High - CVE-2024-45117 - Adobe Commerce versions 2.4.7-p2, 2.4.6-p7,...
Adobe Commerce versions 2.4.7-p2, 2.4.6-p7, 2.4.5-p9, 2.4.4-p10 and earlier are affected by an Improper Input Validation vulnerability that could lead to arbitrary file system read. An admin...
Medium - CVE-2024-45118 - Adobe Commerce versions 2.4.7-p2, 2.4.6-p7,...
Adobe Commerce versions 2.4.7-p2, 2.4.6-p7, 2.4.5-p9, 2.4.4-p10 and earlier are affected by an Improper Access Control vulnerability that could result in a Security feature bypass. A low-privileged...
Medium - CVE-2024-45119 - Adobe Commerce versions 2.4.7-p2, 2.4.6-p7,...
Adobe Commerce versions 2.4.7-p2, 2.4.6-p7, 2.4.5-p9, 2.4.4-p10 and earlier are affected by a Server-Side Request Forgery (SSRF) vulnerability that could lead to arbitrary file system read. A...
Adobe Commerce versions 2.4.7-p2, 2.4.6-p7, 2.4.5-p9, 2.4.4-p10 and earlier are affected by a Time-of-check Time-of-use (TOCTOU) Race Condition vulnerability that could lead to a security feature...
Medium - CVE-2024-45121 - Adobe Commerce versions 2.4.7-p2, 2.4.6-p7,...
Adobe Commerce versions 2.4.7-p2, 2.4.6-p7, 2.4.5-p9, 2.4.4-p10 and earlier are affected by an Improper Access Control vulnerability that could result in a Security feature bypass. A low-privileged...
Medium - CVE-2024-45122 - Adobe Commerce versions 2.4.7-p2, 2.4.6-p7,...
Adobe Commerce versions 2.4.7-p2, 2.4.6-p7, 2.4.5-p9, 2.4.4-p10 and earlier are affected by an Improper Access Control vulnerability that could result in a Security feature bypass. A low-privileged...
Medium - CVE-2024-45123 - Adobe Commerce versions 2.4.7-p2, 2.4.6-p7,...
Adobe Commerce versions 2.4.7-p2, 2.4.6-p7, 2.4.5-p9, 2.4.4-p10 and earlier are affected by a reflected Cross-Site Scripting (XSS) vulnerability. If an attacker is able to convince a victim to...
Medium - CVE-2024-45124 - Adobe Commerce versions 2.4.7-p2, 2.4.6-p7,...
Adobe Commerce versions 2.4.7-p2, 2.4.6-p7, 2.4.5-p9, 2.4.4-p10 and earlier are affected by an Improper Access Control vulnerability that could result in a Security feature bypass. An attacker...
Medium - CVE-2024-45125 - Adobe Commerce versions 2.4.7-p2, 2.4.6-p7,...
Adobe Commerce versions 2.4.7-p2, 2.4.6-p7, 2.4.5-p9, 2.4.4-p10 and earlier are affected by an Incorrect Authorization vulnerability that could result in a security feature bypass. A low-privileged...
Medium - CVE-2024-45127 - Adobe Commerce versions 2.4.7-p2, 2.4.6-p7,...
Adobe Commerce versions 2.4.7-p2, 2.4.6-p7, 2.4.5-p9, 2.4.4-p10 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by an admin attacker to inject...