CW
Product
Commerce Webhooks
On CISA KEVExploited in the wild
10
CVEs
1
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 2High 6Medium 2Low 0
Watch
Add Commerce Webhooks to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2024-34111 | 8.8 | Jun 13 | SSRF in service connector Affected: 1.2.0 through 1.4.0 |
| CVE-2024-34104 | 8.2 | Jun 13 | Adobe Commerce | Improper Authorization (CWE-285) Affected: 1.2.0 through 1.4.0 |
| CVE-2024-34103 | 8.1 | Jun 13 | Customer account takeover via web API call & subsequent password reset Affected: 1.2.0 through 1.4.0 |
| CVE-2024-34109 | 7.2 | Jun 13 | Adobe Commerce | Improper Input Validation (CWE-20) Affected: 1.2.0 through 1.4.0 |
| CVE-2024-34110 | 7.2 | Jun 13 | RCE in the Adobe Commerce Webhook module through a legit webhook definition Affected: 1.2.0 through 1.4.0 |
| CVE-2024-34108 | 7.2 | Jun 13 | Large attack surface through legit webhook usage in Adobe Commerce Affected: 1.2.0 through 1.4.0 |
Showing 6