Approved changes feed: RSS · Atom

cpe:2.3:a:adobe:commerce:2.3.7:-:*:*:*:*:*:*

part: a version: 2.3.7 update: -

VendorAdobe (fb293c1b-cab3-5565-9184-186e4ece530b)
ProductCommerce (86532610-8ce1-5faa-8e1c-d91f271a0546)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2024-45148 vulnerable 2026-06-08 06:45:55.424105 Adobe Commerce | Improper Authentication (CWE-287)
HIGH (8.8)
Adobe Commerce versions 2.4.7-p2, 2.4.6-p7, 2.4.5-p9, 2.4.4-p10 and earlier are affected by an Improper Authentication vulnerability that could result in a security feature bypass. A low-privileged attacker could leverage this vulnerability to gain unauthorized access without proper credentials. Exploitation of this issue does not require user interaction.
Published: 2024-10-10T09:57:53.566Z
Updated: 2024-10-10T14:04:54.106Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-45135 vulnerable 2026-06-08 06:45:55.063482 Adobe Commerce | Improper Access Control (CWE-284)
LOW (2.7)
Adobe Commerce versions 2.4.7-p2, 2.4.6-p7, 2.4.5-p9, 2.4.4-p10 and earlier are affected by an Improper Access Control vulnerability that could result in a Security feature bypass. An admin attacker could leverage this vulnerability to bypass security measures and have a low impact on integrity. Exploitation of this issue does not require user interaction.
Published: 2024-10-10T09:57:57.455Z
Updated: 2024-10-10T14:00:45.112Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-45134 vulnerable 2026-06-08 06:45:55.049521 Adobe Commerce | Information Exposure (CWE-200)
LOW (2.7)
Adobe Commerce versions 2.4.7-p2, 2.4.6-p7, 2.4.5-p9, 2.4.4-p10 and earlier are affected by an Information Exposure vulnerability that could result in a security feature bypass. An admin attacker could leverage this vulnerability to have a low impact on confidentiality which may aid in further attacks. Exploitation of this issue does not require user interaction.
Published: 2024-10-10T09:57:52.772Z
Updated: 2024-10-10T14:05:32.033Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-45133 vulnerable 2026-06-08 06:45:55.042476 Adobe Commerce | Improper Access Control (CWE-284)
LOW (2.7)
Adobe Commerce versions 2.4.7-p2, 2.4.6-p7, 2.4.5-p9, 2.4.4-p10 and earlier are affected by an Information Exposure vulnerability that could result in a security feature bypass. An admin attacker could leverage this vulnerability to have a low impact on confidentiality which may aid in further attacks. Exploitation of this issue does not require user interaction.
Published: 2024-10-10T09:58:04.630Z
Updated: 2024-10-10T14:19:56.423Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-45132 vulnerable 2026-06-08 06:45:55.029303 Adobe Commerce | Incorrect Authorization (CWE-863)
MEDIUM (6.5)
Adobe Commerce versions 2.4.7-p2, 2.4.6-p7, 2.4.5-p9, 2.4.4-p10 and earlier are affected by an Improper Authorization vulnerability that could result in Privilege escalation. A low-privileged attacker could leverage this vulnerability to bypass security measures and affect confidentiality. Exploitation of this issue does not require user interaction.
Published: 2024-10-10T09:57:55.112Z
Updated: 2024-10-14T10:37:42.897Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-45131 vulnerable 2026-06-08 06:45:55.022393 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-45130 vulnerable 2026-06-08 06:45:55.009500 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-45129 vulnerable 2026-06-08 06:45:55.002630 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-45128 vulnerable 2026-06-08 06:45:54.989150 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-45127 vulnerable 2026-06-08 06:45:54.982921 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-45125 vulnerable 2026-06-08 06:45:54.973084 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-45124 vulnerable 2026-06-08 06:45:54.965681 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-45123 vulnerable 2026-06-08 06:45:54.958594 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-45122 vulnerable 2026-06-08 06:45:54.947042 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-45121 vulnerable 2026-06-08 06:45:54.934977 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-45118 vulnerable 2026-06-08 06:45:54.914340 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-45117 vulnerable 2026-06-08 06:45:54.907801 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-45116 vulnerable 2026-06-08 06:45:54.896640 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-45115 vulnerable 2026-06-08 06:45:54.809611 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-34111 vulnerable 2026-06-08 06:37:32.851597 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-34110 vulnerable 2026-06-08 06:37:32.848097 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-34109 vulnerable 2026-06-08 06:37:32.843673 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-34108 vulnerable 2026-06-08 06:37:32.839395 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-34107 vulnerable 2026-06-08 06:37:32.792608 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-34106 vulnerable 2026-06-08 06:37:32.788612 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-34105 vulnerable 2026-06-08 06:37:32.784765 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-34104 vulnerable 2026-06-08 06:37:32.780205 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-34103 vulnerable 2026-06-08 06:37:32.756126 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-20759 vulnerable 2026-06-08 06:27:30.537837 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-20758 vulnerable 2026-06-08 06:27:30.488783 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-38251 vulnerable 2026-06-08 06:08:17.424328 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-38250 vulnerable 2026-06-08 06:08:17.413038 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-38249 vulnerable 2026-06-08 06:08:17.409563 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-38221 vulnerable 2026-06-08 06:08:17.358870 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-38220 vulnerable 2026-06-08 06:08:17.349718 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-38219 vulnerable 2026-06-08 06:08:17.346287 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-38218 vulnerable 2026-06-08 06:08:17.304567 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-29297 vulnerable 2026-06-08 06:02:39.339511 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-29296 vulnerable 2026-06-08 06:02:39.336937 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-29295 vulnerable 2026-06-08 06:02:39.334354 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-29294 vulnerable 2026-06-08 06:02:39.331162 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-29293 vulnerable 2026-06-08 06:02:39.328185 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-29292 vulnerable 2026-06-08 06:02:39.325513 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-29291 vulnerable 2026-06-08 06:02:39.322930 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-29290 vulnerable 2026-06-08 06:02:39.320545 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-29289 vulnerable 2026-06-08 06:02:39.311148 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-29288 vulnerable 2026-06-08 06:02:39.308538 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-29287 vulnerable 2026-06-08 06:02:39.280787 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-26367 vulnerable 2026-06-08 05:57:39.531980 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-26366 vulnerable 2026-06-08 05:57:39.488207 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-22248 vulnerable 2026-06-08 05:54:23.266866 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-42344 vulnerable 2026-06-08 05:49:29.803874 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-34259 vulnerable 2026-06-08 05:44:52.498003 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-34258 vulnerable 2026-06-08 05:44:52.497149 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-34257 vulnerable 2026-06-08 05:44:52.496417 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-34256 vulnerable 2026-06-08 05:44:52.495370 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-34255 vulnerable 2026-06-08 05:44:52.494329 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-34254 vulnerable 2026-06-08 05:44:52.493539 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-34253 vulnerable 2026-06-08 05:44:52.481326 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.