Magento Commerce
Approved changes feed: RSS · Atom
cpe:2.3:a:adobe:magento_commerce:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Adobe (fb293c1b-cab3-5565-9184-186e4ece530b) |
|---|---|
| Product | Magento Commerce (4fe989b6-fbc3-5b8b-b86b-e57fec33f97e) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2023-38209 |
vulnerable | 2026-06-08 06:08:17.281589 |
Adobe Commerce Incorrect Authorization Security feature bypass
MEDIUM (6.5)
Adobe Commerce versions 2.4.6-p1 (and earlier), 2.4.5-p3 (and earlier) and 2.4.4-p4 (and earlier) are affected by an Incorrect Authorization vulnerability that could lead to a Security feature bypass. A low-privileged attacker could leverage this vulnerability to access other user's data. Exploitation of this issue does not require user interaction.
Published: 2023-08-09T07:41:46.279Z
Updated: 2025-02-27T21:05:58.591Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-38208 |
vulnerable | 2026-06-08 06:08:17.280287 |
Validate Your Inputs | Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') (CWE-78)
CRITICAL (9.1)
Adobe Commerce versions 2.4.6-p1 (and earlier), 2.4.5-p3 (and earlier) and 2.4.4-p4 (and earlier) are affected by an Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability that could lead to arbitrary code execution by an admin-privilege authenticated attacker. Exploitation of this issue does not require user interaction.
Published: 2023-08-09T07:41:47.125Z
Updated: 2025-02-27T21:05:52.079Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-29297 |
vulnerable | 2026-06-08 06:02:39.339479 |
Admin-to-admin stored XSS via cache poisoning
CRITICAL (9.1)
Adobe Commerce versions 2.4.6 (and earlier), 2.4.5-p2 (and earlier) and 2.4.4-p3 (and earlier) are affected by a Improper Neutralization of Special Elements Used in a Template Engine vulnerability that could lead to arbitrary code execution by an admin-privilege authenticated attacker. Exploitation of this issue does not require user interaction.
Published: 2023-06-15T00:00:00.000Z
Updated: 2025-03-05T18:56:15.812Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-29296 |
vulnerable | 2026-06-08 06:02:39.336803 |
[Cloud] Customer suspects IDOR vulnerability
MEDIUM (4.3)
Adobe Commerce versions 2.4.6 (and earlier), 2.4.5-p2 (and earlier) and 2.4.4-p3 (and earlier) are affected by an Incorrect Authorization vulnerability that could result in a security feature bypass. A low-privileged attacker could leverage this vulnerability to modify a minor functionality of another user's data. Exploitation of this issue does not require user interaction.
Published: 2023-06-15T00:00:00.000Z
Updated: 2025-03-05T18:56:22.539Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-29295 |
vulnerable | 2026-06-08 06:02:39.334227 |
Insecure Direct Object Reference (IDOR) in Create Quote Function
MEDIUM (4.3)
Adobe Commerce versions 2.4.6 (and earlier), 2.4.5-p2 (and earlier) and 2.4.4-p3 (and earlier) are affected by an Incorrect Authorization vulnerability that could result in a security feature bypass. A low-privileged attacker could leverage this vulnerability to bypass a minor functionality. Exploitation of this issue does not require user interaction.
Published: 2023-06-15T00:00:00.000Z
Updated: 2025-03-05T18:56:28.900Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-29294 |
vulnerable | 2026-06-08 06:02:39.331116 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-29292 |
vulnerable | 2026-06-08 06:02:39.325374 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-29291 |
vulnerable | 2026-06-08 06:02:39.322803 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-29290 |
vulnerable | 2026-06-08 06:02:39.320416 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-29289 |
vulnerable | 2026-06-08 06:02:39.311113 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-29287 |
vulnerable | 2026-06-08 06:02:39.280017 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-22251 |
vulnerable | 2026-06-08 05:54:23.292359 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-22250 |
vulnerable | 2026-06-08 05:54:23.291811 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-22249 |
vulnerable | 2026-06-08 05:54:23.291214 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-22248 |
vulnerable | 2026-06-08 05:54:23.266047 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-22247 |
vulnerable | 2026-06-08 05:54:23.256715 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-35698 |
vulnerable | 2026-06-08 05:46:05.154713 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-35692 |
vulnerable | 2026-06-08 05:46:05.141791 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-35689 |
vulnerable | 2026-06-08 05:46:05.118538 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-34259 |
vulnerable | 2026-06-08 05:44:52.497921 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-34258 |
vulnerable | 2026-06-08 05:44:52.497101 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-34257 |
vulnerable | 2026-06-08 05:44:52.496365 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-34256 |
vulnerable | 2026-06-08 05:44:52.495318 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-34255 |
vulnerable | 2026-06-08 05:44:52.494269 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-34254 |
vulnerable | 2026-06-08 05:44:52.493474 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-34253 |
vulnerable | 2026-06-08 05:44:52.479732 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-24086 |
vulnerable | 2026-06-08 05:40:59.581004 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-39864 |
vulnerable | 2026-06-08 05:33:50.474358 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-36044 |
vulnerable | 2026-06-08 05:32:49.640781 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-36043 |
vulnerable | 2026-06-08 05:32:49.640301 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-36042 |
vulnerable | 2026-06-08 05:32:49.639753 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-36041 |
vulnerable | 2026-06-08 05:32:49.639156 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-36040 |
vulnerable | 2026-06-08 05:32:49.638529 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-36039 |
vulnerable | 2026-06-08 05:32:49.637814 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-36038 |
vulnerable | 2026-06-08 05:32:49.637214 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-36037 |
vulnerable | 2026-06-08 05:32:49.636804 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-36035 |
vulnerable | 2026-06-08 05:32:49.635215 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-36034 |
vulnerable | 2026-06-08 05:32:49.634702 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-36033 |
vulnerable | 2026-06-08 05:32:49.633956 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-36032 |
vulnerable | 2026-06-08 05:32:49.633283 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-36031 |
vulnerable | 2026-06-08 05:32:49.632584 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-36030 |
vulnerable | 2026-06-08 05:32:49.631695 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-36029 |
vulnerable | 2026-06-08 05:32:49.631037 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-36028 |
vulnerable | 2026-06-08 05:32:49.630323 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-36027 |
vulnerable | 2026-06-08 05:32:49.629778 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-36026 |
vulnerable | 2026-06-08 05:32:49.629244 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-36025 |
vulnerable | 2026-06-08 05:32:49.628273 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-36024 |
vulnerable | 2026-06-08 05:32:49.627520 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-36022 |
vulnerable | 2026-06-08 05:32:49.626020 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-36020 |
vulnerable | 2026-06-08 05:32:49.614677 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-36012 |
vulnerable | 2026-06-08 05:32:49.603654 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-28585 |
vulnerable | 2026-06-08 05:31:24.604723 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-28584 |
vulnerable | 2026-06-08 05:31:24.603798 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-28583 |
vulnerable | 2026-06-08 05:31:24.595074 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-28567 |
vulnerable | 2026-06-08 05:31:24.572998 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-28566 |
vulnerable | 2026-06-08 05:31:24.572416 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-28563 |
vulnerable | 2026-06-08 05:31:24.570476 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-28556 |
vulnerable | 2026-06-08 05:31:24.563692 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-21064 |
vulnerable | 2026-06-08 05:29:11.257042 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-21032 |
vulnerable | 2026-06-08 05:29:11.213169 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-21030 |
vulnerable | 2026-06-08 05:29:11.197243 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-21029 |
vulnerable | 2026-06-08 05:29:11.196630 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-21027 |
vulnerable | 2026-06-08 05:29:11.195306 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-21026 |
vulnerable | 2026-06-08 05:29:11.194698 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-21025 |
vulnerable | 2026-06-08 05:29:11.194078 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-21024 |
vulnerable | 2026-06-08 05:29:11.193543 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-21023 |
vulnerable | 2026-06-08 05:29:11.192777 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-21022 |
vulnerable | 2026-06-08 05:29:11.192048 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-21020 |
vulnerable | 2026-06-08 05:29:11.190593 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-21019 |
vulnerable | 2026-06-08 05:29:11.189955 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-21018 |
vulnerable | 2026-06-08 05:29:11.189273 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-21016 |
vulnerable | 2026-06-08 05:29:11.181320 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-21015 |
vulnerable | 2026-06-08 05:29:11.180662 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-21014 |
vulnerable | 2026-06-08 05:29:11.173132 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-21013 |
vulnerable | 2026-06-08 05:29:11.170674 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-21012 |
vulnerable | 2026-06-08 05:29:11.163851 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-24408 |
vulnerable | 2026-06-08 05:22:33.018958 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-24407 |
vulnerable | 2026-06-08 05:22:33.017542 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-24406 |
vulnerable | 2026-06-08 05:22:33.016987 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-24405 |
vulnerable | 2026-06-08 05:22:33.015965 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-24404 |
vulnerable | 2026-06-08 05:22:33.015208 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-24403 |
vulnerable | 2026-06-08 05:22:33.014337 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-24402 |
vulnerable | 2026-06-08 05:22:33.013491 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-24401 |
vulnerable | 2026-06-08 05:22:33.009925 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-24400 |
vulnerable | 2026-06-08 05:22:33.000020 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.