CB
Product
Commerce B2b
On CISA KEVExploited in the wild
141
CVEs
4
On KEV
10.0
Max CVSS
0
New 30D
Severity mix
Critical 9High 57Medium 62Low 13
Watch
Add Commerce B2b to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2025-49556 | 7.5 | Aug 12 | Adobe Commerce | Incorrect Authorization (CWE-863) Affected: before 1.3.3; 1.3.3; 1.3.3; 1.3.3; 1.3.3; 1.3.3; +34 more |
| CVE-2025-49554 | 7.5 | Aug 12 | Adobe Commerce | Improper Input Validation (CWE-20) Affected: before 1.3.3; 1.3.3; 1.3.3; 1.3.3; 1.3.3; 1.3.3; +34 more |
| CVE-2025-24406 | 7.5 | Feb 11 | Adobe Commerce | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') (CWE-22) Affected: before 1.3.3; 1.3.3; 1.3.3; 1.3.3; 1.3.4; 1.3.4; +9 more |
| CVE-2026-34647 | 7.4 | May 12 | Adobe Commerce | Server-Side Request Forgery (SSRF) (CWE-918) Affected: before 1.3.3; 1.3.3; 1.3.3; 1.3.3; 1.3.3; 1.3.3; +34 more |
| CVE-2026-48412 | 7.2 | Aug 11 | Adobe Commerce | Incorrect Authorization (CWE-863) Affected: 1.3.3; 1.3.3; 1.3.3; 1.3.3; 1.3.3; 1.3.3; +22 more |
| CVE-2026-47992 | 7.2 | Jul 14 | Adobe Commerce | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') (CWE-89) Affected: 1.3.3; 1.3.3; 1.3.3; 1.3.3; 1.3.3; 1.3.3; +34 more |
| CVE-2025-24407 | 7.1 | Feb 11 | Adobe Commerce | Incorrect Authorization (CWE-863) Affected: before 1.3.3; 1.3.3; 1.3.3; 1.3.3; 1.3.4; 1.3.4; +9 more |