Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Advisory: Adobe Commerce — helpx.adobe.com/security/products/magento/apsb24-18.html Clear all filters
TI-2024-13560 CVE-2024-20758 · GHSA-wh4m-6rh3-p4rq

Adobe Commerce | Improper Input Validation (CWE-20)

Priority MEDIUM 50

Adobe Commerce versions 2.4.6-p4, 2.4.5-p6, 2.4.4-p7, 2.4.7-beta3 and earlier are affected by an Improper Input Validation vulnerability that could result in arbitrary code execution on the underlying filesystem.

CVSS 3.1CRITICAL 9.0 Network No auth No interaction EPSS 0.01418 Published 2024-04-10 Fixed in 2.4.7, 2.4.6-p5 +2 CWE-20
TI-2024-13561 CVE-2024-20759 · GHSA-59vf-hjxc-f9c5

Adobe Commerce | Cross-site Scripting (Stored XSS) (CWE-79)

Priority LOW 39

Adobe Commerce versions 2.4.6-p4, 2.4.5-p6, 2.4.4-p7, 2.4.7-beta3 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a high-privileged attacker to inject malicious scrip…

CVSS 3.1HIGH 8.1 Network High privileges User interaction EPSS 0.01028 Published 2024-04-10 Fixed in 2.4.7, 2.4.6-p5 +2 CWE-79