Adobe Magento vulnerabilities
204 known vulnerabilities affecting adobe/magento.
Total CVEs
204
CISA KEV
3
actively exploited
Public exploits
3
Exploited in wild
3
Severity breakdown
CRITICAL26HIGH65MEDIUM99LOW14
Vulnerabilities
Page 11 of 11
CVE-2024-45149P4LOWCVSS 2.7v2.4.4v2.4.5+2 more2024-10-10
CVE-2024-45149 [LOW] CWE-284 CVE-2024-45149: Adobe Commerce versions 2.4.7-p2, 2.4.6-p7, 2.4.5-p9, 2.4.4-p10 and earlier are affected by an Impro
Adobe Commerce versions 2.4.7-p2, 2.4.6-p7, 2.4.5-p9, 2.4.4-p10 and earlier are affected by an Improper Access Control vulnerability that could result in a Security feature bypass. A high-privileged attacker could leverage this vulnerability to bypass security measures and have a low impact on confidentiality. Exploitation of this issue does not requir
nvd
CVE-2024-45134P4LOWCVSS 2.7v2.4.3v2.4.4+3 more2024-10-10
CVE-2024-45134 [LOW] CWE-200 CVE-2024-45134: Adobe Commerce versions 2.4.7-p2, 2.4.6-p7, 2.4.5-p9, 2.4.4-p10 and earlier are affected by an Infor
Adobe Commerce versions 2.4.7-p2, 2.4.6-p7, 2.4.5-p9, 2.4.4-p10 and earlier are affected by an Information Exposure vulnerability that could result in a security feature bypass. An admin attacker could leverage this vulnerability to have a low impact on confidentiality which may aid in further attacks. Exploitation of this issue does not require user i
nvd
CVE-2024-45133P4LOWCVSS 2.7v2.4.3v2.4.4+3 more2024-10-10
CVE-2024-45133 [LOW] CWE-284 CVE-2024-45133: Adobe Commerce versions 2.4.7-p2, 2.4.6-p7, 2.4.5-p9, 2.4.4-p10 and earlier are affected by an Infor
Adobe Commerce versions 2.4.7-p2, 2.4.6-p7, 2.4.5-p9, 2.4.4-p10 and earlier are affected by an Information Exposure vulnerability that could result in a security feature bypass. An admin attacker could leverage this vulnerability to have a low impact on confidentiality which may aid in further attacks. Exploitation of this issue does not require user i
nvd
CVE-2025-27192P4LOWCVSS 2.7fixed in 2.4.4v2.4.4+4 more2025-04-08
CVE-2025-27192 [LOW] CWE-522 CVE-2025-27192: Adobe Commerce versions 2.4.7-p4, 2.4.6-p9, 2.4.5-p11, 2.4.4-p12, 2.4.8-beta2 and earlier are affect
Adobe Commerce versions 2.4.7-p4, 2.4.6-p9, 2.4.5-p11, 2.4.4-p12, 2.4.8-beta2 and earlier are affected by an Insufficiently Protected Credentials vulnerability that could lead to a security feature bypass. A high privileged attacker could exploit this vulnerability to gain unauthorized access to protected resources by obtaining sensitive credential inf
nvd
← Previous11 / 11