Vulnerabilities > Adobe > Commerce > Medium

DATE CVE VULNERABILITY TITLE RISK
2024-08-14 CVE-2024-39410 Cross-Site Request Forgery (CSRF) vulnerability in Adobe Commerce
Adobe Commerce versions 2.4.7-p1, 2.4.6-p6, 2.4.5-p8, 2.4.4-p9 and earlier are affected by a Cross-Site Request Forgery (CSRF) vulnerability that could allow an attacker to bypass security features and perform minor integrity changes on behalf of a user.
network
low complexity
adobe CWE-352
4.3
2024-08-14 CVE-2024-39411 Unspecified vulnerability in Adobe Commerce
Adobe Commerce versions 2.4.7-p1, 2.4.6-p6, 2.4.5-p8, 2.4.4-p9 and earlier are affected by an Improper Authorization vulnerability that could result in a Security feature bypass.
network
low complexity
adobe
4.3
2024-08-14 CVE-2024-39412 Unspecified vulnerability in Adobe Commerce
Adobe Commerce versions 2.4.7-p1, 2.4.6-p6, 2.4.5-p8, 2.4.4-p9 and earlier are affected by an Improper Authorization vulnerability that could result in a Security feature bypass.
network
low complexity
adobe
4.3
2024-08-14 CVE-2024-39413 Unspecified vulnerability in Adobe Commerce
Adobe Commerce versions 2.4.7-p1, 2.4.6-p6, 2.4.5-p8, 2.4.4-p9 and earlier are affected by an Improper Authorization vulnerability that could result in a Security feature bypass.
network
low complexity
adobe
4.3
2024-08-14 CVE-2024-39414 Unspecified vulnerability in Adobe Commerce
Adobe Commerce versions 2.4.7-p1, 2.4.6-p6, 2.4.5-p8, 2.4.4-p9 and earlier are affected by an Improper Authorization vulnerability that could result in a Security feature bypass.
network
low complexity
adobe
4.3
2024-08-14 CVE-2024-39415 Unspecified vulnerability in Adobe Commerce
Adobe Commerce versions 2.4.7-p1, 2.4.6-p6, 2.4.5-p8, 2.4.4-p9 and earlier are affected by an Improper Authorization vulnerability that could result in a Security feature bypass.
network
low complexity
adobe
4.3
2024-08-14 CVE-2024-39416 Unspecified vulnerability in Adobe Commerce
Adobe Commerce versions 2.4.7-p1, 2.4.6-p6, 2.4.5-p8, 2.4.4-p9 and earlier are affected by an Improper Authorization vulnerability that could result in a Security feature bypass.
network
low complexity
adobe
4.3
2024-08-14 CVE-2024-39417 Unspecified vulnerability in Adobe Commerce
Adobe Commerce versions 2.4.7-p1, 2.4.6-p6, 2.4.5-p8, 2.4.4-p9 and earlier are affected by an Improper Authorization vulnerability that could result in a Security feature bypass.
network
low complexity
adobe
4.3
2024-08-14 CVE-2024-39418 Unspecified vulnerability in Adobe Commerce
Adobe Commerce versions 2.4.7-p1, 2.4.6-p6, 2.4.5-p8, 2.4.4-p9 and earlier are affected by an Improper Authorization vulnerability that could result in a Security feature bypass.
network
low complexity
adobe
5.4
2024-08-14 CVE-2024-39419 Unspecified vulnerability in Adobe Commerce
Adobe Commerce versions 2.4.7-p1, 2.4.6-p6, 2.4.5-p8, 2.4.4-p9 and earlier are affected by an Improper Authorization vulnerability that could result in a Security feature bypass.
network
low complexity
adobe
4.3