Adobe Commerce 2.3.7 Patch 1
Approved changes feed: RSS · Atom
cpe:2.3:a:adobe:commerce:2.3.7:p1:*:*:*:*:*:*
part: a version: 2.3.7 update: p1
| Vendor | Adobe (fb293c1b-cab3-5565-9184-186e4ece530b) |
|---|---|
| Product | Commerce (86532610-8ce1-5faa-8e1c-d91f271a0546) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from NVD CPE 2.0 feed |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2024-45148 |
vulnerable | 2026-06-08 06:45:55.424128 |
Adobe Commerce | Improper Authentication (CWE-287)
HIGH (8.8)
Adobe Commerce versions 2.4.7-p2, 2.4.6-p7, 2.4.5-p9, 2.4.4-p10 and earlier are affected by an Improper Authentication vulnerability that could result in a security feature bypass. A low-privileged attacker could leverage this vulnerability to gain unauthorized access without proper credentials. Exploitation of this issue does not require user interaction.
Published: 2024-10-10T09:57:53.566Z
Updated: 2024-10-10T14:04:54.106Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-45135 |
vulnerable | 2026-06-08 06:45:55.063626 |
Adobe Commerce | Improper Access Control (CWE-284)
LOW (2.7)
Adobe Commerce versions 2.4.7-p2, 2.4.6-p7, 2.4.5-p9, 2.4.4-p10 and earlier are affected by an Improper Access Control vulnerability that could result in a Security feature bypass. An admin attacker could leverage this vulnerability to bypass security measures and have a low impact on integrity. Exploitation of this issue does not require user interaction.
Published: 2024-10-10T09:57:57.455Z
Updated: 2024-10-10T14:00:45.112Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-45134 |
vulnerable | 2026-06-08 06:45:55.049543 |
Adobe Commerce | Information Exposure (CWE-200)
LOW (2.7)
Adobe Commerce versions 2.4.7-p2, 2.4.6-p7, 2.4.5-p9, 2.4.4-p10 and earlier are affected by an Information Exposure vulnerability that could result in a security feature bypass. An admin attacker could leverage this vulnerability to have a low impact on confidentiality which may aid in further attacks. Exploitation of this issue does not require user interaction.
Published: 2024-10-10T09:57:52.772Z
Updated: 2024-10-10T14:05:32.033Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-45133 |
vulnerable | 2026-06-08 06:45:55.042497 |
Adobe Commerce | Improper Access Control (CWE-284)
LOW (2.7)
Adobe Commerce versions 2.4.7-p2, 2.4.6-p7, 2.4.5-p9, 2.4.4-p10 and earlier are affected by an Information Exposure vulnerability that could result in a security feature bypass. An admin attacker could leverage this vulnerability to have a low impact on confidentiality which may aid in further attacks. Exploitation of this issue does not require user interaction.
Published: 2024-10-10T09:58:04.630Z
Updated: 2024-10-10T14:19:56.423Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-45132 |
vulnerable | 2026-06-08 06:45:55.029324 |
Adobe Commerce | Incorrect Authorization (CWE-863)
MEDIUM (6.5)
Adobe Commerce versions 2.4.7-p2, 2.4.6-p7, 2.4.5-p9, 2.4.4-p10 and earlier are affected by an Improper Authorization vulnerability that could result in Privilege escalation. A low-privileged attacker could leverage this vulnerability to bypass security measures and affect confidentiality. Exploitation of this issue does not require user interaction.
Published: 2024-10-10T09:57:55.112Z
Updated: 2024-10-14T10:37:42.897Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-45131 |
vulnerable | 2026-06-08 06:45:55.022489 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-45130 |
vulnerable | 2026-06-08 06:45:55.009523 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-45129 |
vulnerable | 2026-06-08 06:45:55.002653 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-45128 |
vulnerable | 2026-06-08 06:45:54.989176 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-45127 |
vulnerable | 2026-06-08 06:45:54.982946 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-45125 |
vulnerable | 2026-06-08 06:45:54.973105 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-45124 |
vulnerable | 2026-06-08 06:45:54.965700 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-45123 |
vulnerable | 2026-06-08 06:45:54.958620 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-45122 |
vulnerable | 2026-06-08 06:45:54.947160 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-45121 |
vulnerable | 2026-06-08 06:45:54.934998 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-45118 |
vulnerable | 2026-06-08 06:45:54.914361 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-45117 |
vulnerable | 2026-06-08 06:45:54.907829 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-45116 |
vulnerable | 2026-06-08 06:45:54.896665 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-45115 |
vulnerable | 2026-06-08 06:45:54.810342 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-34111 |
vulnerable | 2026-06-08 06:37:32.851619 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-34110 |
vulnerable | 2026-06-08 06:37:32.848197 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-34109 |
vulnerable | 2026-06-08 06:37:32.843793 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-34108 |
vulnerable | 2026-06-08 06:37:32.839420 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-34107 |
vulnerable | 2026-06-08 06:37:32.792646 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-34106 |
vulnerable | 2026-06-08 06:37:32.788653 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-34105 |
vulnerable | 2026-06-08 06:37:32.784788 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-34104 |
vulnerable | 2026-06-08 06:37:32.780229 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-34103 |
vulnerable | 2026-06-08 06:37:32.757073 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-20759 |
vulnerable | 2026-06-08 06:27:30.537860 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-20758 |
vulnerable | 2026-06-08 06:27:30.489746 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-38251 |
vulnerable | 2026-06-08 06:08:17.424369 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-38250 |
vulnerable | 2026-06-08 06:08:17.413170 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-38249 |
vulnerable | 2026-06-08 06:08:17.409590 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-38221 |
vulnerable | 2026-06-08 06:08:17.359015 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-38220 |
vulnerable | 2026-06-08 06:08:17.349753 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-38219 |
vulnerable | 2026-06-08 06:08:17.346328 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-38218 |
vulnerable | 2026-06-08 06:08:17.305618 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-29297 |
vulnerable | 2026-06-08 06:02:39.339620 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-29296 |
vulnerable | 2026-06-08 06:02:39.336963 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-29295 |
vulnerable | 2026-06-08 06:02:39.334377 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-29294 |
vulnerable | 2026-06-08 06:02:39.331304 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-29293 |
vulnerable | 2026-06-08 06:02:39.328211 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-29292 |
vulnerable | 2026-06-08 06:02:39.325619 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-29291 |
vulnerable | 2026-06-08 06:02:39.322954 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-29290 |
vulnerable | 2026-06-08 06:02:39.320651 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-29289 |
vulnerable | 2026-06-08 06:02:39.311178 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-29288 |
vulnerable | 2026-06-08 06:02:39.308567 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-29287 |
vulnerable | 2026-06-08 06:02:39.282055 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-26367 |
vulnerable | 2026-06-08 05:57:39.532007 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-26366 |
vulnerable | 2026-06-08 05:57:39.489146 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-22248 |
vulnerable | 2026-06-08 05:54:23.267868 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-42344 |
vulnerable | 2026-06-08 05:49:29.804616 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-34259 |
vulnerable | 2026-06-08 05:44:52.498023 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-34258 |
vulnerable | 2026-06-08 05:44:52.497172 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-34257 |
vulnerable | 2026-06-08 05:44:52.496435 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-34256 |
vulnerable | 2026-06-08 05:44:52.495392 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-34255 |
vulnerable | 2026-06-08 05:44:52.494349 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-34254 |
vulnerable | 2026-06-08 05:44:52.493560 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-34253 |
vulnerable | 2026-06-08 05:44:52.482317 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-24093 |
vulnerable | 2026-06-08 05:40:59.606240 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-24086 |
vulnerable | 2026-06-08 05:40:59.582732 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-39864 |
vulnerable | 2026-06-08 05:33:50.475866 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.