CVE-2025-54236
Adobe Commerce | Improper Input Validation (CWE-20)
En bref Sévérité CRITICAL 9.1 Exploitation Exploitation connue (CISA KEV) · ajoutée le 2025-10-24 Exploitée selon l'ENISA depuis le 2025-10-24 EPSS EPSS 94.66 % · centile 100 (2026-10-27) État PUBLISHED Publiée 2025-09-09 Mise à jour 2025-10-24 Attribuée par adobe Statut NVD Analyzed Description Adobe Commerce versions 2.4.9-alpha2, 2.4.8-p2, 2.4.7-p7, 2.4.6-p12, 2.4.5-p14, 2.4.4-p15 and earlier are affected by an Improper Input Validation vulnerability. A successful attacker can abuse this to achieve session takeover, increasing the confidentiality, and integrity impact to high. Exploitation of this issue does not require user interaction.
Scores Version Score Vecteur Évalué par CVSS 3.1 CRITICAL 9.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N adobe CVSS 3.1 CRITICAL 9.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N NVD · psirt@adobe.com (Secondary)
Faiblesses (CWE)
Avis
Références européennes
Avis du CERT-FR
Configurations affectées (CPE NVD) cpe:2.3:a:adobe:commerce:2.4.4:-:*:*:*:*:*:*cpe:2.3:a:adobe:commerce:2.4.4:p1:*:*:*:*:*:*cpe:2.3:a:adobe:commerce:2.4.4:p10:*:*:*:*:*:*cpe:2.3:a:adobe:commerce:2.4.4:p11:*:*:*:*:*:*cpe:2.3:a:adobe:commerce:2.4.4:p12:*:*:*:*:*:*cpe:2.3:a:adobe:commerce:2.4.4:p13:*:*:*:*:*:*cpe:2.3:a:adobe:commerce:2.4.4:p14:*:*:*:*:*:*cpe:2.3:a:adobe:commerce:2.4.4:p15:*:*:*:*:*:*cpe:2.3:a:adobe:commerce:2.4.4:p2:*:*:*:*:*:*cpe:2.3:a:adobe:commerce:2.4.4:p3:*:*:*:*:*:*cpe:2.3:a:adobe:commerce:2.4.4:p4:*:*:*:*:*:*cpe:2.3:a:adobe:commerce:2.4.4:p5:*:*:*:*:*:*cpe:2.3:a:adobe:commerce:2.4.4:p6:*:*:*:*:*:*cpe:2.3:a:adobe:commerce:2.4.4:p7:*:*:*:*:*:*cpe:2.3:a:adobe:commerce:2.4.4:p8:*:*:*:*:*:*cpe:2.3:a:adobe:commerce:2.4.4:p9:*:*:*:*:*:*cpe:2.3:a:adobe:commerce:2.4.5:-:*:*:*:*:*:*cpe:2.3:a:adobe:commerce:2.4.5:p1:*:*:*:*:*:*cpe:2.3:a:adobe:commerce:2.4.5:p10:*:*:*:*:*:*cpe:2.3:a:adobe:commerce:2.4.5:p11:*:*:*:*:*:*cpe:2.3:a:adobe:commerce:2.4.5:p12:*:*:*:*:*:*cpe:2.3:a:adobe:commerce:2.4.5:p13:*:*:*:*:*:*cpe:2.3:a:adobe:commerce:2.4.5:p14:*:*:*:*:*:*cpe:2.3:a:adobe:commerce:2.4.5:p2:*:*:*:*:*:*cpe:2.3:a:adobe:commerce:2.4.5:p3:*:*:*:*:*:*cpe:2.3:a:adobe:commerce:2.4.5:p4:*:*:*:*:*:*cpe:2.3:a:adobe:commerce:2.4.5:p5:*:*:*:*:*:*cpe:2.3:a:adobe:commerce:2.4.5:p6:*:*:*:*:*:*cpe:2.3:a:adobe:commerce:2.4.5:p7:*:*:*:*:*:*cpe:2.3:a:adobe:commerce:2.4.5:p8:*:*:*:*:*:*cpe:2.3:a:adobe:commerce:2.4.5:p9:*:*:*:*:*:*cpe:2.3:a:adobe:commerce:2.4.6:-:*:*:*:*:*:*cpe:2.3:a:adobe:commerce:2.4.6:p1:*:*:*:*:*:*cpe:2.3:a:adobe:commerce:2.4.6:p10:*:*:*:*:*:*cpe:2.3:a:adobe:commerce:2.4.6:p11:*:*:*:*:*:*cpe:2.3:a:adobe:commerce:2.4.6:p12:*:*:*:*:*:*cpe:2.3:a:adobe:commerce:2.4.6:p2:*:*:*:*:*:*cpe:2.3:a:adobe:commerce:2.4.6:p3:*:*:*:*:*:*cpe:2.3:a:adobe:commerce:2.4.6:p4:*:*:*:*:*:*cpe:2.3:a:adobe:commerce:2.4.6:p5:*:*:*:*:*:*+112 autres Produits affectés
Références
Sources
