Adobe Adobe Commerce 2.4.2 Patch 1
Approved changes feed: RSS · Atom
cpe:2.3:a:adobe:adobe_commerce:2.4.2:p1:*:*:*:*:*:*
part: a version: 2.4.2 update: p1
| Vendor | Adobe (fb293c1b-cab3-5565-9184-186e4ece530b) |
|---|---|
| Product | Adobe Commerce (f5f83bdb-1d3a-52f6-84ac-b9aacb9b3b7d) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from NVD CPE 2.0 feed |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2021-36044 |
vulnerable | 2026-06-08 05:32:49.640924 |
Magento Commerce GraphQL Improper Input Validation Could Lead To Denial Of Service
HIGH (7.5)
Magento Commerce versions 2.4.2 (and earlier), 2.4.2-p1 (and earlier) and 2.3.7 (and earlier) are affected by an improper input validation vulnerability. An unauthenticated attacker could abuse this vulnerability to cause a server-side denial-of-service using a GraphQL field.
Published: 2021-09-01T14:32:31.895Z
Updated: 2024-09-16T19:57:02.192Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-36043 |
vulnerable | 2026-06-08 05:32:49.640356 |
Magento Commerce Authenticated Blind SSRF Could Lead To Remote Code Execution
HIGH (8)
Magento Commerce versions 2.4.2 (and earlier), 2.4.2-p1 (and earlier) and 2.3.7 (and earlier) are affected by a blind SSRF vulnerability in the bundled dotmailer extension. An attacker with admin privileges could abuse this to achieve remote code execution should Redis be enabled.
Published: 2021-09-01T14:31:38.272Z
Updated: 2024-09-16T20:36:46.572Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-36042 |
vulnerable | 2026-06-08 05:32:49.639815 |
Magento Commerce API File Option Upload Extension Improper Input Validation Vulnerability Could Lead To Remote Code Execution
CRITICAL (9.1)
Magento Commerce versions 2.4.2 (and earlier), 2.4.2-p1 (and earlier) and 2.3.7 (and earlier) are affected by an improper input validation vulnerability in the API File Option Upload Extension. An attacker with Admin privileges can achieve unrestricted file upload which can result in remote code execution.
Published: 2021-09-01T14:31:24.882Z
Updated: 2024-09-17T01:25:59.655Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-36041 |
vulnerable | 2026-06-08 05:32:49.639207 |
Magento Commerce Improper Input Validation Could Lead To Remote Code Execution
CRITICAL (9.1)
Magento Commerce versions 2.4.2 (and earlier), 2.4.2-p1 (and earlier) and 2.3.7 (and earlier) are affected by an improper input validation vulnerability. An attacker with admin privileges could upload a specially crafted file in the 'pub/media` directory could lead to remote code execution.
Published: 2021-09-01T14:31:14.142Z
Updated: 2024-09-17T04:04:02.207Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-36040 |
vulnerable | 2026-06-08 05:32:49.638579 |
Magento Commerce Improper Input Validation Could Lead To Remote Code Execution
CRITICAL (9.1)
Magento Commerce versions 2.4.2 (and earlier), 2.4.2-p1 (and earlier) and 2.3.7 (and earlier) are affected by an improper input validation vulnerability. An attacker with admin privileges can upload a specially crafted file to bypass file extension restrictions and could lead to remote code execution.
Published: 2021-09-01T14:31:07.265Z
Updated: 2024-09-17T01:35:35.057Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-36039 |
vulnerable | 2026-06-08 05:32:49.637866 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-36038 |
vulnerable | 2026-06-08 05:32:49.637264 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-36037 |
vulnerable | 2026-06-08 05:32:49.636859 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-36035 |
vulnerable | 2026-06-08 05:32:49.635274 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-36034 |
vulnerable | 2026-06-08 05:32:49.634845 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-36033 |
vulnerable | 2026-06-08 05:32:49.634094 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-36032 |
vulnerable | 2026-06-08 05:32:49.633414 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-36031 |
vulnerable | 2026-06-08 05:32:49.632637 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-36030 |
vulnerable | 2026-06-08 05:32:49.631838 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-36029 |
vulnerable | 2026-06-08 05:32:49.631096 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-36028 |
vulnerable | 2026-06-08 05:32:49.630460 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-36027 |
vulnerable | 2026-06-08 05:32:49.629828 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-36026 |
vulnerable | 2026-06-08 05:32:49.629297 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-36025 |
vulnerable | 2026-06-08 05:32:49.628504 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-36024 |
vulnerable | 2026-06-08 05:32:49.627661 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-36022 |
vulnerable | 2026-06-08 05:32:49.626092 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-36020 |
vulnerable | 2026-06-08 05:32:49.614840 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-36012 |
vulnerable | 2026-06-08 05:32:49.605124 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.