Adobe Adobe Commerce Events
14 vulnérabilités publiées citent ce produit.
Tel que les CNA l’écrivent dans leurs fiches CVE (éditeur et produit) ; les versions sont les leurs.
| CVE | Versions vulnérables | Titre | Sévérité | Publiée | EPSS | Exploitation |
|---|---|---|---|---|---|---|
| CVE-2026-47984 | ≤ 1.20.0 | Adobe Commerce | Incorrect Authorization (CWE-863) | HIGH 8.2 | 0.7 % | ||
| CVE-2026-47997 | ≤ 1.20.0 | Adobe Commerce | Incorrect Authorization (CWE-863) | MEDIUM 5.9 | 0.7 % | ||
| CVE-2026-47988 | ≤ 1.20.0 | Adobe Commerce | Incorrect Authorization (CWE-863) | HIGH 8.6 | 0.8 % | ||
| CVE-2026-47999 | ≤ 1.20.0 | Adobe Commerce | Cross-site Scripting (Stored XSS) (CWE-79) | MEDIUM 4.8 | 0.4 % | ||
| CVE-2026-48358 | ≤ 1.20.0 | Adobe Commerce | Improper Encoding or Escaping of Output (CWE-116) | CRITICAL 9.1 | 1.2 % | ||
| CVE-2026-48356 | ≤ 1.20.0 | Adobe Commerce | Unrestricted Upload of File with Dangerous Type (CWE-434) | CRITICAL 9.3 | 31 % | KEV | |
| CVE-2026-47998 | ≤ 1.20.0 | Adobe Commerce | Incorrect Authorization (CWE-863) | MEDIUM 5.9 | 0.7 % | ||
| CVE-2026-48000 | ≤ 1.20.0 | Adobe Commerce | URL Redirection to Untrusted Site ('Open Redirect') (CWE-601) | MEDIUM 6.1 | 0.5 % | ||
| CVE-2026-48001 | ≤ 1.20.0 | Adobe Commerce | Information Exposure (CWE-200) | LOW 3.7 | 0.5 % | ||
| CVE-2026-47995 | ≤ 1.20.0 | Adobe Commerce | Cross-site Scripting (Stored XSS) (CWE-79) | HIGH 8.1 | 0.7 % | ||
| CVE-2026-48371 | ≤ 1.20.0 | Adobe Commerce | Cross-site Scripting (Stored XSS) (CWE-79) | MEDIUM 5.4 | 0.4 % | ||
| CVE-2026-47996 | ≤ 1.20.0 | Adobe Commerce | Incorrect Authorization (CWE-863) | MEDIUM 6.8 | 0.9 % | ||
| CVE-2026-47994 | ≤ 1.20.0 | Adobe Commerce | Cross-site Scripting (Stored XSS) (CWE-79) | HIGH 8.7 | 0.7 % | ||
| CVE-2026-47992 | ≤ 1.20.0 | Adobe Commerce | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') (CWE-89) | HIGH 7.2 | 1.0 % |