:2.3:a:adobe:magento:2.4.6:p13:*:*:open_source:*:*:* Versions 2.4.6 p13 Vulnerable ·Adobe
  • cpe:2.3:a:adobe:magento:2.4.6:p2:*:*:open_source:*:*:* Versions 2.4.6 p2 Vulnerable ·Adobe
  • cpe:2.3:a:adobe:magento:2.4.6:p3:*:*:open_source:*:*:* Versions 2.4.6 p3 Vulnerable ·Adobe
  • cpe:2.3:a:adobe:magento:2.4.6:p4:*:*:open_source:*:*:* Versions 2.4.6 p4 Vulnerable ·Adobe
  • cpe:2.3:a:adobe:magento:2.4.6:p5:*:*:open_source:*:*:* Versions 2.4.6 p5 Vulnerable ·Adobe
  • cpe:2.3:a:adobe:magento:2.4.6:p6:*:*:open_source:*:*:* Versions 2.4.6 p6 Vulnerable ·Adobe
  • cpe:2.3:a:adobe:magento:2.4.6:p7:*:*:open_source:*:*:* Versions 2.4.6 p7 Vulnerable ·Adobe
  • cpe:2.3:a:adobe:magento:2.4.6:p8:*:*:open_source:*:*:* Versions 2.4.6 p8 Vulnerable ·Adobe
  • cpe:2.3:a:adobe:magento:2.4.6:p9:*:*:open_source:*:*:* Versions 2.4.6 p9 Vulnerable ·Adobe
  • cpe:2.3:a:adobe:magento:2.4.7:-:*:*:open_source:*:*:* Versions 2.4.7 Vulnerable ·Adobe
  • cpe:2.3:a:adobe:magento:2.4.7:b1:*:*:open_source:*:*:* Versions 2.4.7 b1 Vulnerable ·Adobe
  • cpe:2.3:a:adobe:magento:2.4.7:b2:*:*:open_source:*:*:* Versions 2.4.7 b2 Vulnerable ·Adobe
  • cpe:2.3:a:adobe:magento:2.4.7:beta3:*:*:open_source:*:*:* Versions 2.4.7 beta3 Vulnerable ·Adobe
  • cpe:2.3:a:adobe:magento:2.4.7:p1:*:*:open_source:*:*:* Versions 2.4.7 p1 Vulnerable ·Adobe
  • cpe:2.3:a:adobe:magento:2.4.7:p2:*:*:open_source:*:*:* Versions 2.4.7 p2 Vulnerable ·Adobe
  • cpe:2.3:a:adobe:magento:2.4.7:p3:*:*:open_source:*:*:* Versions 2.4.7 p3 Vulnerable ·Adobe
  • cpe:2.3:a:adobe:magento:2.4.7:p4:*:*:open_source:*:*:* Versions 2.4.7 p4 Vulnerable ·Adobe
  • cpe:2.3:a:adobe:magento:2.4.7:p5:*:*:open_source:*:*:* Versions 2.4.7 p5 Vulnerable ·Adobe
  • cpe:2.3:a:adobe:magento:2.4.7:p6:*:*:open_source:*:*:* Versions 2.4.7 p6 Vulnerable ·Adobe
  • cpe:2.3:a:adobe:magento:2.4.7:p7:*:*:open_source:*:*:* Versions 2.4.7 p7 Vulnerable ·Adobe
  • cpe:2.3:a:adobe:magento:2.4.7:p8:*:*:open_source:*:*:* Versions 2.4.7 p8 Vulnerable ·Adobe
  • cpe:2.3:a:adobe:magento:2.4.8:-:*:*:open_source:*:*:* Versions 2.4.8 Vulnerable ·Adobe
  • cpe:2.3:a:adobe:magento:2.4.8:beta1:*:*:open_source:*:*:* Versions 2.4.8 beta1 Vulnerable ·Adobe
  • cpe:2.3:a:adobe:magento:2.4.8:beta2:*:*:open_source:*:*:* Versions 2.4.8 beta2 Vulnerable ·Adobe
  • cpe:2.3:a:adobe:magento:2.4.8:p1:*:*:open_source:*:*:* Versions 2.4.8 p1 Vulnerable ·Adobe
  • cpe:2.3:a:adobe:magento:2.4.8:p2:*:*:open_source:*:*:* Versions 2.4.8 p2 Vulnerable ·Adobe
  • cpe:2.3:a:adobe:magento:2.4.8:p3:*:*:open_source:*:*:* Versions 2.4.8 p3 Vulnerable ·Adobe
  • cpe:2.3:a:adobe:magento:2.4.9:alpha3:*:*:open_source:*:*:* Versions 2.4.9 alpha3 Vulnerable ·Adobe

Remediation

  • Fix · CNA Adobe Commerce (Adobe) Fixed in 2.4.9-beta1, 2.4.8-p4, 2.4.7-p9, 2.4.6-p14, 2.4.5-p16, 2.4.4-p17
  • Fix · CNA Adobe Commerce B2B (Adobe) Fixed in 1.5.3-beta1, 1.5.2-p4, 1.4.2-p9, 1.3.5-p14, 1.3.4-p16, 1.3.3-p17
  • Fix · CNA Magento Open Source (Adobe) Fixed in 2.4.9-beta1, 2.4.8-p4, 2.4.7-p9, 2.4.6-p14, 2.4.5-p16

Fixed in the same release

Records fixed by the same vendor advisory or release, as the CNA lists them.

  • Advisory ·

    Adobe Commerce, Adobe Commerce B2B, Magento Open Source — helpx.adobe.com/security/products/magento/apsb26-05.html

    19 records Highest priority Priority MEDIUM 3 MEDIUM, 16 LOW

    Other records, highest priority first

    • TI-2026-17213 Adobe Commerce | Incorrect Authorization (CWE-863)Priority MEDIUM 40
    • TI-2026-17194 Adobe Commerce | Cross-site Scripting (Stored XSS) (CWE-79)Priority MEDIUM 40
    • TI-2026-17264 Adobe Commerce | Cross-site Scripting (Stored XSS) (CWE-79)Priority LOW 38
    Show all 19 records → Advisory →

Timeline

  1. 2026-10-02 Threatist record created from CVE-2026-21289
  2. 2026-10-03 Alias added: GHSA-5rxc-xrpx-c9wf
  3. 2026-10-30 EPSS moved to the 50th–90th percentile

References

Advisory 1

  • TI-2026-52938 Adobe Commerce | Improper Neutralization of Special Elements Used in a Template Engine (CWE-1336) KEVCVSS 3.1CRITICAL 10.0
  • TI-2024-22559 XXE can expose crypt key and other secrets granting full admin access KEVCVSS 3.1CRITICAL 9.8
  • TI-2022-08035 Adobe Commerce checkout improper input validation leads to remote code execution KEVCVSS 3.1CRITICAL 9.8
  • TI-2026-35762 Unrestricted file upload in Adobe Commerce allows code execution KEVCVSS 3.1CRITICAL 9.3
  • TI-2026-50010 Adobe Commerce | Incorrect Authorization (CWE-863) KEVCVSS 3.1CRITICAL 9.1
  • TI-2025-34067 Adobe Commerce | Improper Input Validation (CWE-20) KEVCVSS 3.1CRITICAL 9.1
See all 213 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences