Adobe Commerce B2B vulnerabilities
125 known vulnerabilities affecting adobe/commerce_b2b.
Total CVEs
125
CISA KEV
1
actively exploited
Public exploits
1
Exploited in wild
1
Severity breakdown
CRITICAL7HIGH42MEDIUM63LOW13
Vulnerabilities
Page 7 of 7
CVE-2025-49549P4LOWCVSS 2.7fixed in 1.3.3v1.3.3+4 more2025-06-25
CVE-2025-49549 [LOW] CWE-863 CVE-2025-49549: Adobe Commerce versions 2.4.8, 2.4.7-p5, 2.4.6-p10, 2.4.5-p12, 2.4.4-p13 and earlier are affected by
Adobe Commerce versions 2.4.8, 2.4.7-p5, 2.4.6-p10, 2.4.5-p12, 2.4.4-p13 and earlier are affected by an Incorrect Authorization vulnerability that could result in a Security feature bypass. A high-privileged attacker could leverage this vulnerability to bypass security measures and gain limited unauthorized access. Exploitation of this issue does not r
nvd
CVE-2024-45149P4LOWCVSS 2.7v1.3.3v1.3.4+2 more2024-10-10
CVE-2024-45149 [LOW] CWE-284 CVE-2024-45149: Adobe Commerce versions 2.4.7-p2, 2.4.6-p7, 2.4.5-p9, 2.4.4-p10 and earlier are affected by an Impro
Adobe Commerce versions 2.4.7-p2, 2.4.6-p7, 2.4.5-p9, 2.4.4-p10 and earlier are affected by an Improper Access Control vulnerability that could result in a Security feature bypass. A high-privileged attacker could leverage this vulnerability to bypass security measures and have a low impact on confidentiality. Exploitation of this issue does not requir
nvd
CVE-2024-45134P4LOWCVSS 2.7v1.3.3v1.3.4+2 more2024-10-10
CVE-2024-45134 [LOW] CWE-200 CVE-2024-45134: Adobe Commerce versions 2.4.7-p2, 2.4.6-p7, 2.4.5-p9, 2.4.4-p10 and earlier are affected by an Infor
Adobe Commerce versions 2.4.7-p2, 2.4.6-p7, 2.4.5-p9, 2.4.4-p10 and earlier are affected by an Information Exposure vulnerability that could result in a security feature bypass. An admin attacker could leverage this vulnerability to have a low impact on confidentiality which may aid in further attacks. Exploitation of this issue does not require user i
nvd
CVE-2024-45133P4LOWCVSS 2.7v1.3.3v1.3.4+2 more2024-10-10
CVE-2024-45133 [LOW] CWE-284 CVE-2024-45133: Adobe Commerce versions 2.4.7-p2, 2.4.6-p7, 2.4.5-p9, 2.4.4-p10 and earlier are affected by an Infor
Adobe Commerce versions 2.4.7-p2, 2.4.6-p7, 2.4.5-p9, 2.4.4-p10 and earlier are affected by an Information Exposure vulnerability that could result in a security feature bypass. An admin attacker could leverage this vulnerability to have a low impact on confidentiality which may aid in further attacks. Exploitation of this issue does not require user i
nvd
CVE-2025-27192P4LOWCVSS 2.7fixed in 1.3.3v1.3.3+4 more2025-04-08
CVE-2025-27192 [LOW] CWE-522 CVE-2025-27192: Adobe Commerce versions 2.4.7-p4, 2.4.6-p9, 2.4.5-p11, 2.4.4-p12, 2.4.8-beta2 and earlier are affect
Adobe Commerce versions 2.4.7-p4, 2.4.6-p9, 2.4.5-p11, 2.4.4-p12, 2.4.8-beta2 and earlier are affected by an Insufficiently Protected Credentials vulnerability that could lead to a security feature bypass. A high privileged attacker could exploit this vulnerability to gain unauthorized access to protected resources by obtaining sensitive credential inf
nvd
← Previous7 / 7