CO
E-commerce
Commerce
On CISA KEVExploited in the wild
264
CVEs
6
On KEV
10.0
Max CVSS
11
New 30D
Severity mix
Critical 23High 109Medium 118Low 14
Watch
Add Commerce to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2024-39413 | 4.3 | Aug 14 | An unauthorized user can export the Invoiced Sales Report Affected: through 2.4.4-p9 |
| CVE-2024-39408 | 4.3 | Aug 14 | Adobe Commerce | Cross-Site Request Forgery (CSRF) (CWE-352) Affected: through 2.4.4-p9 |
| CVE-2024-39417 | 4.3 | Aug 14 | An unauthorized user can export the Shipping Report Affected: through 2.4.4-p9 |
| CVE-2024-39410 | 4.3 | Aug 14 | Adobe Commerce | Cross-Site Request Forgery (CSRF) (CWE-352) Affected: through 2.4.4-p9 |
| CVE-2024-39407 | 4.3 | Aug 14 | Adobe Commerce | Improper Authorization (CWE-285) Affected: through 2.4.4-p9 |
| CVE-2024-39409 | 4.3 | Aug 14 | Adobe Commerce | Cross-Site Request Forgery (CSRF) (CWE-352) Affected: through 2.4.4-p9 |
| CVE-2024-39411 | 4.3 | Aug 14 | Adobe Commerce | Improper Authorization (CWE-285) Affected: through 2.4.4-p9 |
| CVE-2024-39416 | 4.3 | Aug 14 | Unauthorized user can export Orders Sale Report Affected: through 2.4.4-p9 |
| CVE-2024-39414 | 4.3 | Aug 14 | Being able to import/export tax rates without proper privileges Affected: through 2.4.4-p9 |
| CVE-2024-39412 | 4.3 | Aug 14 | Adobe Commerce | Improper Authorization (CWE-285) Affected: through 2.4.4-p9 |
| CVE-2024-39404 | 4.3 | Aug 14 | A user without Shop Policy Parameters section privilege can alter the shop policy parameters section Affected: through 2.4.4-p9 |
| CVE-2024-39415 | 4.3 | Aug 14 | An unauthorized user can export the Tax Sales Report Affected: through 2.4.4-p9 |
| CVE-2024-39405 | 4.3 | Aug 14 | Adobe Commerce | Improper Authorization (CWE-285) Affected: through 2.4.4-p9 |
| CVE-2023-29296 | 4.3 | Jun 15 | [Cloud] Customer suspects IDOR vulnerability Affected: 2.4.4; 2.4.4; 2.4.4; 2.4.4; 2.4.5; 2.4.5; +2 more |
| CVE-2023-29295 | 4.3 | Jun 15 | Insecure Direct Object Reference (IDOR) in Create Quote Function Affected: 2.4.4; 2.4.4; 2.4.4; 2.4.4; 2.4.5; 2.4.5; +2 more |
| CVE-2023-29288 | 4.3 | Jun 15 | Adobe Commerce | Incorrect Authorization (CWE-863) Affected: through 2.4.4-p3 |
| CVE-2023-29294 | 4.3 | Jun 15 | Bypass Purchase Order Approval using Company User in Adobe Commerce B2B Affected: 2.3.7; 2.3.7; 2.3.7; 2.3.7; 2.3.7; 2.3.7; +21 more |
| CVE-2023-22251 | 4.3 | Mar 27 | Adobe Commerce Incorrect Authorization Security feature bypass Affected: before 2.4.4; 2.4.4; 2.4.4; 2.4.4; 2.4.5; 2.4.5 |