Approved changes feed: RSS · Atom

cpe:2.3:a:adobe:magento:2.4.4:p1:*:*:open_source:*:*:*

part: a version: 2.4.4 update: p1

VendorAdobe (fb293c1b-cab3-5565-9184-186e4ece530b)
ProductMagento (1ed7eee9-32a7-5916-bd2b-11f60ced0354)
Edition*
Language*
Software editionopen_source
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2025-27192 vulnerable 2026-06-08 07:14:54.444541 Adobe Commerce | Insufficiently Protected Credentials (CWE-522)
LOW (2.7)
Adobe Commerce versions 2.4.7-p4, 2.4.6-p9, 2.4.5-p11, 2.4.4-p12, 2.4.8-beta2 and earlier are affected by an Insufficiently Protected Credentials vulnerability that could lead to a security feature bypass. A high privileged attacker could exploit this vulnerability to gain unauthorized access to protected resources by obtaining sensitive credential information. Exploitation of this issue does not require user interaction.
Published: 2025-04-08T20:17:10.679Z
Updated: 2025-04-08T21:01:36.000Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-27191 vulnerable 2026-06-08 07:14:54.418642 Adobe Commerce | Improper Access Control (CWE-284)
MEDIUM (5.3)
Adobe Commerce versions 2.4.7-p4, 2.4.6-p9, 2.4.5-p11, 2.4.4-p12, 2.4.8-beta2 and earlier are affected by an Improper Access Control vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to bypass security measures and gain unauthorized access. Exploitation of this issue does not require user interaction.
Published: 2025-04-08T20:17:11.466Z
Updated: 2025-04-08T21:01:35.799Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-27190 vulnerable 2026-06-08 07:14:54.399855 Adobe Commerce | Improper Access Control (CWE-284)
MEDIUM (5.3)
Adobe Commerce versions 2.4.7-p4, 2.4.6-p9, 2.4.5-p11, 2.4.4-p12, 2.4.8-beta2 and earlier are affected by an Improper Access Control vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to bypass security measures and gain unauthorized access. Exploitation of this issue does not require user interaction.
Published: 2025-04-08T20:17:12.748Z
Updated: 2025-04-08T21:01:35.615Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-27188 vulnerable 2026-06-08 07:14:54.344774 Adobe Commerce | Incorrect Authorization (CWE-863)
MEDIUM (4.3)
Adobe Commerce versions 2.4.7-p4, 2.4.6-p9, 2.4.5-p11, 2.4.4-p12, 2.4.8-beta2 and earlier are affected by an Improper Authorization vulnerability that could result in Privilege escalation. An attacker could leverage this vulnerability to bypass security measures and gain unauthorized access. Exploitation of this issue does not require user interaction.
Published: 2025-04-08T20:17:09.891Z
Updated: 2025-05-01T16:10:36.954Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-24438 vulnerable 2026-06-08 07:12:49.128318 Adobe Commerce | Cross-site Scripting (Stored XSS) (CWE-79)
HIGH (8.7)
Adobe Commerce versions 2.4.8-beta1, 2.4.7-p3, 2.4.6-p8, 2.4.5-p10, 2.4.4-p11 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low-privileged attacker to inject malicious scripts into vulnerable form fields. Malicious JavaScript may be executed in a victim’s browser when they browse to the page containing the vulnerable field. A successful attacker can abuse this to achieve session takeover, increasing the confidentiality and integrity impact as high.
Published: 2025-02-11T17:37:42.877Z
Updated: 2026-02-26T19:09:10.474Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-24437 vulnerable 2026-06-08 07:12:49.118651 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-24436 vulnerable 2026-06-08 07:12:49.112035 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-24435 vulnerable 2026-06-08 07:12:49.098313 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-24434 vulnerable 2026-06-08 07:12:49.092714 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-24432 vulnerable 2026-06-08 07:12:49.085715 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-24430 vulnerable 2026-06-08 07:12:48.826470 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-24429 vulnerable 2026-06-08 07:12:48.812225 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-24428 vulnerable 2026-06-08 07:12:48.804899 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-24427 vulnerable 2026-06-08 07:12:48.793922 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-24425 vulnerable 2026-06-08 07:12:48.785634 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-24421 vulnerable 2026-06-08 07:12:48.769670 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-24417 vulnerable 2026-06-08 07:12:48.749317 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-24416 vulnerable 2026-06-08 07:12:48.741869 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-24415 vulnerable 2026-06-08 07:12:48.730943 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-24414 vulnerable 2026-06-08 07:12:48.722772 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-24413 vulnerable 2026-06-08 07:12:48.716310 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-24412 vulnerable 2026-06-08 07:12:48.701118 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-24411 vulnerable 2026-06-08 07:12:48.694147 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-24410 vulnerable 2026-06-08 07:12:48.684573 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-24409 vulnerable 2026-06-08 07:12:48.671990 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-24408 vulnerable 2026-06-08 07:12:48.664990 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-24406 vulnerable 2026-06-08 07:12:48.628846 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-45149 vulnerable 2026-06-08 06:45:55.437924 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-45148 vulnerable 2026-06-08 06:45:55.433094 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-45135 vulnerable 2026-06-08 06:45:55.068534 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-45134 vulnerable 2026-06-08 06:45:55.053476 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-45133 vulnerable 2026-06-08 06:45:55.046204 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-45132 vulnerable 2026-06-08 06:45:55.039481 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-45131 vulnerable 2026-06-08 06:45:55.026553 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-45130 vulnerable 2026-06-08 06:45:55.019356 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-45129 vulnerable 2026-06-08 06:45:55.006770 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-45128 vulnerable 2026-06-08 06:45:54.999401 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-45127 vulnerable 2026-06-08 06:45:54.986460 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-45125 vulnerable 2026-06-08 06:45:54.980208 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-45124 vulnerable 2026-06-08 06:45:54.969648 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-45123 vulnerable 2026-06-08 06:45:54.962959 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-45122 vulnerable 2026-06-08 06:45:54.951558 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-45121 vulnerable 2026-06-08 06:45:54.943625 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-45120 vulnerable 2026-06-08 06:45:54.931120 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-45119 vulnerable 2026-06-08 06:45:54.922887 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-45118 vulnerable 2026-06-08 06:45:54.917965 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-45117 vulnerable 2026-06-08 06:45:54.911718 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-45116 vulnerable 2026-06-08 06:45:54.901081 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-45115 vulnerable 2026-06-08 06:45:54.875337 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-39419 vulnerable 2026-06-08 06:41:49.388552 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-39418 vulnerable 2026-06-08 06:41:49.384454 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-39417 vulnerable 2026-06-08 06:41:49.380663 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-39416 vulnerable 2026-06-08 06:41:49.376928 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-39415 vulnerable 2026-06-08 06:41:49.373239 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-39414 vulnerable 2026-06-08 06:41:49.369784 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-39413 vulnerable 2026-06-08 06:41:49.364978 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-39412 vulnerable 2026-06-08 06:41:49.351973 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-39411 vulnerable 2026-06-08 06:41:49.348263 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-39410 vulnerable 2026-06-08 06:41:49.344757 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-39409 vulnerable 2026-06-08 06:41:49.340919 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-39408 vulnerable 2026-06-08 06:41:49.328609 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-39407 vulnerable 2026-06-08 06:41:49.324976 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-39406 vulnerable 2026-06-08 06:41:49.321132 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-39405 vulnerable 2026-06-08 06:41:49.317675 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-39404 vulnerable 2026-06-08 06:41:49.314181 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-39403 vulnerable 2026-06-08 06:41:49.309926 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-39402 vulnerable 2026-06-08 06:41:49.298906 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-39401 vulnerable 2026-06-08 06:41:49.293188 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-39400 vulnerable 2026-06-08 06:41:49.289179 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-39399 vulnerable 2026-06-08 06:41:49.285812 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-39398 vulnerable 2026-06-08 06:41:49.273210 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-39397 vulnerable 2026-06-08 06:41:49.253475 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-34111 vulnerable 2026-06-08 06:37:32.853755 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-34110 vulnerable 2026-06-08 06:37:32.850086 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-34109 vulnerable 2026-06-08 06:37:32.846189 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-34108 vulnerable 2026-06-08 06:37:32.841676 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-34107 vulnerable 2026-06-08 06:37:32.794845 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-34106 vulnerable 2026-06-08 06:37:32.790824 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-34105 vulnerable 2026-06-08 06:37:32.786992 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-34104 vulnerable 2026-06-08 06:37:32.782931 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-34103 vulnerable 2026-06-08 06:37:32.777767 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-34102 vulnerable 2026-06-08 06:37:32.734870 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-20759 vulnerable 2026-06-08 06:27:30.539435 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-20758 vulnerable 2026-06-08 06:27:30.521625 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-38251 vulnerable 2026-06-08 06:08:17.426925 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-38250 vulnerable 2026-06-08 06:08:17.415538 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-38249 vulnerable 2026-06-08 06:08:17.411441 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-38221 vulnerable 2026-06-08 06:08:17.361187 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-38220 vulnerable 2026-06-08 06:08:17.352122 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-38219 vulnerable 2026-06-08 06:08:17.348035 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-38218 vulnerable 2026-06-08 06:08:17.336540 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-29297 vulnerable 2026-06-08 06:02:39.341058 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-29296 vulnerable 2026-06-08 06:02:39.338767 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-29295 vulnerable 2026-06-08 06:02:39.335669 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-29294 vulnerable 2026-06-08 06:02:39.333182 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-29293 vulnerable 2026-06-08 06:02:39.330107 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-29292 vulnerable 2026-06-08 06:02:39.327041 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-29291 vulnerable 2026-06-08 06:02:39.324398 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-29290 vulnerable 2026-06-08 06:02:39.322023 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-29289 vulnerable 2026-06-08 06:02:39.319100 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-29288 vulnerable 2026-06-08 06:02:39.310145 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-29287 vulnerable 2026-06-08 06:02:39.303147 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-26367 vulnerable 2026-06-08 05:57:39.534216 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-26366 vulnerable 2026-06-08 05:57:39.520413 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-22248 vulnerable 2026-06-08 05:54:23.287032 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.