Approved changes feed: RSS · Atom

cpe:2.3:a:adobe:magento:2.4.4:p3:*:*:open_source:*:*:*

part: a version: 2.4.4 update: p3

VendorAdobe (fb293c1b-cab3-5565-9184-186e4ece530b)
ProductMagento (1ed7eee9-32a7-5916-bd2b-11f60ced0354)
Edition*
Language*
Software editionopen_source
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2025-27192 vulnerable 2026-06-08 07:14:54.444854 Adobe Commerce | Insufficiently Protected Credentials (CWE-522)
LOW (2.7)
Adobe Commerce versions 2.4.7-p4, 2.4.6-p9, 2.4.5-p11, 2.4.4-p12, 2.4.8-beta2 and earlier are affected by an Insufficiently Protected Credentials vulnerability that could lead to a security feature bypass. A high privileged attacker could exploit this vulnerability to gain unauthorized access to protected resources by obtaining sensitive credential information. Exploitation of this issue does not require user interaction.
Published: 2025-04-08T20:17:10.679Z
Updated: 2025-04-08T21:01:36.000Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-27191 vulnerable 2026-06-08 07:14:54.418860 Adobe Commerce | Improper Access Control (CWE-284)
MEDIUM (5.3)
Adobe Commerce versions 2.4.7-p4, 2.4.6-p9, 2.4.5-p11, 2.4.4-p12, 2.4.8-beta2 and earlier are affected by an Improper Access Control vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to bypass security measures and gain unauthorized access. Exploitation of this issue does not require user interaction.
Published: 2025-04-08T20:17:11.466Z
Updated: 2025-04-08T21:01:35.799Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-27190 vulnerable 2026-06-08 07:14:54.400296 Adobe Commerce | Improper Access Control (CWE-284)
MEDIUM (5.3)
Adobe Commerce versions 2.4.7-p4, 2.4.6-p9, 2.4.5-p11, 2.4.4-p12, 2.4.8-beta2 and earlier are affected by an Improper Access Control vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to bypass security measures and gain unauthorized access. Exploitation of this issue does not require user interaction.
Published: 2025-04-08T20:17:12.748Z
Updated: 2025-04-08T21:01:35.615Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-27188 vulnerable 2026-06-08 07:14:54.347994 Adobe Commerce | Incorrect Authorization (CWE-863)
MEDIUM (4.3)
Adobe Commerce versions 2.4.7-p4, 2.4.6-p9, 2.4.5-p11, 2.4.4-p12, 2.4.8-beta2 and earlier are affected by an Improper Authorization vulnerability that could result in Privilege escalation. An attacker could leverage this vulnerability to bypass security measures and gain unauthorized access. Exploitation of this issue does not require user interaction.
Published: 2025-04-08T20:17:09.891Z
Updated: 2025-05-01T16:10:36.954Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-24438 vulnerable 2026-06-08 07:12:49.128482 Adobe Commerce | Cross-site Scripting (Stored XSS) (CWE-79)
HIGH (8.7)
Adobe Commerce versions 2.4.8-beta1, 2.4.7-p3, 2.4.6-p8, 2.4.5-p10, 2.4.4-p11 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low-privileged attacker to inject malicious scripts into vulnerable form fields. Malicious JavaScript may be executed in a victim’s browser when they browse to the page containing the vulnerable field. A successful attacker can abuse this to achieve session takeover, increasing the confidentiality and integrity impact as high.
Published: 2025-02-11T17:37:42.877Z
Updated: 2026-02-26T19:09:10.474Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-24437 vulnerable 2026-06-08 07:12:49.118936 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-24436 vulnerable 2026-06-08 07:12:49.112235 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-24435 vulnerable 2026-06-08 07:12:49.098592 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-24434 vulnerable 2026-06-08 07:12:49.092959 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-24432 vulnerable 2026-06-08 07:12:49.086047 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-24430 vulnerable 2026-06-08 07:12:48.826692 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-24429 vulnerable 2026-06-08 07:12:48.812509 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-24428 vulnerable 2026-06-08 07:12:48.805167 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-24427 vulnerable 2026-06-08 07:12:48.794123 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-24425 vulnerable 2026-06-08 07:12:48.786067 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-24421 vulnerable 2026-06-08 07:12:48.769843 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-24417 vulnerable 2026-06-08 07:12:48.749502 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-24416 vulnerable 2026-06-08 07:12:48.742399 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-24415 vulnerable 2026-06-08 07:12:48.731540 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-24414 vulnerable 2026-06-08 07:12:48.722848 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-24413 vulnerable 2026-06-08 07:12:48.716614 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-24412 vulnerable 2026-06-08 07:12:48.701303 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-24411 vulnerable 2026-06-08 07:12:48.694467 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-24410 vulnerable 2026-06-08 07:12:48.684755 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-24409 vulnerable 2026-06-08 07:12:48.672305 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-24408 vulnerable 2026-06-08 07:12:48.665263 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-24406 vulnerable 2026-06-08 07:12:48.631866 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-45149 vulnerable 2026-06-08 06:45:55.437976 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-45148 vulnerable 2026-06-08 06:45:55.433255 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-45135 vulnerable 2026-06-08 06:45:55.068790 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-45134 vulnerable 2026-06-08 06:45:55.053727 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-45133 vulnerable 2026-06-08 06:45:55.046374 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-45132 vulnerable 2026-06-08 06:45:55.039713 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-45131 vulnerable 2026-06-08 06:45:55.026798 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-45130 vulnerable 2026-06-08 06:45:55.019617 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-45129 vulnerable 2026-06-08 06:45:55.006825 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-45128 vulnerable 2026-06-08 06:45:54.999552 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-45127 vulnerable 2026-06-08 06:45:54.986516 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-45125 vulnerable 2026-06-08 06:45:54.980475 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-45124 vulnerable 2026-06-08 06:45:54.969867 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-45123 vulnerable 2026-06-08 06:45:54.963014 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-45122 vulnerable 2026-06-08 06:45:54.951711 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-45121 vulnerable 2026-06-08 06:45:54.943684 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-45120 vulnerable 2026-06-08 06:45:54.931169 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-45119 vulnerable 2026-06-08 06:45:54.926288 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-45118 vulnerable 2026-06-08 06:45:54.918020 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-45117 vulnerable 2026-06-08 06:45:54.911872 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-45116 vulnerable 2026-06-08 06:45:54.901141 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-45115 vulnerable 2026-06-08 06:45:54.877253 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-39419 vulnerable 2026-06-08 06:41:49.388586 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-39418 vulnerable 2026-06-08 06:41:49.384600 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-39417 vulnerable 2026-06-08 06:41:49.380887 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-39416 vulnerable 2026-06-08 06:41:49.377079 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-39415 vulnerable 2026-06-08 06:41:49.373383 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-39414 vulnerable 2026-06-08 06:41:49.370008 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-39413 vulnerable 2026-06-08 06:41:49.365015 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-39412 vulnerable 2026-06-08 06:41:49.352009 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-39411 vulnerable 2026-06-08 06:41:49.348437 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-39410 vulnerable 2026-06-08 06:41:49.344896 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-39409 vulnerable 2026-06-08 06:41:49.341076 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-39408 vulnerable 2026-06-08 06:41:49.328648 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-39407 vulnerable 2026-06-08 06:41:49.325118 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-39406 vulnerable 2026-06-08 06:41:49.321177 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-39405 vulnerable 2026-06-08 06:41:49.317812 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-39404 vulnerable 2026-06-08 06:41:49.314217 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-39403 vulnerable 2026-06-08 06:41:49.309962 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-39402 vulnerable 2026-06-08 06:41:49.298950 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-39401 vulnerable 2026-06-08 06:41:49.293227 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-39400 vulnerable 2026-06-08 06:41:49.289216 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-39399 vulnerable 2026-06-08 06:41:49.285848 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-39398 vulnerable 2026-06-08 06:41:49.273247 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-39397 vulnerable 2026-06-08 06:41:49.254625 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-34111 vulnerable 2026-06-08 06:37:32.853844 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-34110 vulnerable 2026-06-08 06:37:32.850204 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-34109 vulnerable 2026-06-08 06:37:32.846226 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-34108 vulnerable 2026-06-08 06:37:32.841900 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-34107 vulnerable 2026-06-08 06:37:32.794883 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-34106 vulnerable 2026-06-08 06:37:32.790971 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-34105 vulnerable 2026-06-08 06:37:32.787031 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-34104 vulnerable 2026-06-08 06:37:32.782973 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-34103 vulnerable 2026-06-08 06:37:32.777820 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-34102 vulnerable 2026-06-08 06:37:32.736305 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-20759 vulnerable 2026-06-08 06:27:30.547763 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-20758 vulnerable 2026-06-08 06:27:30.523199 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-38251 vulnerable 2026-06-08 06:08:17.426971 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-38250 vulnerable 2026-06-08 06:08:17.415760 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-38249 vulnerable 2026-06-08 06:08:17.411589 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-38221 vulnerable 2026-06-08 06:08:17.361229 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-38220 vulnerable 2026-06-08 06:08:17.352275 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-38219 vulnerable 2026-06-08 06:08:17.348078 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-38218 vulnerable 2026-06-08 06:08:17.338074 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-29297 vulnerable 2026-06-08 06:02:39.341180 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-29296 vulnerable 2026-06-08 06:02:39.338916 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-29295 vulnerable 2026-06-08 06:02:39.335866 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-29294 vulnerable 2026-06-08 06:02:39.333391 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-29293 vulnerable 2026-06-08 06:02:39.330325 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-29292 vulnerable 2026-06-08 06:02:39.327255 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-29291 vulnerable 2026-06-08 06:02:39.324519 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-29290 vulnerable 2026-06-08 06:02:39.322055 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-29289 vulnerable 2026-06-08 06:02:39.319313 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-29288 vulnerable 2026-06-08 06:02:39.310358 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-29287 vulnerable 2026-06-08 06:02:39.304233 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-26367 vulnerable 2026-06-08 05:57:39.534334 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-26366 vulnerable 2026-06-08 05:57:39.521554 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-22248 vulnerable 2026-06-08 05:54:23.288115 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.