Approved changes feed: RSS · Atom

cpe:2.3:a:adobe:magento:2.4.4:p2:*:*:open_source:*:*:*

part: a version: 2.4.4 update: p2

VendorAdobe (fb293c1b-cab3-5565-9184-186e4ece530b)
ProductMagento (1ed7eee9-32a7-5916-bd2b-11f60ced0354)
Edition*
Language*
Software editionopen_source
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2025-27192 vulnerable 2026-06-08 07:14:54.444835 Adobe Commerce | Insufficiently Protected Credentials (CWE-522)
LOW (2.7)
Adobe Commerce versions 2.4.7-p4, 2.4.6-p9, 2.4.5-p11, 2.4.4-p12, 2.4.8-beta2 and earlier are affected by an Insufficiently Protected Credentials vulnerability that could lead to a security feature bypass. A high privileged attacker could exploit this vulnerability to gain unauthorized access to protected resources by obtaining sensitive credential information. Exploitation of this issue does not require user interaction.
Published: 2025-04-08T20:17:10.679Z
Updated: 2025-04-08T21:01:36.000Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-27191 vulnerable 2026-06-08 07:14:54.418843 Adobe Commerce | Improper Access Control (CWE-284)
MEDIUM (5.3)
Adobe Commerce versions 2.4.7-p4, 2.4.6-p9, 2.4.5-p11, 2.4.4-p12, 2.4.8-beta2 and earlier are affected by an Improper Access Control vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to bypass security measures and gain unauthorized access. Exploitation of this issue does not require user interaction.
Published: 2025-04-08T20:17:11.466Z
Updated: 2025-04-08T21:01:35.799Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-27190 vulnerable 2026-06-08 07:14:54.400144 Adobe Commerce | Improper Access Control (CWE-284)
MEDIUM (5.3)
Adobe Commerce versions 2.4.7-p4, 2.4.6-p9, 2.4.5-p11, 2.4.4-p12, 2.4.8-beta2 and earlier are affected by an Improper Access Control vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to bypass security measures and gain unauthorized access. Exploitation of this issue does not require user interaction.
Published: 2025-04-08T20:17:12.748Z
Updated: 2025-04-08T21:01:35.615Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-27188 vulnerable 2026-06-08 07:14:54.347473 Adobe Commerce | Incorrect Authorization (CWE-863)
MEDIUM (4.3)
Adobe Commerce versions 2.4.7-p4, 2.4.6-p9, 2.4.5-p11, 2.4.4-p12, 2.4.8-beta2 and earlier are affected by an Improper Authorization vulnerability that could result in Privilege escalation. An attacker could leverage this vulnerability to bypass security measures and gain unauthorized access. Exploitation of this issue does not require user interaction.
Published: 2025-04-08T20:17:09.891Z
Updated: 2025-05-01T16:10:36.954Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-24438 vulnerable 2026-06-08 07:12:49.128463 Adobe Commerce | Cross-site Scripting (Stored XSS) (CWE-79)
HIGH (8.7)
Adobe Commerce versions 2.4.8-beta1, 2.4.7-p3, 2.4.6-p8, 2.4.5-p10, 2.4.4-p11 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low-privileged attacker to inject malicious scripts into vulnerable form fields. Malicious JavaScript may be executed in a victim’s browser when they browse to the page containing the vulnerable field. A successful attacker can abuse this to achieve session takeover, increasing the confidentiality and integrity impact as high.
Published: 2025-02-11T17:37:42.877Z
Updated: 2026-02-26T19:09:10.474Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-24437 vulnerable 2026-06-08 07:12:49.118809 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-24436 vulnerable 2026-06-08 07:12:49.112216 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-24435 vulnerable 2026-06-08 07:12:49.098465 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-24434 vulnerable 2026-06-08 07:12:49.092939 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-24432 vulnerable 2026-06-08 07:12:49.085917 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-24430 vulnerable 2026-06-08 07:12:48.826671 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-24429 vulnerable 2026-06-08 07:12:48.812385 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-24428 vulnerable 2026-06-08 07:12:48.805143 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-24427 vulnerable 2026-06-08 07:12:48.794102 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-24425 vulnerable 2026-06-08 07:12:48.786048 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-24421 vulnerable 2026-06-08 07:12:48.769731 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-24417 vulnerable 2026-06-08 07:12:48.749482 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-24416 vulnerable 2026-06-08 07:12:48.742226 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-24415 vulnerable 2026-06-08 07:12:48.731263 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-24414 vulnerable 2026-06-08 07:12:48.722828 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-24413 vulnerable 2026-06-08 07:12:48.716490 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-24412 vulnerable 2026-06-08 07:12:48.701284 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-24411 vulnerable 2026-06-08 07:12:48.694335 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-24410 vulnerable 2026-06-08 07:12:48.684734 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-24409 vulnerable 2026-06-08 07:12:48.672209 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-24408 vulnerable 2026-06-08 07:12:48.665139 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-24406 vulnerable 2026-06-08 07:12:48.631201 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-45149 vulnerable 2026-06-08 06:45:55.437958 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-45148 vulnerable 2026-06-08 06:45:55.433235 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-45135 vulnerable 2026-06-08 06:45:55.068769 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-45134 vulnerable 2026-06-08 06:45:55.053609 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-45133 vulnerable 2026-06-08 06:45:55.046237 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-45132 vulnerable 2026-06-08 06:45:55.039693 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-45131 vulnerable 2026-06-08 06:45:55.026778 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-45130 vulnerable 2026-06-08 06:45:55.019487 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-45129 vulnerable 2026-06-08 06:45:55.006805 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-45128 vulnerable 2026-06-08 06:45:54.999533 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-45127 vulnerable 2026-06-08 06:45:54.986499 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-45125 vulnerable 2026-06-08 06:45:54.980457 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-45124 vulnerable 2026-06-08 06:45:54.969850 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-45123 vulnerable 2026-06-08 06:45:54.962996 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-45122 vulnerable 2026-06-08 06:45:54.951596 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-45121 vulnerable 2026-06-08 06:45:54.943665 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-45120 vulnerable 2026-06-08 06:45:54.931154 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-45119 vulnerable 2026-06-08 06:45:54.926255 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-45118 vulnerable 2026-06-08 06:45:54.918003 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-45117 vulnerable 2026-06-08 06:45:54.911853 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-45116 vulnerable 2026-06-08 06:45:54.901122 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-45115 vulnerable 2026-06-08 06:45:54.876579 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-39419 vulnerable 2026-06-08 06:41:49.388569 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-39418 vulnerable 2026-06-08 06:41:49.384574 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-39417 vulnerable 2026-06-08 06:41:49.380783 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-39416 vulnerable 2026-06-08 06:41:49.376946 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-39415 vulnerable 2026-06-08 06:41:49.373256 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-39414 vulnerable 2026-06-08 06:41:49.369905 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-39413 vulnerable 2026-06-08 06:41:49.364997 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-39412 vulnerable 2026-06-08 06:41:49.351992 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-39411 vulnerable 2026-06-08 06:41:49.348280 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-39410 vulnerable 2026-06-08 06:41:49.344870 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-39409 vulnerable 2026-06-08 06:41:49.340939 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-39408 vulnerable 2026-06-08 06:41:49.328629 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-39407 vulnerable 2026-06-08 06:41:49.325093 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-39406 vulnerable 2026-06-08 06:41:49.321154 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-39405 vulnerable 2026-06-08 06:41:49.317696 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-39404 vulnerable 2026-06-08 06:41:49.314200 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-39403 vulnerable 2026-06-08 06:41:49.309945 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-39402 vulnerable 2026-06-08 06:41:49.298931 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-39401 vulnerable 2026-06-08 06:41:49.293208 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-39400 vulnerable 2026-06-08 06:41:49.289196 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-39399 vulnerable 2026-06-08 06:41:49.285830 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-39398 vulnerable 2026-06-08 06:41:49.273228 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-39397 vulnerable 2026-06-08 06:41:49.254119 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-34111 vulnerable 2026-06-08 06:37:32.853825 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-34110 vulnerable 2026-06-08 06:37:32.850186 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-34109 vulnerable 2026-06-08 06:37:32.846209 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-34108 vulnerable 2026-06-08 06:37:32.841806 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-34107 vulnerable 2026-06-08 06:37:32.794863 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-34106 vulnerable 2026-06-08 06:37:32.790937 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-34105 vulnerable 2026-06-08 06:37:32.787013 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-34104 vulnerable 2026-06-08 06:37:32.782952 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-34103 vulnerable 2026-06-08 06:37:32.777798 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-34102 vulnerable 2026-06-08 06:37:32.735649 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-20759 vulnerable 2026-06-08 06:27:30.539455 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-20758 vulnerable 2026-06-08 06:27:30.522468 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-38251 vulnerable 2026-06-08 06:08:17.426947 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-38250 vulnerable 2026-06-08 06:08:17.415656 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-38249 vulnerable 2026-06-08 06:08:17.411461 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-38221 vulnerable 2026-06-08 06:08:17.361209 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-38220 vulnerable 2026-06-08 06:08:17.352143 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-38219 vulnerable 2026-06-08 06:08:17.348056 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-38218 vulnerable 2026-06-08 06:08:17.337289 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-29297 vulnerable 2026-06-08 06:02:39.341162 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-29296 vulnerable 2026-06-08 06:02:39.338786 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-29295 vulnerable 2026-06-08 06:02:39.335768 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-29294 vulnerable 2026-06-08 06:02:39.333281 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-29293 vulnerable 2026-06-08 06:02:39.330214 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-29292 vulnerable 2026-06-08 06:02:39.327163 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-29291 vulnerable 2026-06-08 06:02:39.324418 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-29290 vulnerable 2026-06-08 06:02:39.322040 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-29289 vulnerable 2026-06-08 06:02:39.319200 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-29288 vulnerable 2026-06-08 06:02:39.310245 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-29287 vulnerable 2026-06-08 06:02:39.303707 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-26367 vulnerable 2026-06-08 05:57:39.534236 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-26366 vulnerable 2026-06-08 05:57:39.520924 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-22248 vulnerable 2026-06-08 05:54:23.287637 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.