Adobe Magento Open Source 2.4.4 Patch 1
Approved changes feed: RSS · Atom
cpe:2.3:a:adobe:magento_open_source:2.4.4:p1:*:*:*:*:*:*
part: a version: 2.4.4 update: p1
| Vendor | Adobe (fb293c1b-cab3-5565-9184-186e4ece530b) |
|---|---|
| Product | Magento Open Source (f69864c3-a92e-5964-a65f-53c4116f74db) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from NVD CPE 2.0 feed |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:github/magento/magento2 |
purl2cpe | 2026-06-01 10:14:22.940668 |
pkg:sourceforge/magento-2.mirror |
purl2cpe | 2026-06-01 10:14:22.940669 |
pkg:sourceforge/magento-open-source.mirror |
purl2cpe | 2026-06-01 10:14:22.940671 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2023-22251 |
vulnerable | 2026-06-08 05:54:23.292531 |
Adobe Commerce Incorrect Authorization Security feature bypass
MEDIUM (4.3)
Adobe Commerce versions 2.4.4-p2 (and earlier) and 2.4.5-p1 (and earlier) are affected by an Incorrect Authorization vulnerability. A low-privileged authenticated attacker could leverage this vulnerability to achieve minor information disclosure.
Published: 2023-03-27T00:00:00.000Z
Updated: 2025-03-05T19:21:51.464Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-22250 |
vulnerable | 2026-06-08 05:54:23.291988 |
Adobe Commerce Improper Access Control Security feature bypass
MEDIUM (5.3)
Adobe Commerce versions 2.4.4-p2 (and earlier) and 2.4.5-p1 (and earlier) are affected by an Improper Access Control vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to impact the availability of a user's minor feature. Exploitation of this issue does not require user interaction.
Published: 2023-03-27T00:00:00.000Z
Updated: 2025-03-05T19:21:57.851Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-22249 |
vulnerable | 2026-06-08 05:54:23.291409 |
Adobe Commerce Stored XSS Arbitrary code execution
MEDIUM (4.8)
Adobe Commerce versions 2.4.4-p2 (and earlier) and 2.4.5-p1 (and earlier) are affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a high-privileged attacker to inject malicious scripts into vulnerable form fields. Malicious JavaScript may be executed in a victim’s browser when they browse to the page containing the vulnerable field.
Published: 2023-03-27T00:00:00.000Z
Updated: 2025-03-05T19:22:05.107Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-22247 |
vulnerable | 2026-06-08 05:54:23.263727 |
Adobe Commerce XML Injection Arbitrary file system read
HIGH (7.5)
Adobe Commerce versions 2.4.4-p2 (and earlier) and 2.4.5-p1 (and earlier) are affected by an XML Injection vulnerability that could lead to arbitrary file system read. An unauthenticated attacker can force the application to make arbitrary requests via injection of arbitrary URLs. Exploitation of this issue does not require user interaction.
Published: 2023-03-27T00:00:00.000Z
Updated: 2025-03-05T19:22:13.312Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-35698 |
vulnerable | 2026-06-08 05:46:05.155068 |
Adobe Commerce Stored XSS Arbitrary code execution
CRITICAL (10)
Adobe Commerce versions 2.4.4-p1 (and earlier) and 2.4.5 (and earlier) are affected by a Stored Cross-site Scripting vulnerability. Exploitation of this issue does not require user interaction and could result in a post-authentication arbitrary code execution.
Published: 2022-10-14T19:48:10.464Z
Updated: 2025-04-23T16:47:15.959Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-35689 |
vulnerable | 2026-06-08 05:46:05.123756 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.