Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

7 records

Priority MEDIUM 40

Adobe Commerce is affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low-privileged attacker to inject malicious scripts into vulnerable form fields.

CVSS 3.1HIGH 8.7 Network Low privileges User interaction EPSS 0.00332 Published 2026-08-11 Fixed in 2.4.9-2026-aug, 2.4.8-2026-aug +9 CWE-79
Priority MEDIUM 40

Adobe Commerce is affected by an Incorrect Authorization vulnerability that could result in a Security feature bypass.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00829 Published 2026-08-11 Fixed in 2.4.9-2026-aug, 2.4.8-2026-aug +9 CWE-863
Priority MEDIUM 41

Adobe Commerce is affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low-privileged attacker to inject malicious scripts into vulnerable form fields.

CVSS 3.1HIGH 8.7 Network Low privileges User interaction EPSS 0.00699 Published 2026-08-11 Fixed in 2.4.9-2026-aug, 2.4.8-2026-aug +9 CWE-79
Priority LOW 37

Adobe Commerce is affected by an Incorrect Authorization vulnerability that could result in a Security feature bypass.

CVSS 3.1HIGH 8.3 Network Low privileges No interaction EPSS 0.0056 Published 2026-08-11 Fixed in 2.4.9-2026-aug, 2.4.8-2026-aug +9 CWE-863
Priority LOW 34

Adobe Commerce is affected by an Incorrect Authorization vulnerability that could result in privilege escalation.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.00558 Published 2026-08-11 Fixed in 2.4.9-2026-aug, 2.4.8-2026-aug +9 CWE-863
Priority LOW 30

Adobe Commerce is affected by an Incorrect Authorization vulnerability that could result in a Security feature bypass.

CVSS 3.1MEDIUM 6.5 Network High privileges No interaction EPSS 0.00632 Published 2026-08-11 Fixed in 2.4.9-2026-aug, 2.4.8-2026-aug +9 CWE-863
Priority CRITICAL 98KEV

Adobe Commerce is affected by an Incorrect Authorization vulnerability that could result in privilege escalation.

CVSS 3.1CRITICAL 9.1 Network No auth No interaction EPSS 0.90491 Published 2026-08-11 Fixed in 2.4.9-2026-aug, 2.4.8-2026-aug +9 CWE-863