Action not permitted
Modal body text goes here.
Modal Title
Modal Body
CVE-2026-21297 (GCVE-0-2026-21297)
Vulnerability from cvelistv5 – Published: 2026-03-11 02:19 – Updated: 2026-03-11 13:36- CWE-863 - Incorrect Authorization (CWE-863)
| URL | Tags |
|---|---|
| https://helpx.adobe.com/security/products/magento… | vendor-advisory |
| Vendor | Product | Version | |
|---|---|---|---|
| Adobe | Adobe Commerce |
Affected:
0 , ≤ 2.4.4-p16
(semver)
|
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2026-21297",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-03-11T13:36:50.843565Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2026-03-11T13:36:59.330Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"defaultStatus": "affected",
"product": "Adobe Commerce",
"vendor": "Adobe",
"versions": [
{
"lessThanOrEqual": "2.4.4-p16",
"status": "affected",
"version": "0",
"versionType": "semver"
}
]
}
],
"datePublic": "2026-03-09T17:00:00.000Z",
"descriptions": [
{
"lang": "en",
"value": "Adobe Commerce versions 2.4.9-alpha3, 2.4.8-p3, 2.4.7-p8, 2.4.6-p13, 2.4.5-p15, 2.4.4-p16 and earlier are affected by an Incorrect Authorization vulnerability that could result in a Security feature bypass. A low-privileged attacker could leverage this vulnerability to bypass security measures and gain limited unauthorized access to a feature. Exploitation of this issue does not require user interaction."
}
],
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"availabilityRequirement": "NOT_DEFINED",
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "LOW",
"confidentialityRequirement": "NOT_DEFINED",
"environmentalScore": 4.3,
"environmentalSeverity": "MEDIUM",
"exploitCodeMaturity": "NOT_DEFINED",
"integrityImpact": "NONE",
"integrityRequirement": "NOT_DEFINED",
"modifiedAttackComplexity": "LOW",
"modifiedAttackVector": "NETWORK",
"modifiedAvailabilityImpact": "NONE",
"modifiedConfidentialityImpact": "LOW",
"modifiedIntegrityImpact": "NONE",
"modifiedPrivilegesRequired": "LOW",
"modifiedScope": "UNCHANGED",
"modifiedUserInteraction": "NONE",
"privilegesRequired": "LOW",
"remediationLevel": "NOT_DEFINED",
"reportConfidence": "NOT_DEFINED",
"scope": "UNCHANGED",
"temporalScore": 4.3,
"temporalSeverity": "MEDIUM",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
"version": "3.1"
},
"format": "CVSS",
"scenarios": [
{
"lang": "en",
"value": "GENERAL"
}
]
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-863",
"description": "Incorrect Authorization (CWE-863)",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-03-11T02:19:19.528Z",
"orgId": "078d4453-3bcd-4900-85e6-15281da43538",
"shortName": "adobe"
},
"references": [
{
"tags": [
"vendor-advisory"
],
"url": "https://helpx.adobe.com/security/products/magento/apsb26-05.html"
}
],
"source": {
"discovery": "EXTERNAL"
},
"title": "Adobe Commerce | Incorrect Authorization (CWE-863)"
}
},
"cveMetadata": {
"assignerOrgId": "078d4453-3bcd-4900-85e6-15281da43538",
"assignerShortName": "adobe",
"cveId": "CVE-2026-21297",
"datePublished": "2026-03-11T02:19:19.528Z",
"dateReserved": "2025-12-12T22:01:18.191Z",
"dateUpdated": "2026-03-11T13:36:59.330Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2",
"vulnerability-lookup:meta": {
"epss": {
"cve": "CVE-2026-21297",
"date": "2026-06-17",
"epss": "0.0035",
"percentile": "0.26663"
},
"nvd": "{\"cve\":{\"id\":\"CVE-2026-21297\",\"sourceIdentifier\":\"psirt@adobe.com\",\"published\":\"2026-03-11T03:15:54.990\",\"lastModified\":\"2026-03-11T18:08:06.757\",\"vulnStatus\":\"Analyzed\",\"cveTags\":[],\"descriptions\":[{\"lang\":\"en\",\"value\":\"Adobe Commerce versions 2.4.9-alpha3, 2.4.8-p3, 2.4.7-p8, 2.4.6-p13, 2.4.5-p15, 2.4.4-p16 and earlier are affected by an Incorrect Authorization vulnerability that could result in a Security feature bypass. A low-privileged attacker could leverage this vulnerability to bypass security measures and gain limited unauthorized access to a feature. Exploitation of this issue does not require user interaction.\"},{\"lang\":\"es\",\"value\":\"Las versiones de Adobe Commerce 2.4.9-alpha3, 2.4.8-p3, 2.4.7-p8, 2.4.6-p13, 2.4.5-p15, 2.4.4-p16 y anteriores est\u00e1n afectadas por una vulnerabilidad de Autorizaci\u00f3n Incorrecta que podr\u00eda resultar en una omisi\u00f3n de caracter\u00edstica de seguridad. Un atacante con pocos privilegios podr\u00eda aprovechar esta vulnerabilidad para omitir medidas de seguridad y obtener acceso no autorizado limitado a una caracter\u00edstica. La explotaci\u00f3n de este problema no requiere interacci\u00f3n del usuario.\"}],\"metrics\":{\"cvssMetricV31\":[{\"source\":\"psirt@adobe.com\",\"type\":\"Primary\",\"cvssData\":{\"version\":\"3.1\",\"vectorString\":\"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N\",\"baseScore\":4.3,\"baseSeverity\":\"MEDIUM\",\"attackVector\":\"NETWORK\",\"attackComplexity\":\"LOW\",\"privilegesRequired\":\"LOW\",\"userInteraction\":\"NONE\",\"scope\":\"UNCHANGED\",\"confidentialityImpact\":\"LOW\",\"integrityImpact\":\"NONE\",\"availabilityImpact\":\"NONE\"},\"exploitabilityScore\":2.8,\"impactScore\":1.4}]},\"weaknesses\":[{\"source\":\"psirt@adobe.com\",\"type\":\"Primary\",\"description\":[{\"lang\":\"en\",\"value\":\"CWE-863\"}]}],\"configurations\":[{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:adobe:commerce:*:*:*:*:*:*:*:*\",\"versionEndExcluding\":\"2.4.4\",\"matchCriteriaId\":\"76AAB57F-7723-44E0-B91A-9F120C849AC4\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:adobe:commerce:2.4.4:-:*:*:*:*:*:*\",\"matchCriteriaId\":\"D258D9EF-94FB-41F0-A7A5-7F66FA7A0055\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:adobe:commerce:2.4.4:p1:*:*:*:*:*:*\",\"matchCriteriaId\":\"4E5CF6F0-2388-4D3F-8FE1-43B8AF148564\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:adobe:commerce:2.4.4:p10:*:*:*:*:*:*\",\"matchCriteriaId\":\"1C3D7164-1C5F-40BC-9EEC-B0E00CD45808\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:adobe:commerce:2.4.4:p11:*:*:*:*:*:*\",\"matchCriteriaId\":\"68AAE162-5957-42AF-BE20-40F341837FAC\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:adobe:commerce:2.4.4:p12:*:*:*:*:*:*\",\"matchCriteriaId\":\"D9D01159-3309-4F6B-93B0-2D89DDD33DEE\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:adobe:commerce:2.4.4:p13:*:*:*:*:*:*\",\"matchCriteriaId\":\"91736E79-D8E7-4AF2-8E01-A7B4EB8AD6F4\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:adobe:commerce:2.4.4:p14:*:*:*:*:*:*\",\"matchCriteriaId\":\"8412C043-64E7-4DFF-A303-13A6FE113BFB\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:adobe:commerce:2.4.4:p15:*:*:*:*:*:*\",\"matchCriteriaId\":\"BBDA2BCF-E784-4CF3-B30D-6FF5BEE2055F\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:adobe:commerce:2.4.4:p16:*:*:*:*:*:*\",\"matchCriteriaId\":\"00909C10-6C93-4735-94ED-18DCBD608A28\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:adobe:commerce:2.4.4:p2:*:*:*:*:*:*\",\"matchCriteriaId\":\"D6D6F1A7-ABB5-4EDC-9EA8-98B74518847A\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:adobe:commerce:2.4.4:p3:*:*:*:*:*:*\",\"matchCriteriaId\":\"CFEBDDF2-6443-4482-83B2-3CD272CF599F\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:adobe:commerce:2.4.4:p4:*:*:*:*:*:*\",\"matchCriteriaId\":\"6661093F-8D22-450F-BC6C-A8894A52E6A9\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:adobe:commerce:2.4.4:p5:*:*:*:*:*:*\",\"matchCriteriaId\":\"2515DA6D-2E74-4A05-BD29-FEEF3322BCB6\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:adobe:commerce:2.4.4:p6:*:*:*:*:*:*\",\"matchCriteriaId\":\"69A1F1F7-E53C-40F3-B3D9-DC011FC353BF\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:adobe:commerce:2.4.4:p7:*:*:*:*:*:*\",\"matchCriteriaId\":\"6A56E96C-6CE5-442C-AA88-F0059B02B5E7\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:adobe:commerce:2.4.4:p8:*:*:*:*:*:*\",\"matchCriteriaId\":\"8867F510-201C-4199-8554-53DE156CE669\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:adobe:commerce:2.4.4:p9:*:*:*:*:*:*\",\"matchCriteriaId\":\"23988132-DD4E-4968-B6B8-954122F76081\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:adobe:commerce:2.4.5:-:*:*:*:*:*:*\",\"matchCriteriaId\":\"9B07F7B2-E915-4EFF-8FFC-91143CEF082E\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:adobe:commerce:2.4.5:p1:*:*:*:*:*:*\",\"matchCriteriaId\":\"7F5E9DB6-1386-4274-8270-2FE0F0CAF7FD\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:adobe:commerce:2.4.5:p10:*:*:*:*:*:*\",\"matchCriteriaId\":\"5764CC97-C866-415D-A3A1-5B5B9E1C06A6\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:adobe:commerce:2.4.5:p11:*:*:*:*:*:*\",\"matchCriteriaId\":\"E82D10D8-2894-4E5B-B47B-F00964DD5CDE\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:adobe:commerce:2.4.5:p12:*:*:*:*:*:*\",\"matchCriteriaId\":\"B044F2D9-E888-4852-8A40-DCE688860ED3\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:adobe:commerce:2.4.5:p13:*:*:*:*:*:*\",\"matchCriteriaId\":\"6423C754-36F9-4680-9211-60940ED63E79\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:adobe:commerce:2.4.5:p14:*:*:*:*:*:*\",\"matchCriteriaId\":\"3472064A-8C79-436B-965A-96834AE8D346\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:adobe:commerce:2.4.5:p15:*:*:*:*:*:*\",\"matchCriteriaId\":\"CDA8ABEB-F955-4D34-8219-C518B49F5543\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:adobe:commerce:2.4.5:p2:*:*:*:*:*:*\",\"matchCriteriaId\":\"8605E4E6-0F7D-42C8-B35B-2349A0BEFC69\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:adobe:commerce:2.4.5:p3:*:*:*:*:*:*\",\"matchCriteriaId\":\"B6318F97-E59A-4425-8DC7-045C78A644F8\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:adobe:commerce:2.4.5:p4:*:*:*:*:*:*\",\"matchCriteriaId\":\"324A573E-DBC8-42A0-8CB8-EDD8FBAB7115\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:adobe:commerce:2.4.5:p5:*:*:*:*:*:*\",\"matchCriteriaId\":\"54151A00-CFB8-4E6A-8E74-497CB67BF7E2\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:adobe:commerce:2.4.5:p6:*:*:*:*:*:*\",\"matchCriteriaId\":\"6DF0E74D-9293-4209-97D1-A3BA13C3DDE9\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:adobe:commerce:2.4.5:p7:*:*:*:*:*:*\",\"matchCriteriaId\":\"8922D646-1A97-47ED-91C6-5A426781C98A\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:adobe:commerce:2.4.5:p8:*:*:*:*:*:*\",\"matchCriteriaId\":\"952787C6-9BF1-49FB-9824-1236678E1902\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:adobe:commerce:2.4.5:p9:*:*:*:*:*:*\",\"matchCriteriaId\":\"898A8679-3C46-4718-9EDF-583ADDFCF2EC\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:adobe:commerce:2.4.6:-:*:*:*:*:*:*\",\"matchCriteriaId\":\"7C7AFBB1-F9C9-4BDE-BCEF-94C9F0AC6798\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:adobe:commerce:2.4.6:p1:*:*:*:*:*:*\",\"matchCriteriaId\":\"D6086841-C175-46A1-8414-71C6163A0E7A\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:adobe:commerce:2.4.6:p10:*:*:*:*:*:*\",\"matchCriteriaId\":\"E57889CC-3E90-46AF-9CD6-3328DD501AD1\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:adobe:commerce:2.4.6:p11:*:*:*:*:*:*\",\"matchCriteriaId\":\"47A86566-DE38-4032-947D-B6181F0BC120\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:adobe:commerce:2.4.6:p12:*:*:*:*:*:*\",\"matchCriteriaId\":\"B7D1D684-CE7E-4D6D-95B5-1F86A8DB6C66\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:adobe:commerce:2.4.6:p13:*:*:*:*:*:*\",\"matchCriteriaId\":\"CABF5BD0-1D06-483D-91D3-A773D99EF217\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:adobe:commerce:2.4.6:p2:*:*:*:*:*:*\",\"matchCriteriaId\":\"D2E0DDD1-0F4A-4F96-B25D-40A39A1A535A\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:adobe:commerce:2.4.6:p3:*:*:*:*:*:*\",\"matchCriteriaId\":\"A576B1B5-73A2-431E-998F-7E5458B51D6A\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:adobe:commerce:2.4.6:p4:*:*:*:*:*:*\",\"matchCriteriaId\":\"0E05F4AC-2A28-47E3-96DE-0E31AF73CD43\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:adobe:commerce:2.4.6:p5:*:*:*:*:*:*\",\"matchCriteriaId\":\"3A9A62EE-1649-4815-8EC9-7AEF7949EB2F\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:adobe:commerce:2.4.6:p6:*:*:*:*:*:*\",\"matchCriteriaId\":\"E58690F9-FA9C-42A0-B4CD-91FD1197A53E\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:adobe:commerce:2.4.6:p7:*:*:*:*:*:*\",\"matchCriteriaId\":\"77D01D8B-1FBC-43CA-90F9-C89D9B4D18F0\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:adobe:commerce:2.4.6:p8:*:*:*:*:*:*\",\"matchCriteriaId\":\"8B83729E-80AF-47CE-A70C-32BF83024A40\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:adobe:commerce:2.4.6:p9:*:*:*:*:*:*\",\"matchCriteriaId\":\"73D22D42-646D-4955-A6F9-9B7BA63DC0A9\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:adobe:commerce:2.4.7:-:*:*:*:*:*:*\",\"matchCriteriaId\":\"B5D04853-0C2F-47DD-A939-3A8F6E22CB7D\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:adobe:commerce:2.4.7:b1:*:*:*:*:*:*\",\"matchCriteriaId\":\"6EBB0608-034B-4F07-A59B-9E6A989BA260\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:adobe:commerce:2.4.7:b2:*:*:*:*:*:*\",\"matchCriteriaId\":\"B3BF9B08-84E3-4974-9DEB-F4285995D796\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:adobe:commerce:2.4.7:beta3:*:*:*:*:*:*\",\"matchCriteriaId\":\"7771BEDB-05E2-430E-B2A2-E2F7574B7114\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:adobe:commerce:2.4.7:p1:*:*:*:*:*:*\",\"matchCriteriaId\":\"2E05341A-C70C-4B3D-AF30-9520D6B97D30\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:adobe:commerce:2.4.7:p2:*:*:*:*:*:*\",\"matchCriteriaId\":\"4D98B52E-3B59-4327-AC7E-DDBB0ADA08F6\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:adobe:commerce:2.4.7:p3:*:*:*:*:*:*\",\"matchCriteriaId\":\"95026AA9-A28B-4D94-BD77-7628429EBA30\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:adobe:commerce:2.4.7:p4:*:*:*:*:*:*\",\"matchCriteriaId\":\"83FD1220-7D46-42B2-8110-30A934144572\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:adobe:commerce:2.4.7:p5:*:*:*:*:*:*\",\"matchCriteriaId\":\"3F1439CE-8A3B-414A-B974-559209FF480C\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:adobe:commerce:2.4.7:p6:*:*:*:*:*:*\",\"matchCriteriaId\":\"13726DEE-FFCB-447B-9FFF-136F132F2C4C\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:adobe:commerce:2.4.7:p7:*:*:*:*:*:*\",\"matchCriteriaId\":\"1A9443CE-AE1F-4D66-9C88-5E2E3FD28EE6\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:adobe:commerce:2.4.7:p8:*:*:*:*:*:*\",\"matchCriteriaId\":\"B5E29EF8-2569-4258-A66F-E1E5F621E0D4\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:adobe:commerce:2.4.8:-:*:*:*:*:*:*\",\"matchCriteriaId\":\"1EE12F4B-5607-4790-A29B-EE23383BCC1A\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:adobe:commerce:2.4.8:beta1:*:*:*:*:*:*\",\"matchCriteriaId\":\"6D05A958-9749-486A-A149-C21647CDCADF\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:adobe:commerce:2.4.8:beta2:*:*:*:*:*:*\",\"matchCriteriaId\":\"C9E12B43-AD3E-48A2-9042-5586186CA3BE\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:adobe:commerce:2.4.8:p1:*:*:*:*:*:*\",\"matchCriteriaId\":\"C267AF14-7BA8-4D1F-BCD9-BE3ED0DA3D25\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:adobe:commerce:2.4.8:p2:*:*:*:*:*:*\",\"matchCriteriaId\":\"B4947C63-CFD9-437B-A09E-A197DCE40095\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:adobe:commerce:2.4.8:p3:*:*:*:*:*:*\",\"matchCriteriaId\":\"7FB6D020-2E5C-4789-A063-2C907F3CF3FA\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:adobe:commerce:2.4.9:alpha1:*:*:*:*:*:*\",\"matchCriteriaId\":\"37F32F70-7B2A-4BAB-B3F0-AFF5C04CCDED\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:adobe:commerce:2.4.9:alpha2:*:*:*:*:*:*\",\"matchCriteriaId\":\"8B6B7609-6A8E-4154-BC05-2A9099909684\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:adobe:commerce:2.4.9:alpha3:*:*:*:*:*:*\",\"matchCriteriaId\":\"BAFF35B5-CA01-40ED-B410-3E3286C370BE\"}]}]},{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:adobe:commerce_b2b:*:*:*:*:*:*:*:*\",\"versionEndExcluding\":\"1.3.3\",\"matchCriteriaId\":\"28120C2E-10AD-4476-B6C3-BE3A43946068\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:adobe:commerce_b2b:1.3.3:-:*:*:*:*:*:*\",\"matchCriteriaId\":\"C4667AA3-4CC9-41C0-8E0C-19B0FCE1CF79\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:adobe:commerce_b2b:1.3.3:p1:*:*:*:*:*:*\",\"matchCriteriaId\":\"E396FB4F-B20A-4BF9-8FBD-014A0F197F08\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:adobe:commerce_b2b:1.3.3:p10:*:*:*:*:*:*\",\"matchCriteriaId\":\"2ADE32D1-2845-4030-BE1F-ECE28189D0F9\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:adobe:commerce_b2b:1.3.3:p11:*:*:*:*:*:*\",\"matchCriteriaId\":\"F2E771C9-86C4-455C-98D4-6F4FE7A9A822\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:adobe:commerce_b2b:1.3.3:p12:*:*:*:*:*:*\",\"matchCriteriaId\":\"491AB715-F62A-46DB-A56E-055CF7CB7BEF\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:adobe:commerce_b2b:1.3.3:p13:*:*:*:*:*:*\",\"matchCriteriaId\":\"6FE364A8-4780-426F-9E8A-284A31FE2623\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:adobe:commerce_b2b:1.3.3:p14:*:*:*:*:*:*\",\"matchCriteriaId\":\"F9258027-8A6A-4C6A-BC6F-349B6E03D828\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:adobe:commerce_b2b:1.3.3:p15:*:*:*:*:*:*\",\"matchCriteriaId\":\"934C52C7-8751-481E-BAA7-F631C4E31F32\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:adobe:commerce_b2b:1.3.3:p16:*:*:*:*:*:*\",\"matchCriteriaId\":\"D3C5847F-57AA-4ADA-8997-5D4F5FDFF50E\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:adobe:commerce_b2b:1.3.3:p2:*:*:*:*:*:*\",\"matchCriteriaId\":\"5677B7E2-FA07-4536-96A9-2C64BEFD3751\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:adobe:commerce_b2b:1.3.3:p3:*:*:*:*:*:*\",\"matchCriteriaId\":\"2DCD1522-6E27-474F-9FC6-413409D6AD55\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:adobe:commerce_b2b:1.3.3:p4:*:*:*:*:*:*\",\"matchCriteriaId\":\"B7968FCA-CCFD-4222-8FB8-E6E21107944F\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:adobe:commerce_b2b:1.3.3:p5:*:*:*:*:*:*\",\"matchCriteriaId\":\"8C175A1F-7814-4C51-A7B7-AD5140F0688F\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:adobe:commerce_b2b:1.3.3:p6:*:*:*:*:*:*\",\"matchCriteriaId\":\"E66CBFB3-40C3-474A-A3A3-12135F610814\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:adobe:commerce_b2b:1.3.3:p7:*:*:*:*:*:*\",\"matchCriteriaId\":\"F51DFA17-1875-41A9-B141-D89BB6238B3F\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:adobe:commerce_b2b:1.3.3:p8:*:*:*:*:*:*\",\"matchCriteriaId\":\"5A4D10EF-9137-4DF5-A5DD-97907E8B4C02\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:adobe:commerce_b2b:1.3.3:p9:*:*:*:*:*:*\",\"matchCriteriaId\":\"5CD0DC76-7181-4954-A59E-AB7BB47D0576\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:adobe:commerce_b2b:1.3.4:-:*:*:*:*:*:*\",\"matchCriteriaId\":\"1C90C433-6655-4038-9AB3-0304C1AFF360\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:adobe:commerce_b2b:1.3.4:p1:*:*:*:*:*:*\",\"matchCriteriaId\":\"374E7EDD-512A-4633-A136-01A656935334\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:adobe:commerce_b2b:1.3.4:p10:*:*:*:*:*:*\",\"matchCriteriaId\":\"89BAB227-03E6-4776-ADE4-9D9CB666EFD9\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:adobe:commerce_b2b:1.3.4:p11:*:*:*:*:*:*\",\"matchCriteriaId\":\"0E5ACABA-D6D6-4F29-A9DD-5A04A44ABE64\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:adobe:commerce_b2b:1.3.4:p12:*:*:*:*:*:*\",\"matchCriteriaId\":\"FA80AFCE-2663-46C0-AEC0-C16C8E675E6A\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:adobe:commerce_b2b:1.3.4:p13:*:*:*:*:*:*\",\"matchCriteriaId\":\"EB9955CA-7E7B-40D3-A85D-58BB0D9AC897\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:adobe:commerce_b2b:1.3.4:p14:*:*:*:*:*:*\",\"matchCriteriaId\":\"5D0A17AC-D433-47C2-A1AC-88291DCCECCD\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:adobe:commerce_b2b:1.3.4:p15:*:*:*:*:*:*\",\"matchCriteriaId\":\"7E0FD85B-E851-436D-A789-852DD26A3B56\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:adobe:commerce_b2b:1.3.4:p2:*:*:*:*:*:*\",\"matchCriteriaId\":\"0E9D364A-C858-4160-8B8B-33ECF94796D9\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:adobe:commerce_b2b:1.3.4:p3:*:*:*:*:*:*\",\"matchCriteriaId\":\"61559E50-581E-40FF-9FD4-10192ECFCD04\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:adobe:commerce_b2b:1.3.4:p4:*:*:*:*:*:*\",\"matchCriteriaId\":\"DE3BFB41-5633-4167-B1EA-9E958BCE9DC2\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:adobe:commerce_b2b:1.3.4:p5:*:*:*:*:*:*\",\"matchCriteriaId\":\"F2C525D2-837D-486A-8B38-5634AE2ECE2B\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:adobe:commerce_b2b:1.3.4:p6:*:*:*:*:*:*\",\"matchCriteriaId\":\"6F220229-F2DF-4C9D-90A6-8B09F8BE3391\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:adobe:commerce_b2b:1.3.4:p7:*:*:*:*:*:*\",\"matchCriteriaId\":\"63AB9506-3F8E-4C2E-A859-2380431C15A6\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:adobe:commerce_b2b:1.3.4:p8:*:*:*:*:*:*\",\"matchCriteriaId\":\"51B76658-EA6B-4AC9-9D9C-374C5308D069\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:adobe:commerce_b2b:1.3.4:p9:*:*:*:*:*:*\",\"matchCriteriaId\":\"6E94B136-7A2C-47F0-BCE4-6BB8E776A305\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:adobe:commerce_b2b:1.3.5:-:*:*:*:*:*:*\",\"matchCriteriaId\":\"3C5C3F26-24F0-4CF5-AA2E-7CA13E9D17DB\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:adobe:commerce_b2b:1.3.5:p1:*:*:*:*:*:*\",\"matchCriteriaId\":\"E888424C-B9F2-4AE7-A77A-39F34143548F\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:adobe:commerce_b2b:1.3.5:p10:*:*:*:*:*:*\",\"matchCriteriaId\":\"A4BE67D7-6463-4179-8C68-298CF960DBC2\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:adobe:commerce_b2b:1.3.5:p11:*:*:*:*:*:*\",\"matchCriteriaId\":\"6CFD1C81-A05D-4E92-9BF5-244021808C77\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:adobe:commerce_b2b:1.3.5:p12:*:*:*:*:*:*\",\"matchCriteriaId\":\"0ADE4696-7DAE-45F3-9161-04AF9FB8DAB1\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:adobe:commerce_b2b:1.3.5:p13:*:*:*:*:*:*\",\"matchCriteriaId\":\"79DFA5ED-2AA5-4DD6-BFB2-3D0B090C0BD9\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:adobe:commerce_b2b:1.3.5:p2:*:*:*:*:*:*\",\"matchCriteriaId\":\"CE97B86B-32CE-4E7F-BA98-C1059BF7BFF4\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:adobe:commerce_b2b:1.3.5:p3:*:*:*:*:*:*\",\"matchCriteriaId\":\"41CEF959-997F-47C9-8186-D4D56C6F4D4F\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:adobe:commerce_b2b:1.3.5:p4:*:*:*:*:*:*\",\"matchCriteriaId\":\"A83DCE0F-E201-4753-9164-F01D46172248\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:adobe:commerce_b2b:1.3.5:p5:*:*:*:*:*:*\",\"matchCriteriaId\":\"8CFAABD7-7658-4A32-B5E3-13F6214BABCD\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:adobe:commerce_b2b:1.3.5:p6:*:*:*:*:*:*\",\"matchCriteriaId\":\"CE880F0B-EC8C-429B-9257-E6F890872F7E\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:adobe:commerce_b2b:1.3.5:p7:*:*:*:*:*:*\",\"matchCriteriaId\":\"66F3EA5F-08A2-4A1E-82D3-BBE7FFA2667E\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:adobe:commerce_b2b:1.3.5:p8:*:*:*:*:*:*\",\"matchCriteriaId\":\"7930F188-A689-4041-BF4F-FBCA579D2E49\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:adobe:commerce_b2b:1.3.5:p9:*:*:*:*:*:*\",\"matchCriteriaId\":\"45090787-93BF-4683-B1E2-7D12FB18BEED\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:adobe:commerce_b2b:1.4.2:-:*:*:*:*:*:*\",\"matchCriteriaId\":\"15C638A8-EFE0-47DB-B1F9-34093AF0FC17\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:adobe:commerce_b2b:1.4.2:p1:*:*:*:*:*:*\",\"matchCriteriaId\":\"CB863404-A9D7-4692-AB43-08945E669928\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:adobe:commerce_b2b:1.4.2:p2:*:*:*:*:*:*\",\"matchCriteriaId\":\"D8CFA8F4-D57D-4D0F-88D5-00A72E3AD8DA\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:adobe:commerce_b2b:1.4.2:p3:*:*:*:*:*:*\",\"matchCriteriaId\":\"A21F608C-C356-47B8-8FBB-DB28BABFC4C6\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:adobe:commerce_b2b:1.4.2:p4:*:*:*:*:*:*\",\"matchCriteriaId\":\"E14195F1-5016-46BE-A614-6FB4E312FC93\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:adobe:commerce_b2b:1.4.2:p5:*:*:*:*:*:*\",\"matchCriteriaId\":\"9C360EA8-B18F-4327-90EF-7EED2892BE4F\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:adobe:commerce_b2b:1.4.2:p6:*:*:*:*:*:*\",\"matchCriteriaId\":\"500E3A54-D7C7-4887-9EA6-7DF85389A831\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:adobe:commerce_b2b:1.4.2:p7:*:*:*:*:*:*\",\"matchCriteriaId\":\"ED6FFC1D-E921-4FF7-9928-015630613FE1\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:adobe:commerce_b2b:1.4.2:p8:*:*:*:*:*:*\",\"matchCriteriaId\":\"FB8CAC6E-DA06-4C82-B148-38234D4EB910\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:adobe:commerce_b2b:1.5.2:-:*:*:*:*:*:*\",\"matchCriteriaId\":\"D855D141-7876-4F5A-91BE-6350DD379879\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:adobe:commerce_b2b:1.5.2:p1:*:*:*:*:*:*\",\"matchCriteriaId\":\"79CBDF59-EB84-44D3-81CF-5CBF943B411E\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:adobe:commerce_b2b:1.5.2:p2:*:*:*:*:*:*\",\"matchCriteriaId\":\"2117B163-D88E-4EB4-AEA7-F27FB732BD48\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:adobe:commerce_b2b:1.5.2:p3:*:*:*:*:*:*\",\"matchCriteriaId\":\"33E56E15-320F-4517-85C1-832A5942944C\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:adobe:commerce_b2b:1.5.3:alpha1:*:*:*:*:*:*\",\"matchCriteriaId\":\"508EE0EF-D54A-4834-84AB-FFC62040FDAB\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:adobe:commerce_b2b:1.5.3:alpha2:*:*:*:*:*:*\",\"matchCriteriaId\":\"4D7C6592-33B0-4586-8178-E8F4EB837B7F\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:adobe:commerce_b2b:1.5.3:alpha3:*:*:*:*:*:*\",\"matchCriteriaId\":\"CCC24542-4237-46E4-98C5-0E9D08C3D4D6\"}]}]},{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:adobe:magento:*:*:*:*:open_source:*:*:*\",\"versionEndExcluding\":\"2.4.5\",\"matchCriteriaId\":\"5CA94A87-BA10-4D46-B46D-3DAD379CEEAA\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:adobe:magento:2.4.5:-:*:*:open_source:*:*:*\",\"matchCriteriaId\":\"7A41C717-4B9F-4972-ABA3-2294EEC20F3E\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:adobe:magento:2.4.5:p1:*:*:open_source:*:*:*\",\"matchCriteriaId\":\"3FA80BBC-2DF2-46E1-84CE-8A899415114E\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:adobe:magento:2.4.5:p10:*:*:open_source:*:*:*\",\"matchCriteriaId\":\"783E4AF1-52F3-446B-B003-8079EDA78CBF\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:adobe:magento:2.4.5:p11:*:*:open_source:*:*:*\",\"matchCriteriaId\":\"08B7898F-E25A-4D16-A007-6D4543E80C58\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:adobe:magento:2.4.5:p12:*:*:open_source:*:*:*\",\"matchCriteriaId\":\"313CB0C1-2E8C-46AC-B72B-AFA9E0A6E064\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:adobe:magento:2.4.5:p13:*:*:open_source:*:*:*\",\"matchCriteriaId\":\"E99C1F27-68C9-481F-B01D-8B58B0AFB437\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:adobe:magento:2.4.5:p14:*:*:open_source:*:*:*\",\"matchCriteriaId\":\"D4A3F4C7-8784-43BD-A11B-E66872DD8812\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:adobe:magento:2.4.5:p15:*:*:open_source:*:*:*\",\"matchCriteriaId\":\"6FA6582B-1AA2-4DCD-ADA5-B00C20D18588\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:adobe:magento:2.4.5:p2:*:*:open_source:*:*:*\",\"matchCriteriaId\":\"510B1840-AE77-4BDD-9C09-26C64CC8FC81\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:adobe:magento:2.4.5:p3:*:*:open_source:*:*:*\",\"matchCriteriaId\":\"FA1EDF58-8384-48C4-A584-54D24F6F7973\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:adobe:magento:2.4.5:p4:*:*:open_source:*:*:*\",\"matchCriteriaId\":\"9D2D9715-3A6B-4BE0-B1C5-8D19A683A083\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:adobe:magento:2.4.5:p5:*:*:open_source:*:*:*\",\"matchCriteriaId\":\"1C99B578-5DD6-476D-BB75-4DCAD7F79535\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:adobe:magento:2.4.5:p6:*:*:open_source:*:*:*\",\"matchCriteriaId\":\"7C1B2897-79A5-4A5B-9137-7A4B6B85AA84\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:adobe:magento:2.4.5:p7:*:*:open_source:*:*:*\",\"matchCriteriaId\":\"B9E8299D-FA97-483A-8E1B-BA7B869E467D\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:adobe:magento:2.4.5:p8:*:*:open_source:*:*:*\",\"matchCriteriaId\":\"9A1B92EC-E83A-43B3-8F14-5C1A52B579B1\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:adobe:magento:2.4.5:p9:*:*:open_source:*:*:*\",\"matchCriteriaId\":\"E5F2B6F1-AE8F-4AEE-9AB3-080976AE48B7\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:adobe:magento:2.4.6:-:*:*:open_source:*:*:*\",\"matchCriteriaId\":\"789BD987-9DAD-4EAE-93DE-0E267D54F124\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:adobe:magento:2.4.6:p1:*:*:open_source:*:*:*\",\"matchCriteriaId\":\"A3F113C0-00C5-4BC2-B42B-8AE3756252F2\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:adobe:magento:2.4.6:p10:*:*:open_source:*:*:*\",\"matchCriteriaId\":\"AE842CC8-7795-4238-B727-0BA2FFFBF62C\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:adobe:magento:2.4.6:p11:*:*:open_source:*:*:*\",\"matchCriteriaId\":\"AE724531-422D-4ABB-98F5-2C0B1BBEF031\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:adobe:magento:2.4.6:p12:*:*:open_source:*:*:*\",\"matchCriteriaId\":\"BB499397-0E40-45B0-A7E9-BEFCC909DD07\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:adobe:magento:2.4.6:p13:*:*:open_source:*:*:*\",\"matchCriteriaId\":\"0F972E57-B08E-46DF-88F1-A3002F001E83\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:adobe:magento:2.4.6:p2:*:*:open_source:*:*:*\",\"matchCriteriaId\":\"02592D65-2D2C-460A-A970-8A18F9B156ED\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:adobe:magento:2.4.6:p3:*:*:open_source:*:*:*\",\"matchCriteriaId\":\"457B89CF-C75E-4ED6-8603-9C52BA462A9E\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:adobe:magento:2.4.6:p4:*:*:open_source:*:*:*\",\"matchCriteriaId\":\"A572A2DC-2DAB-4ABE-8FC2-5AF2340C826F\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:adobe:magento:2.4.6:p5:*:*:open_source:*:*:*\",\"matchCriteriaId\":\"2A2DD9C6-BAF5-4DF5-9C14-3478923B2019\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:adobe:magento:2.4.6:p6:*:*:open_source:*:*:*\",\"matchCriteriaId\":\"BA9CFC70-24CF-4DFA-AEF9-9B5A9DAF837D\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:adobe:magento:2.4.6:p7:*:*:open_source:*:*:*\",\"matchCriteriaId\":\"2AA0B806-ABB8-4C18-9F9C-8291BE208F52\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:adobe:magento:2.4.6:p8:*:*:open_source:*:*:*\",\"matchCriteriaId\":\"AA9D4DAB-7567-48D7-BE60-2A10B35CFF27\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:adobe:magento:2.4.6:p9:*:*:open_source:*:*:*\",\"matchCriteriaId\":\"A91E797D-63F6-4DE8-869C-AF0133DC6C03\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:adobe:magento:2.4.7:-:*:*:open_source:*:*:*\",\"matchCriteriaId\":\"0E06FE04-8844-4409-92D9-4972B47C921B\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:adobe:magento:2.4.7:b1:*:*:open_source:*:*:*\",\"matchCriteriaId\":\"99C620F3-40ED-4D7F-B6A1-205E948FD6F5\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:adobe:magento:2.4.7:b2:*:*:open_source:*:*:*\",\"matchCriteriaId\":\"FBCFE5FB-FAB7-4BF0-90AE-79F9590FD872\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:adobe:magento:2.4.7:beta3:*:*:open_source:*:*:*\",\"matchCriteriaId\":\"7EB4B9C5-513C-4039-8087-5E8880894318\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:adobe:magento:2.4.7:p1:*:*:open_source:*:*:*\",\"matchCriteriaId\":\"9C77154A-DBFE-48C3-A274-03075A0DB040\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:adobe:magento:2.4.7:p2:*:*:open_source:*:*:*\",\"matchCriteriaId\":\"F5AAC414-623C-444F-9BD5-EE0ACE2B2246\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:adobe:magento:2.4.7:p3:*:*:open_source:*:*:*\",\"matchCriteriaId\":\"8292888D-B0B0-4DF3-8719-EA4CDCAB39D1\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:adobe:magento:2.4.7:p4:*:*:open_source:*:*:*\",\"matchCriteriaId\":\"9830E074-FDCF-41E9-98C7-10C20424EF4C\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:adobe:magento:2.4.7:p5:*:*:open_source:*:*:*\",\"matchCriteriaId\":\"9D0C8648-B39E-47C7-AA5C-3AFED22F8D40\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:adobe:magento:2.4.7:p6:*:*:open_source:*:*:*\",\"matchCriteriaId\":\"082F8B60-ECC5-4C55-BBFE-A0C8A3E95590\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:adobe:magento:2.4.7:p7:*:*:open_source:*:*:*\",\"matchCriteriaId\":\"A7B83AD4-3134-414A-80E3-106C3C0F975A\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:adobe:magento:2.4.7:p8:*:*:open_source:*:*:*\",\"matchCriteriaId\":\"FAA14D5B-ACF2-497B-ACE7-33C42682D2DF\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:adobe:magento:2.4.8:-:*:*:open_source:*:*:*\",\"matchCriteriaId\":\"00E8284F-10CD-449C-AEF1-688B8287292F\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:adobe:magento:2.4.8:beta1:*:*:open_source:*:*:*\",\"matchCriteriaId\":\"59C10C74-FDB1-46EC-8F41-F3AC24AEFB7D\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:adobe:magento:2.4.8:beta2:*:*:open_source:*:*:*\",\"matchCriteriaId\":\"2957B390-52C5-48D7-A6D7-709BC76B9C69\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:adobe:magento:2.4.8:p1:*:*:open_source:*:*:*\",\"matchCriteriaId\":\"524F64B6-F7F7-4926-884F-E9448636007C\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:adobe:magento:2.4.8:p2:*:*:open_source:*:*:*\",\"matchCriteriaId\":\"9F56F919-69B6-4A77-B8CE-F13409542F14\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:adobe:magento:2.4.8:p3:*:*:open_source:*:*:*\",\"matchCriteriaId\":\"F81D46F6-AEA3-4A83-A6F5-2231FD4CEC46\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:adobe:magento:2.4.9:alpha3:*:*:open_source:*:*:*\",\"matchCriteriaId\":\"D38BAED7-20E6-4750-8E97-829302ED42D2\"}]}]}],\"references\":[{\"url\":\"https://helpx.adobe.com/security/products/magento/apsb26-05.html\",\"source\":\"psirt@adobe.com\",\"tags\":[\"Vendor Advisory\"]}]}}",
"vulnrichment": {
"containers": "{\"adp\": [{\"title\": \"CISA ADP Vulnrichment\", \"metrics\": [{\"other\": {\"type\": \"ssvc\", \"content\": {\"id\": \"CVE-2026-21297\", \"role\": \"CISA Coordinator\", \"options\": [{\"Exploitation\": \"none\"}, {\"Automatable\": \"no\"}, {\"Technical Impact\": \"partial\"}], \"version\": \"2.0.3\", \"timestamp\": \"2026-03-11T13:36:50.843565Z\"}}}], \"providerMetadata\": {\"orgId\": \"134c704f-9b21-4f2e-91b3-4a467353bcc0\", \"shortName\": \"CISA-ADP\", \"dateUpdated\": \"2026-03-11T13:36:54.420Z\"}}], \"cna\": {\"title\": \"Adobe Commerce | Incorrect Authorization (CWE-863)\", \"source\": {\"discovery\": \"EXTERNAL\"}, \"metrics\": [{\"format\": \"CVSS\", \"cvssV3_1\": {\"scope\": \"UNCHANGED\", \"version\": \"3.1\", \"baseScore\": 4.3, \"attackVector\": \"NETWORK\", \"baseSeverity\": \"MEDIUM\", \"vectorString\": \"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N\", \"modifiedScope\": \"UNCHANGED\", \"temporalScore\": 4.3, \"integrityImpact\": \"NONE\", \"userInteraction\": \"NONE\", \"attackComplexity\": \"LOW\", \"remediationLevel\": \"NOT_DEFINED\", \"reportConfidence\": \"NOT_DEFINED\", \"temporalSeverity\": \"MEDIUM\", \"availabilityImpact\": \"NONE\", \"environmentalScore\": 4.3, \"privilegesRequired\": \"LOW\", \"exploitCodeMaturity\": \"NOT_DEFINED\", \"integrityRequirement\": \"NOT_DEFINED\", \"modifiedAttackVector\": \"NETWORK\", \"confidentialityImpact\": \"LOW\", \"environmentalSeverity\": \"MEDIUM\", \"availabilityRequirement\": \"NOT_DEFINED\", \"modifiedIntegrityImpact\": \"NONE\", \"modifiedUserInteraction\": \"NONE\", \"modifiedAttackComplexity\": \"LOW\", \"confidentialityRequirement\": \"NOT_DEFINED\", \"modifiedAvailabilityImpact\": \"NONE\", \"modifiedPrivilegesRequired\": \"LOW\", \"modifiedConfidentialityImpact\": \"LOW\"}, \"scenarios\": [{\"lang\": \"en\", \"value\": \"GENERAL\"}]}], \"affected\": [{\"vendor\": \"Adobe\", \"product\": \"Adobe Commerce\", \"versions\": [{\"status\": \"affected\", \"version\": \"0\", \"versionType\": \"semver\", \"lessThanOrEqual\": \"2.4.4-p16\"}], \"defaultStatus\": \"affected\"}], \"datePublic\": \"2026-03-09T17:00:00.000Z\", \"references\": [{\"url\": \"https://helpx.adobe.com/security/products/magento/apsb26-05.html\", \"tags\": [\"vendor-advisory\"]}], \"descriptions\": [{\"lang\": \"en\", \"value\": \"Adobe Commerce versions 2.4.9-alpha3, 2.4.8-p3, 2.4.7-p8, 2.4.6-p13, 2.4.5-p15, 2.4.4-p16 and earlier are affected by an Incorrect Authorization vulnerability that could result in a Security feature bypass. A low-privileged attacker could leverage this vulnerability to bypass security measures and gain limited unauthorized access to a feature. Exploitation of this issue does not require user interaction.\"}], \"problemTypes\": [{\"descriptions\": [{\"lang\": \"en\", \"type\": \"CWE\", \"cweId\": \"CWE-863\", \"description\": \"Incorrect Authorization (CWE-863)\"}]}], \"providerMetadata\": {\"orgId\": \"078d4453-3bcd-4900-85e6-15281da43538\", \"shortName\": \"adobe\", \"dateUpdated\": \"2026-03-11T02:19:19.528Z\"}}}",
"cveMetadata": "{\"cveId\": \"CVE-2026-21297\", \"state\": \"PUBLISHED\", \"dateUpdated\": \"2026-03-11T13:36:59.330Z\", \"dateReserved\": \"2025-12-12T22:01:18.191Z\", \"assignerOrgId\": \"078d4453-3bcd-4900-85e6-15281da43538\", \"datePublished\": \"2026-03-11T02:19:19.528Z\", \"assignerShortName\": \"adobe\"}",
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
}
}
CERTFR-2026-AVI-0264
Vulnerability from certfr_avis - Published: 2026-03-11 - Updated: 2026-03-11
De multiples vulnérabilités ont été découvertes dans les produits Adobe. Certaines d'entre elles permettent à un attaquant de provoquer une exécution de code arbitraire à distance, une élévation de privilèges et un déni de service à distance.
Solutions
Se référer au bulletin de sécurité de l'éditeur pour l'obtention des correctifs (cf. section Documentation).
| Vendor | Product | Description | ||
|---|---|---|---|---|
| Adobe | Acrobat | Acrobat 2024 versions antérieures à 24.001.30356 pour Windows et macOS | ||
| Adobe | Commerce | Commerce versions 2.4.8 antérieures à 4.2.8-p4 | ||
| Adobe | Commerce | Commerce versions 2.4.6 antérieures à 4.2.6-p14 | ||
| Adobe | Commerce | Commerce versions 2.4.9 antérieures à 4.2.9-beta1 | ||
| Adobe | Commerce | Commerce versions 2.4.7 antérieures à 4.2.7-p9 | ||
| Adobe | Commerce | Commerce versions 2.4.4 antérieures à 4.2.4-p17 | ||
| Adobe | Magento | Magento Open Source versions 2.4.6 antérieures à 2.4.6-p14 | ||
| Adobe | Magento | Magento Open Source versions 2.4.7 antérieures à 2.4.7-p9 | ||
| Adobe | Magento | Magento Open Source versions 2.4.5 antérieures à 2.4.5-p16 | ||
| Adobe | Commerce | Commerce B2B versions 1.5.3 antérieures à 1.5.3-beta1 | ||
| Adobe | Commerce | Commerce B2B versions 1.3.5 antérieures à 1.3.5-p14 | ||
| Adobe | Acrobat Reader | Acrobat Reader DC versions antérieures à 25.001.21288 pour Windows et macOS | ||
| Adobe | Magento | Magento Open Source versions 2.4.9 antérieures à 2.4.9-beta1 | ||
| Adobe | Commerce | Commerce B2B versions 1.5.2 antérieures à 1.5.2-p4 | ||
| Adobe | Commerce | Commerce B2B versions 1.3.3 antérieures à 1.3.3-p17 | ||
| Adobe | Acrobat | Acrobat DC versions antérieures à 25.001.21288 pour Windows et macOS | ||
| Adobe | Commerce | Commerce versions 2.4.5 antérieures à 4.2.5-p16 | ||
| Adobe | Magento | Magento Open Source versions 2.4.8 antérieures à 2.4.8-p4 | ||
| Adobe | Commerce | Commerce B2B versions 1.4.2 antérieures à 1.4.2-p9 | ||
| Adobe | Commerce | Commerce B2B versions 1.3.4 antérieures à 1.3.4-p16 |
| Title | Publication Time | Tags | ||||||
|---|---|---|---|---|---|---|---|---|
|
||||||||
{
"$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
"affected_systems": [
{
"description": "Acrobat 2024 versions ant\u00e9rieures \u00e0 24.001.30356 pour Windows et macOS",
"product": {
"name": "Acrobat",
"vendor": {
"name": "Adobe",
"scada": false
}
}
},
{
"description": " Commerce versions 2.4.8 ant\u00e9rieures \u00e0 4.2.8-p4",
"product": {
"name": "Commerce",
"vendor": {
"name": "Adobe",
"scada": false
}
}
},
{
"description": " Commerce versions 2.4.6 ant\u00e9rieures \u00e0 4.2.6-p14",
"product": {
"name": "Commerce",
"vendor": {
"name": "Adobe",
"scada": false
}
}
},
{
"description": " Commerce versions 2.4.9 ant\u00e9rieures \u00e0 4.2.9-beta1",
"product": {
"name": "Commerce",
"vendor": {
"name": "Adobe",
"scada": false
}
}
},
{
"description": " Commerce versions 2.4.7 ant\u00e9rieures \u00e0 4.2.7-p9",
"product": {
"name": "Commerce",
"vendor": {
"name": "Adobe",
"scada": false
}
}
},
{
"description": " Commerce versions 2.4.4 ant\u00e9rieures \u00e0 4.2.4-p17",
"product": {
"name": "Commerce",
"vendor": {
"name": "Adobe",
"scada": false
}
}
},
{
"description": "Magento Open Source versions 2.4.6 ant\u00e9rieures \u00e0 2.4.6-p14",
"product": {
"name": "Magento",
"vendor": {
"name": "Adobe",
"scada": false
}
}
},
{
"description": "Magento Open Source versions 2.4.7 ant\u00e9rieures \u00e0 2.4.7-p9",
"product": {
"name": "Magento",
"vendor": {
"name": "Adobe",
"scada": false
}
}
},
{
"description": "Magento Open Source versions 2.4.5 ant\u00e9rieures \u00e0 2.4.5-p16",
"product": {
"name": "Magento",
"vendor": {
"name": "Adobe",
"scada": false
}
}
},
{
"description": "Commerce B2B versions 1.5.3 ant\u00e9rieures \u00e0 1.5.3-beta1",
"product": {
"name": "Commerce",
"vendor": {
"name": "Adobe",
"scada": false
}
}
},
{
"description": "Commerce B2B versions 1.3.5 ant\u00e9rieures \u00e0 1.3.5-p14",
"product": {
"name": "Commerce",
"vendor": {
"name": "Adobe",
"scada": false
}
}
},
{
"description": "Acrobat Reader DC versions ant\u00e9rieures \u00e0 25.001.21288 pour Windows et macOS",
"product": {
"name": "Acrobat Reader",
"vendor": {
"name": "Adobe",
"scada": false
}
}
},
{
"description": "Magento Open Source versions 2.4.9 ant\u00e9rieures \u00e0 2.4.9-beta1",
"product": {
"name": "Magento",
"vendor": {
"name": "Adobe",
"scada": false
}
}
},
{
"description": "Commerce B2B versions 1.5.2 ant\u00e9rieures \u00e0 1.5.2-p4",
"product": {
"name": "Commerce",
"vendor": {
"name": "Adobe",
"scada": false
}
}
},
{
"description": "Commerce B2B versions 1.3.3 ant\u00e9rieures \u00e0 1.3.3-p17",
"product": {
"name": "Commerce",
"vendor": {
"name": "Adobe",
"scada": false
}
}
},
{
"description": "Acrobat DC versions ant\u00e9rieures \u00e0 25.001.21288 pour Windows et macOS",
"product": {
"name": "Acrobat",
"vendor": {
"name": "Adobe",
"scada": false
}
}
},
{
"description": " Commerce versions 2.4.5 ant\u00e9rieures \u00e0 4.2.5-p16",
"product": {
"name": "Commerce",
"vendor": {
"name": "Adobe",
"scada": false
}
}
},
{
"description": "Magento Open Source versions 2.4.8 ant\u00e9rieures \u00e0 2.4.8-p4",
"product": {
"name": "Magento",
"vendor": {
"name": "Adobe",
"scada": false
}
}
},
{
"description": "Commerce B2B versions 1.4.2 ant\u00e9rieures \u00e0 1.4.2-p9",
"product": {
"name": "Commerce",
"vendor": {
"name": "Adobe",
"scada": false
}
}
},
{
"description": "Commerce B2B versions 1.3.4 ant\u00e9rieures \u00e0 1.3.4-p16",
"product": {
"name": "Commerce",
"vendor": {
"name": "Adobe",
"scada": false
}
}
}
],
"affected_systems_content": "",
"content": "## Solutions\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des correctifs (cf. section Documentation).",
"cves": [
{
"name": "CVE-2026-27220",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-27220"
},
{
"name": "CVE-2026-27221",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-27221"
},
{
"name": "CVE-2026-21295",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-21295"
},
{
"name": "CVE-2026-21360",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-21360"
},
{
"name": "CVE-2026-27278",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-27278"
},
{
"name": "CVE-2026-21291",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-21291"
},
{
"name": "CVE-2026-21311",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-21311"
},
{
"name": "CVE-2026-21293",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-21293"
},
{
"name": "CVE-2026-21292",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-21292"
},
{
"name": "CVE-2026-21359",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-21359"
},
{
"name": "CVE-2026-21361",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-21361"
},
{
"name": "CVE-2026-21285",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-21285"
},
{
"name": "CVE-2026-21310",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-21310"
},
{
"name": "CVE-2026-21294",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-21294"
},
{
"name": "CVE-2026-21286",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-21286"
},
{
"name": "CVE-2026-21284",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-21284"
},
{
"name": "CVE-2026-21289",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-21289"
},
{
"name": "CVE-2026-21282",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-21282"
},
{
"name": "CVE-2026-21297",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-21297"
},
{
"name": "CVE-2026-21296",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-21296"
},
{
"name": "CVE-2026-21309",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-21309"
},
{
"name": "CVE-2026-21290",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-21290"
}
],
"initial_release_date": "2026-03-11T00:00:00",
"last_revision_date": "2026-03-11T00:00:00",
"links": [],
"reference": "CERTFR-2026-AVI-0264",
"revisions": [
{
"description": "Version initiale",
"revision_date": "2026-03-11T00:00:00.000000"
}
],
"risks": [
{
"description": "D\u00e9ni de service \u00e0 distance"
},
{
"description": "Injection de code indirecte \u00e0 distance (XSS)"
},
{
"description": "Ex\u00e9cution de code arbitraire \u00e0 distance"
},
{
"description": "Falsification de requ\u00eates c\u00f4t\u00e9 serveur (SSRF)"
},
{
"description": "Contournement de la politique de s\u00e9curit\u00e9"
},
{
"description": "Atteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es"
},
{
"description": "\u00c9l\u00e9vation de privil\u00e8ges"
}
],
"summary": "De multiples vuln\u00e9rabilit\u00e9s ont \u00e9t\u00e9 d\u00e9couvertes dans les produits Adobe. Certaines d\u0027entre elles permettent \u00e0 un attaquant de provoquer une ex\u00e9cution de code arbitraire \u00e0 distance, une \u00e9l\u00e9vation de privil\u00e8ges et un d\u00e9ni de service \u00e0 distance.",
"title": "Multiples vuln\u00e9rabilit\u00e9s dans les produits Adobe",
"vendor_advisories": [
{
"published_at": "2026-03-10",
"title": "Bulletin de s\u00e9curit\u00e9 Adobe APSB26-05",
"url": "https://helpx.adobe.com/security/products/magento/apsb26-05.html"
},
{
"published_at": "2026-03-10",
"title": "Bulletin de s\u00e9curit\u00e9 Adobe APSB26-26",
"url": "https://helpx.adobe.com/security/products/acrobat/apsb26-26.html"
}
]
}
厂商已发布了漏洞修复程序,请及时关注更新: https://helpx.adobe.com/security/products/magento/apsb26-05.html
| Name | ['Drupal Commerce <=2.4.9-alpha3', 'Drupal Commerce <=2.4.8-p3', 'Drupal Commerce <=2.4.7-p8', 'Drupal Commerce <=2.4.6-p13', 'Drupal Commerce <=2.4.5-p15', 'Drupal Commerce <=2.4.4-p16', 'Adobe Commerce B2B <=1.5.3-alpha3', 'Adobe Commerce B2B <=1.5.2-p3', 'Adobe Commerce B2B <=1.4.2-p8', 'Adobe Commerce B2B <=1.3.5-p13', 'Adobe Commerce B2B <=1.3.4-p15', 'Adobe Commerce B2B <=1.3.3-p16', 'Adobe Magento Open Source <=2.4.9-alpha3', 'Adobe Magento Open Source <=2.4.8-p3', 'Adobe Magento Open Source <=2.4.7-p8', 'Adobe Magento Open Source <=2.4.6-p13', 'Adobe Magento Open Source <=2.4.5-p15'] |
|---|
{
"cves": {
"cve": {
"cveNumber": "CVE-2026-21297",
"cveUrl": "https://nvd.nist.gov/vuln/detail/CVE-2026-21297"
}
},
"description": "Adobe Commerce\u662f\u7f8e\u56fd\u5965\u591a\u6bd4\uff08Adobe\uff09\u516c\u53f8\u7684\u4e00\u79cd\u9762\u5411\u5546\u5bb6\u548c\u54c1\u724c\u7684\u5168\u7403\u9886\u5148\u7684\u6570\u5b57\u5546\u52a1\u89e3\u51b3\u65b9\u6848\u3002\n\nAdobe Commerce\u5b58\u5728\u6388\u6743\u95ee\u9898\u6f0f\u6d1e\uff0c\u653b\u51fb\u8005\u53ef\u5229\u7528\u8be5\u6f0f\u6d1e\u7ed5\u8fc7\u5b89\u5168\u63aa\u65bd\u5e76\u83b7\u53d6\u5bf9\u529f\u80fd\u7684\u6709\u9650\u672a\u6388\u6743\u8bbf\u95ee\u3002",
"formalWay": "\u5382\u5546\u5df2\u53d1\u5e03\u4e86\u6f0f\u6d1e\u4fee\u590d\u7a0b\u5e8f\uff0c\u8bf7\u53ca\u65f6\u5173\u6ce8\u66f4\u65b0\uff1a\r\nhttps://helpx.adobe.com/security/products/magento/apsb26-05.html",
"isEvent": "\u901a\u7528\u8f6f\u786c\u4ef6\u6f0f\u6d1e",
"number": "CNVD-2026-15170",
"openTime": "2026-03-27",
"patchDescription": "Adobe Commerce\u662f\u7f8e\u56fd\u5965\u591a\u6bd4\uff08Adobe\uff09\u516c\u53f8\u7684\u4e00\u79cd\u9762\u5411\u5546\u5bb6\u548c\u54c1\u724c\u7684\u5168\u7403\u9886\u5148\u7684\u6570\u5b57\u5546\u52a1\u89e3\u51b3\u65b9\u6848\u3002\r\n\r\nAdobe Commerce\u5b58\u5728\u6388\u6743\u95ee\u9898\u6f0f\u6d1e\uff0c\u653b\u51fb\u8005\u53ef\u5229\u7528\u8be5\u6f0f\u6d1e\u7ed5\u8fc7\u5b89\u5168\u63aa\u65bd\u5e76\u83b7\u53d6\u5bf9\u529f\u80fd\u7684\u6709\u9650\u672a\u6388\u6743\u8bbf\u95ee\u3002\u76ee\u524d\uff0c\u4f9b\u5e94\u5546\u53d1\u5e03\u4e86\u5b89\u5168\u516c\u544a\u53ca\u76f8\u5173\u8865\u4e01\u4fe1\u606f\uff0c\u4fee\u590d\u4e86\u6b64\u6f0f\u6d1e\u3002",
"patchName": "Adobe Commerce\u6388\u6743\u95ee\u9898\u6f0f\u6d1e\uff08CNVD-2026-15170\uff09\u7684\u8865\u4e01",
"products": {
"product": [
"Drupal Commerce \u003c=2.4.9-alpha3",
"Drupal Commerce \u003c=2.4.8-p3",
"Drupal Commerce \u003c=2.4.7-p8",
"Drupal Commerce \u003c=2.4.6-p13",
"Drupal Commerce \u003c=2.4.5-p15",
"Drupal Commerce \u003c=2.4.4-p16",
"Adobe Commerce B2B \u003c=1.5.3-alpha3",
"Adobe Commerce B2B \u003c=1.5.2-p3",
"Adobe Commerce B2B \u003c=1.4.2-p8",
"Adobe Commerce B2B \u003c=1.3.5-p13",
"Adobe Commerce B2B \u003c=1.3.4-p15",
"Adobe Commerce B2B \u003c=1.3.3-p16",
"Adobe Magento Open Source \u003c=2.4.9-alpha3",
"Adobe Magento Open Source \u003c=2.4.8-p3",
"Adobe Magento Open Source \u003c=2.4.7-p8",
"Adobe Magento Open Source \u003c=2.4.6-p13",
"Adobe Magento Open Source \u003c=2.4.5-p15"
]
},
"referenceLink": "https://helpx.adobe.com/security/products/magento/apsb26-05.html",
"serverity": "\u4e2d",
"submitTime": "2026-03-17",
"title": "Adobe Commerce\u6388\u6743\u95ee\u9898\u6f0f\u6d1e\uff08CNVD-2026-15170\uff09"
}
FKIE_CVE-2026-21297
Vulnerability from fkie_nvd - Published: 2026-03-11 03:15 - Updated: 2026-06-17 10:18| URL | Tags | ||
|---|---|---|---|
| psirt@adobe.com | https://helpx.adobe.com/security/products/magento/apsb26-05.html | Vendor Advisory |
{
"affected": [
{
"affectedData": [
{
"defaultStatus": "affected",
"product": "Adobe Commerce",
"vendor": "Adobe",
"versions": [
{
"lessThanOrEqual": "2.4.4-p16",
"status": "affected",
"version": "0",
"versionType": "semver"
}
]
}
],
"source": "psirt@adobe.com"
}
],
"configurations": [
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:a:adobe:commerce:*:*:*:*:*:*:*:*",
"matchCriteriaId": "76AAB57F-7723-44E0-B91A-9F120C849AC4",
"versionEndExcluding": "2.4.4",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:adobe:commerce:2.4.4:-:*:*:*:*:*:*",
"matchCriteriaId": "D258D9EF-94FB-41F0-A7A5-7F66FA7A0055",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:adobe:commerce:2.4.4:p1:*:*:*:*:*:*",
"matchCriteriaId": "4E5CF6F0-2388-4D3F-8FE1-43B8AF148564",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:adobe:commerce:2.4.4:p10:*:*:*:*:*:*",
"matchCriteriaId": "1C3D7164-1C5F-40BC-9EEC-B0E00CD45808",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:adobe:commerce:2.4.4:p11:*:*:*:*:*:*",
"matchCriteriaId": "68AAE162-5957-42AF-BE20-40F341837FAC",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:adobe:commerce:2.4.4:p12:*:*:*:*:*:*",
"matchCriteriaId": "D9D01159-3309-4F6B-93B0-2D89DDD33DEE",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:adobe:commerce:2.4.4:p13:*:*:*:*:*:*",
"matchCriteriaId": "91736E79-D8E7-4AF2-8E01-A7B4EB8AD6F4",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:adobe:commerce:2.4.4:p14:*:*:*:*:*:*",
"matchCriteriaId": "8412C043-64E7-4DFF-A303-13A6FE113BFB",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:adobe:commerce:2.4.4:p15:*:*:*:*:*:*",
"matchCriteriaId": "BBDA2BCF-E784-4CF3-B30D-6FF5BEE2055F",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:adobe:commerce:2.4.4:p16:*:*:*:*:*:*",
"matchCriteriaId": "00909C10-6C93-4735-94ED-18DCBD608A28",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:adobe:commerce:2.4.4:p2:*:*:*:*:*:*",
"matchCriteriaId": "D6D6F1A7-ABB5-4EDC-9EA8-98B74518847A",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:adobe:commerce:2.4.4:p3:*:*:*:*:*:*",
"matchCriteriaId": "CFEBDDF2-6443-4482-83B2-3CD272CF599F",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:adobe:commerce:2.4.4:p4:*:*:*:*:*:*",
"matchCriteriaId": "6661093F-8D22-450F-BC6C-A8894A52E6A9",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:adobe:commerce:2.4.4:p5:*:*:*:*:*:*",
"matchCriteriaId": "2515DA6D-2E74-4A05-BD29-FEEF3322BCB6",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:adobe:commerce:2.4.4:p6:*:*:*:*:*:*",
"matchCriteriaId": "69A1F1F7-E53C-40F3-B3D9-DC011FC353BF",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:adobe:commerce:2.4.4:p7:*:*:*:*:*:*",
"matchCriteriaId": "6A56E96C-6CE5-442C-AA88-F0059B02B5E7",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:adobe:commerce:2.4.4:p8:*:*:*:*:*:*",
"matchCriteriaId": "8867F510-201C-4199-8554-53DE156CE669",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:adobe:commerce:2.4.4:p9:*:*:*:*:*:*",
"matchCriteriaId": "23988132-DD4E-4968-B6B8-954122F76081",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:adobe:commerce:2.4.5:-:*:*:*:*:*:*",
"matchCriteriaId": "9B07F7B2-E915-4EFF-8FFC-91143CEF082E",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:adobe:commerce:2.4.5:p1:*:*:*:*:*:*",
"matchCriteriaId": "7F5E9DB6-1386-4274-8270-2FE0F0CAF7FD",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:adobe:commerce:2.4.5:p10:*:*:*:*:*:*",
"matchCriteriaId": "5764CC97-C866-415D-A3A1-5B5B9E1C06A6",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:adobe:commerce:2.4.5:p11:*:*:*:*:*:*",
"matchCriteriaId": "E82D10D8-2894-4E5B-B47B-F00964DD5CDE",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:adobe:commerce:2.4.5:p12:*:*:*:*:*:*",
"matchCriteriaId": "B044F2D9-E888-4852-8A40-DCE688860ED3",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:adobe:commerce:2.4.5:p13:*:*:*:*:*:*",
"matchCriteriaId": "6423C754-36F9-4680-9211-60940ED63E79",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:adobe:commerce:2.4.5:p14:*:*:*:*:*:*",
"matchCriteriaId": "3472064A-8C79-436B-965A-96834AE8D346",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:adobe:commerce:2.4.5:p15:*:*:*:*:*:*",
"matchCriteriaId": "CDA8ABEB-F955-4D34-8219-C518B49F5543",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:adobe:commerce:2.4.5:p2:*:*:*:*:*:*",
"matchCriteriaId": "8605E4E6-0F7D-42C8-B35B-2349A0BEFC69",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:adobe:commerce:2.4.5:p3:*:*:*:*:*:*",
"matchCriteriaId": "B6318F97-E59A-4425-8DC7-045C78A644F8",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:adobe:commerce:2.4.5:p4:*:*:*:*:*:*",
"matchCriteriaId": "324A573E-DBC8-42A0-8CB8-EDD8FBAB7115",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:adobe:commerce:2.4.5:p5:*:*:*:*:*:*",
"matchCriteriaId": "54151A00-CFB8-4E6A-8E74-497CB67BF7E2",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:adobe:commerce:2.4.5:p6:*:*:*:*:*:*",
"matchCriteriaId": "6DF0E74D-9293-4209-97D1-A3BA13C3DDE9",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:adobe:commerce:2.4.5:p7:*:*:*:*:*:*",
"matchCriteriaId": "8922D646-1A97-47ED-91C6-5A426781C98A",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:adobe:commerce:2.4.5:p8:*:*:*:*:*:*",
"matchCriteriaId": "952787C6-9BF1-49FB-9824-1236678E1902",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:adobe:commerce:2.4.5:p9:*:*:*:*:*:*",
"matchCriteriaId": "898A8679-3C46-4718-9EDF-583ADDFCF2EC",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:adobe:commerce:2.4.6:-:*:*:*:*:*:*",
"matchCriteriaId": "7C7AFBB1-F9C9-4BDE-BCEF-94C9F0AC6798",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:adobe:commerce:2.4.6:p1:*:*:*:*:*:*",
"matchCriteriaId": "D6086841-C175-46A1-8414-71C6163A0E7A",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:adobe:commerce:2.4.6:p10:*:*:*:*:*:*",
"matchCriteriaId": "E57889CC-3E90-46AF-9CD6-3328DD501AD1",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:adobe:commerce:2.4.6:p11:*:*:*:*:*:*",
"matchCriteriaId": "47A86566-DE38-4032-947D-B6181F0BC120",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:adobe:commerce:2.4.6:p12:*:*:*:*:*:*",
"matchCriteriaId": "B7D1D684-CE7E-4D6D-95B5-1F86A8DB6C66",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:adobe:commerce:2.4.6:p13:*:*:*:*:*:*",
"matchCriteriaId": "CABF5BD0-1D06-483D-91D3-A773D99EF217",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:adobe:commerce:2.4.6:p2:*:*:*:*:*:*",
"matchCriteriaId": "D2E0DDD1-0F4A-4F96-B25D-40A39A1A535A",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:adobe:commerce:2.4.6:p3:*:*:*:*:*:*",
"matchCriteriaId": "A576B1B5-73A2-431E-998F-7E5458B51D6A",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:adobe:commerce:2.4.6:p4:*:*:*:*:*:*",
"matchCriteriaId": "0E05F4AC-2A28-47E3-96DE-0E31AF73CD43",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:adobe:commerce:2.4.6:p5:*:*:*:*:*:*",
"matchCriteriaId": "3A9A62EE-1649-4815-8EC9-7AEF7949EB2F",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:adobe:commerce:2.4.6:p6:*:*:*:*:*:*",
"matchCriteriaId": "E58690F9-FA9C-42A0-B4CD-91FD1197A53E",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:adobe:commerce:2.4.6:p7:*:*:*:*:*:*",
"matchCriteriaId": "77D01D8B-1FBC-43CA-90F9-C89D9B4D18F0",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:adobe:commerce:2.4.6:p8:*:*:*:*:*:*",
"matchCriteriaId": "8B83729E-80AF-47CE-A70C-32BF83024A40",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:adobe:commerce:2.4.6:p9:*:*:*:*:*:*",
"matchCriteriaId": "73D22D42-646D-4955-A6F9-9B7BA63DC0A9",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:adobe:commerce:2.4.7:-:*:*:*:*:*:*",
"matchCriteriaId": "B5D04853-0C2F-47DD-A939-3A8F6E22CB7D",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:adobe:commerce:2.4.7:b1:*:*:*:*:*:*",
"matchCriteriaId": "6EBB0608-034B-4F07-A59B-9E6A989BA260",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:adobe:commerce:2.4.7:b2:*:*:*:*:*:*",
"matchCriteriaId": "B3BF9B08-84E3-4974-9DEB-F4285995D796",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:adobe:commerce:2.4.7:beta3:*:*:*:*:*:*",
"matchCriteriaId": "7771BEDB-05E2-430E-B2A2-E2F7574B7114",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:adobe:commerce:2.4.7:p1:*:*:*:*:*:*",
"matchCriteriaId": "2E05341A-C70C-4B3D-AF30-9520D6B97D30",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:adobe:commerce:2.4.7:p2:*:*:*:*:*:*",
"matchCriteriaId": "4D98B52E-3B59-4327-AC7E-DDBB0ADA08F6",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:adobe:commerce:2.4.7:p3:*:*:*:*:*:*",
"matchCriteriaId": "95026AA9-A28B-4D94-BD77-7628429EBA30",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:adobe:commerce:2.4.7:p4:*:*:*:*:*:*",
"matchCriteriaId": "83FD1220-7D46-42B2-8110-30A934144572",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:adobe:commerce:2.4.7:p5:*:*:*:*:*:*",
"matchCriteriaId": "3F1439CE-8A3B-414A-B974-559209FF480C",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:adobe:commerce:2.4.7:p6:*:*:*:*:*:*",
"matchCriteriaId": "13726DEE-FFCB-447B-9FFF-136F132F2C4C",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:adobe:commerce:2.4.7:p7:*:*:*:*:*:*",
"matchCriteriaId": "1A9443CE-AE1F-4D66-9C88-5E2E3FD28EE6",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:adobe:commerce:2.4.7:p8:*:*:*:*:*:*",
"matchCriteriaId": "B5E29EF8-2569-4258-A66F-E1E5F621E0D4",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:adobe:commerce:2.4.8:-:*:*:*:*:*:*",
"matchCriteriaId": "1EE12F4B-5607-4790-A29B-EE23383BCC1A",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:adobe:commerce:2.4.8:beta1:*:*:*:*:*:*",
"matchCriteriaId": "6D05A958-9749-486A-A149-C21647CDCADF",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:adobe:commerce:2.4.8:beta2:*:*:*:*:*:*",
"matchCriteriaId": "C9E12B43-AD3E-48A2-9042-5586186CA3BE",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:adobe:commerce:2.4.8:p1:*:*:*:*:*:*",
"matchCriteriaId": "C267AF14-7BA8-4D1F-BCD9-BE3ED0DA3D25",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:adobe:commerce:2.4.8:p2:*:*:*:*:*:*",
"matchCriteriaId": "B4947C63-CFD9-437B-A09E-A197DCE40095",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:adobe:commerce:2.4.8:p3:*:*:*:*:*:*",
"matchCriteriaId": "7FB6D020-2E5C-4789-A063-2C907F3CF3FA",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:adobe:commerce:2.4.9:alpha1:*:*:*:*:*:*",
"matchCriteriaId": "37F32F70-7B2A-4BAB-B3F0-AFF5C04CCDED",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:adobe:commerce:2.4.9:alpha2:*:*:*:*:*:*",
"matchCriteriaId": "8B6B7609-6A8E-4154-BC05-2A9099909684",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:adobe:commerce:2.4.9:alpha3:*:*:*:*:*:*",
"matchCriteriaId": "BAFF35B5-CA01-40ED-B410-3E3286C370BE",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
}
]
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:a:adobe:commerce_b2b:*:*:*:*:*:*:*:*",
"matchCriteriaId": "28120C2E-10AD-4476-B6C3-BE3A43946068",
"versionEndExcluding": "1.3.3",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:adobe:commerce_b2b:1.3.3:-:*:*:*:*:*:*",
"matchCriteriaId": "C4667AA3-4CC9-41C0-8E0C-19B0FCE1CF79",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:adobe:commerce_b2b:1.3.3:p1:*:*:*:*:*:*",
"matchCriteriaId": "E396FB4F-B20A-4BF9-8FBD-014A0F197F08",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:adobe:commerce_b2b:1.3.3:p10:*:*:*:*:*:*",
"matchCriteriaId": "2ADE32D1-2845-4030-BE1F-ECE28189D0F9",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:adobe:commerce_b2b:1.3.3:p11:*:*:*:*:*:*",
"matchCriteriaId": "F2E771C9-86C4-455C-98D4-6F4FE7A9A822",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:adobe:commerce_b2b:1.3.3:p12:*:*:*:*:*:*",
"matchCriteriaId": "491AB715-F62A-46DB-A56E-055CF7CB7BEF",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:adobe:commerce_b2b:1.3.3:p13:*:*:*:*:*:*",
"matchCriteriaId": "6FE364A8-4780-426F-9E8A-284A31FE2623",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:adobe:commerce_b2b:1.3.3:p14:*:*:*:*:*:*",
"matchCriteriaId": "F9258027-8A6A-4C6A-BC6F-349B6E03D828",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:adobe:commerce_b2b:1.3.3:p15:*:*:*:*:*:*",
"matchCriteriaId": "934C52C7-8751-481E-BAA7-F631C4E31F32",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:adobe:commerce_b2b:1.3.3:p16:*:*:*:*:*:*",
"matchCriteriaId": "D3C5847F-57AA-4ADA-8997-5D4F5FDFF50E",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:adobe:commerce_b2b:1.3.3:p2:*:*:*:*:*:*",
"matchCriteriaId": "5677B7E2-FA07-4536-96A9-2C64BEFD3751",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:adobe:commerce_b2b:1.3.3:p3:*:*:*:*:*:*",
"matchCriteriaId": "2DCD1522-6E27-474F-9FC6-413409D6AD55",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:adobe:commerce_b2b:1.3.3:p4:*:*:*:*:*:*",
"matchCriteriaId": "B7968FCA-CCFD-4222-8FB8-E6E21107944F",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:adobe:commerce_b2b:1.3.3:p5:*:*:*:*:*:*",
"matchCriteriaId": "8C175A1F-7814-4C51-A7B7-AD5140F0688F",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:adobe:commerce_b2b:1.3.3:p6:*:*:*:*:*:*",
"matchCriteriaId": "E66CBFB3-40C3-474A-A3A3-12135F610814",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:adobe:commerce_b2b:1.3.3:p7:*:*:*:*:*:*",
"matchCriteriaId": "F51DFA17-1875-41A9-B141-D89BB6238B3F",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:adobe:commerce_b2b:1.3.3:p8:*:*:*:*:*:*",
"matchCriteriaId": "5A4D10EF-9137-4DF5-A5DD-97907E8B4C02",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:adobe:commerce_b2b:1.3.3:p9:*:*:*:*:*:*",
"matchCriteriaId": "5CD0DC76-7181-4954-A59E-AB7BB47D0576",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:adobe:commerce_b2b:1.3.4:-:*:*:*:*:*:*",
"matchCriteriaId": "1C90C433-6655-4038-9AB3-0304C1AFF360",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:adobe:commerce_b2b:1.3.4:p1:*:*:*:*:*:*",
"matchCriteriaId": "374E7EDD-512A-4633-A136-01A656935334",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:adobe:commerce_b2b:1.3.4:p10:*:*:*:*:*:*",
"matchCriteriaId": "89BAB227-03E6-4776-ADE4-9D9CB666EFD9",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:adobe:commerce_b2b:1.3.4:p11:*:*:*:*:*:*",
"matchCriteriaId": "0E5ACABA-D6D6-4F29-A9DD-5A04A44ABE64",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:adobe:commerce_b2b:1.3.4:p12:*:*:*:*:*:*",
"matchCriteriaId": "FA80AFCE-2663-46C0-AEC0-C16C8E675E6A",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:adobe:commerce_b2b:1.3.4:p13:*:*:*:*:*:*",
"matchCriteriaId": "EB9955CA-7E7B-40D3-A85D-58BB0D9AC897",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:adobe:commerce_b2b:1.3.4:p14:*:*:*:*:*:*",
"matchCriteriaId": "5D0A17AC-D433-47C2-A1AC-88291DCCECCD",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:adobe:commerce_b2b:1.3.4:p15:*:*:*:*:*:*",
"matchCriteriaId": "7E0FD85B-E851-436D-A789-852DD26A3B56",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:adobe:commerce_b2b:1.3.4:p2:*:*:*:*:*:*",
"matchCriteriaId": "0E9D364A-C858-4160-8B8B-33ECF94796D9",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:adobe:commerce_b2b:1.3.4:p3:*:*:*:*:*:*",
"matchCriteriaId": "61559E50-581E-40FF-9FD4-10192ECFCD04",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:adobe:commerce_b2b:1.3.4:p4:*:*:*:*:*:*",
"matchCriteriaId": "DE3BFB41-5633-4167-B1EA-9E958BCE9DC2",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:adobe:commerce_b2b:1.3.4:p5:*:*:*:*:*:*",
"matchCriteriaId": "F2C525D2-837D-486A-8B38-5634AE2ECE2B",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:adobe:commerce_b2b:1.3.4:p6:*:*:*:*:*:*",
"matchCriteriaId": "6F220229-F2DF-4C9D-90A6-8B09F8BE3391",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:adobe:commerce_b2b:1.3.4:p7:*:*:*:*:*:*",
"matchCriteriaId": "63AB9506-3F8E-4C2E-A859-2380431C15A6",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:adobe:commerce_b2b:1.3.4:p8:*:*:*:*:*:*",
"matchCriteriaId": "51B76658-EA6B-4AC9-9D9C-374C5308D069",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:adobe:commerce_b2b:1.3.4:p9:*:*:*:*:*:*",
"matchCriteriaId": "6E94B136-7A2C-47F0-BCE4-6BB8E776A305",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:adobe:commerce_b2b:1.3.5:-:*:*:*:*:*:*",
"matchCriteriaId": "3C5C3F26-24F0-4CF5-AA2E-7CA13E9D17DB",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:adobe:commerce_b2b:1.3.5:p1:*:*:*:*:*:*",
"matchCriteriaId": "E888424C-B9F2-4AE7-A77A-39F34143548F",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:adobe:commerce_b2b:1.3.5:p10:*:*:*:*:*:*",
"matchCriteriaId": "A4BE67D7-6463-4179-8C68-298CF960DBC2",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:adobe:commerce_b2b:1.3.5:p11:*:*:*:*:*:*",
"matchCriteriaId": "6CFD1C81-A05D-4E92-9BF5-244021808C77",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:adobe:commerce_b2b:1.3.5:p12:*:*:*:*:*:*",
"matchCriteriaId": "0ADE4696-7DAE-45F3-9161-04AF9FB8DAB1",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:adobe:commerce_b2b:1.3.5:p13:*:*:*:*:*:*",
"matchCriteriaId": "79DFA5ED-2AA5-4DD6-BFB2-3D0B090C0BD9",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:adobe:commerce_b2b:1.3.5:p2:*:*:*:*:*:*",
"matchCriteriaId": "CE97B86B-32CE-4E7F-BA98-C1059BF7BFF4",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:adobe:commerce_b2b:1.3.5:p3:*:*:*:*:*:*",
"matchCriteriaId": "41CEF959-997F-47C9-8186-D4D56C6F4D4F",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:adobe:commerce_b2b:1.3.5:p4:*:*:*:*:*:*",
"matchCriteriaId": "A83DCE0F-E201-4753-9164-F01D46172248",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:adobe:commerce_b2b:1.3.5:p5:*:*:*:*:*:*",
"matchCriteriaId": "8CFAABD7-7658-4A32-B5E3-13F6214BABCD",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:adobe:commerce_b2b:1.3.5:p6:*:*:*:*:*:*",
"matchCriteriaId": "CE880F0B-EC8C-429B-9257-E6F890872F7E",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:adobe:commerce_b2b:1.3.5:p7:*:*:*:*:*:*",
"matchCriteriaId": "66F3EA5F-08A2-4A1E-82D3-BBE7FFA2667E",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:adobe:commerce_b2b:1.3.5:p8:*:*:*:*:*:*",
"matchCriteriaId": "7930F188-A689-4041-BF4F-FBCA579D2E49",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:adobe:commerce_b2b:1.3.5:p9:*:*:*:*:*:*",
"matchCriteriaId": "45090787-93BF-4683-B1E2-7D12FB18BEED",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:adobe:commerce_b2b:1.4.2:-:*:*:*:*:*:*",
"matchCriteriaId": "15C638A8-EFE0-47DB-B1F9-34093AF0FC17",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:adobe:commerce_b2b:1.4.2:p1:*:*:*:*:*:*",
"matchCriteriaId": "CB863404-A9D7-4692-AB43-08945E669928",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:adobe:commerce_b2b:1.4.2:p2:*:*:*:*:*:*",
"matchCriteriaId": "D8CFA8F4-D57D-4D0F-88D5-00A72E3AD8DA",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:adobe:commerce_b2b:1.4.2:p3:*:*:*:*:*:*",
"matchCriteriaId": "A21F608C-C356-47B8-8FBB-DB28BABFC4C6",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:adobe:commerce_b2b:1.4.2:p4:*:*:*:*:*:*",
"matchCriteriaId": "E14195F1-5016-46BE-A614-6FB4E312FC93",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:adobe:commerce_b2b:1.4.2:p5:*:*:*:*:*:*",
"matchCriteriaId": "9C360EA8-B18F-4327-90EF-7EED2892BE4F",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:adobe:commerce_b2b:1.4.2:p6:*:*:*:*:*:*",
"matchCriteriaId": "500E3A54-D7C7-4887-9EA6-7DF85389A831",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:adobe:commerce_b2b:1.4.2:p7:*:*:*:*:*:*",
"matchCriteriaId": "ED6FFC1D-E921-4FF7-9928-015630613FE1",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:adobe:commerce_b2b:1.4.2:p8:*:*:*:*:*:*",
"matchCriteriaId": "FB8CAC6E-DA06-4C82-B148-38234D4EB910",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:adobe:commerce_b2b:1.5.2:-:*:*:*:*:*:*",
"matchCriteriaId": "D855D141-7876-4F5A-91BE-6350DD379879",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:adobe:commerce_b2b:1.5.2:p1:*:*:*:*:*:*",
"matchCriteriaId": "79CBDF59-EB84-44D3-81CF-5CBF943B411E",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:adobe:commerce_b2b:1.5.2:p2:*:*:*:*:*:*",
"matchCriteriaId": "2117B163-D88E-4EB4-AEA7-F27FB732BD48",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:adobe:commerce_b2b:1.5.2:p3:*:*:*:*:*:*",
"matchCriteriaId": "33E56E15-320F-4517-85C1-832A5942944C",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:adobe:commerce_b2b:1.5.3:alpha1:*:*:*:*:*:*",
"matchCriteriaId": "508EE0EF-D54A-4834-84AB-FFC62040FDAB",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:adobe:commerce_b2b:1.5.3:alpha2:*:*:*:*:*:*",
"matchCriteriaId": "4D7C6592-33B0-4586-8178-E8F4EB837B7F",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:adobe:commerce_b2b:1.5.3:alpha3:*:*:*:*:*:*",
"matchCriteriaId": "CCC24542-4237-46E4-98C5-0E9D08C3D4D6",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
}
]
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:a:adobe:magento:*:*:*:*:open_source:*:*:*",
"matchCriteriaId": "5CA94A87-BA10-4D46-B46D-3DAD379CEEAA",
"versionEndExcluding": "2.4.5",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:adobe:magento:2.4.5:-:*:*:open_source:*:*:*",
"matchCriteriaId": "7A41C717-4B9F-4972-ABA3-2294EEC20F3E",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:adobe:magento:2.4.5:p1:*:*:open_source:*:*:*",
"matchCriteriaId": "3FA80BBC-2DF2-46E1-84CE-8A899415114E",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:adobe:magento:2.4.5:p10:*:*:open_source:*:*:*",
"matchCriteriaId": "783E4AF1-52F3-446B-B003-8079EDA78CBF",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:adobe:magento:2.4.5:p11:*:*:open_source:*:*:*",
"matchCriteriaId": "08B7898F-E25A-4D16-A007-6D4543E80C58",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:adobe:magento:2.4.5:p12:*:*:open_source:*:*:*",
"matchCriteriaId": "313CB0C1-2E8C-46AC-B72B-AFA9E0A6E064",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:adobe:magento:2.4.5:p13:*:*:open_source:*:*:*",
"matchCriteriaId": "E99C1F27-68C9-481F-B01D-8B58B0AFB437",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:adobe:magento:2.4.5:p14:*:*:open_source:*:*:*",
"matchCriteriaId": "D4A3F4C7-8784-43BD-A11B-E66872DD8812",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:adobe:magento:2.4.5:p15:*:*:open_source:*:*:*",
"matchCriteriaId": "6FA6582B-1AA2-4DCD-ADA5-B00C20D18588",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:adobe:magento:2.4.5:p2:*:*:open_source:*:*:*",
"matchCriteriaId": "510B1840-AE77-4BDD-9C09-26C64CC8FC81",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:adobe:magento:2.4.5:p3:*:*:open_source:*:*:*",
"matchCriteriaId": "FA1EDF58-8384-48C4-A584-54D24F6F7973",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:adobe:magento:2.4.5:p4:*:*:open_source:*:*:*",
"matchCriteriaId": "9D2D9715-3A6B-4BE0-B1C5-8D19A683A083",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:adobe:magento:2.4.5:p5:*:*:open_source:*:*:*",
"matchCriteriaId": "1C99B578-5DD6-476D-BB75-4DCAD7F79535",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:adobe:magento:2.4.5:p6:*:*:open_source:*:*:*",
"matchCriteriaId": "7C1B2897-79A5-4A5B-9137-7A4B6B85AA84",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:adobe:magento:2.4.5:p7:*:*:open_source:*:*:*",
"matchCriteriaId": "B9E8299D-FA97-483A-8E1B-BA7B869E467D",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:adobe:magento:2.4.5:p8:*:*:open_source:*:*:*",
"matchCriteriaId": "9A1B92EC-E83A-43B3-8F14-5C1A52B579B1",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:adobe:magento:2.4.5:p9:*:*:open_source:*:*:*",
"matchCriteriaId": "E5F2B6F1-AE8F-4AEE-9AB3-080976AE48B7",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:adobe:magento:2.4.6:-:*:*:open_source:*:*:*",
"matchCriteriaId": "789BD987-9DAD-4EAE-93DE-0E267D54F124",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:adobe:magento:2.4.6:p1:*:*:open_source:*:*:*",
"matchCriteriaId": "A3F113C0-00C5-4BC2-B42B-8AE3756252F2",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:adobe:magento:2.4.6:p10:*:*:open_source:*:*:*",
"matchCriteriaId": "AE842CC8-7795-4238-B727-0BA2FFFBF62C",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:adobe:magento:2.4.6:p11:*:*:open_source:*:*:*",
"matchCriteriaId": "AE724531-422D-4ABB-98F5-2C0B1BBEF031",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:adobe:magento:2.4.6:p12:*:*:open_source:*:*:*",
"matchCriteriaId": "BB499397-0E40-45B0-A7E9-BEFCC909DD07",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:adobe:magento:2.4.6:p13:*:*:open_source:*:*:*",
"matchCriteriaId": "0F972E57-B08E-46DF-88F1-A3002F001E83",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:adobe:magento:2.4.6:p2:*:*:open_source:*:*:*",
"matchCriteriaId": "02592D65-2D2C-460A-A970-8A18F9B156ED",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:adobe:magento:2.4.6:p3:*:*:open_source:*:*:*",
"matchCriteriaId": "457B89CF-C75E-4ED6-8603-9C52BA462A9E",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:adobe:magento:2.4.6:p4:*:*:open_source:*:*:*",
"matchCriteriaId": "A572A2DC-2DAB-4ABE-8FC2-5AF2340C826F",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:adobe:magento:2.4.6:p5:*:*:open_source:*:*:*",
"matchCriteriaId": "2A2DD9C6-BAF5-4DF5-9C14-3478923B2019",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:adobe:magento:2.4.6:p6:*:*:open_source:*:*:*",
"matchCriteriaId": "BA9CFC70-24CF-4DFA-AEF9-9B5A9DAF837D",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:adobe:magento:2.4.6:p7:*:*:open_source:*:*:*",
"matchCriteriaId": "2AA0B806-ABB8-4C18-9F9C-8291BE208F52",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:adobe:magento:2.4.6:p8:*:*:open_source:*:*:*",
"matchCriteriaId": "AA9D4DAB-7567-48D7-BE60-2A10B35CFF27",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:adobe:magento:2.4.6:p9:*:*:open_source:*:*:*",
"matchCriteriaId": "A91E797D-63F6-4DE8-869C-AF0133DC6C03",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:adobe:magento:2.4.7:-:*:*:open_source:*:*:*",
"matchCriteriaId": "0E06FE04-8844-4409-92D9-4972B47C921B",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:adobe:magento:2.4.7:b1:*:*:open_source:*:*:*",
"matchCriteriaId": "99C620F3-40ED-4D7F-B6A1-205E948FD6F5",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:adobe:magento:2.4.7:b2:*:*:open_source:*:*:*",
"matchCriteriaId": "FBCFE5FB-FAB7-4BF0-90AE-79F9590FD872",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:adobe:magento:2.4.7:beta3:*:*:open_source:*:*:*",
"matchCriteriaId": "7EB4B9C5-513C-4039-8087-5E8880894318",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:adobe:magento:2.4.7:p1:*:*:open_source:*:*:*",
"matchCriteriaId": "9C77154A-DBFE-48C3-A274-03075A0DB040",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:adobe:magento:2.4.7:p2:*:*:open_source:*:*:*",
"matchCriteriaId": "F5AAC414-623C-444F-9BD5-EE0ACE2B2246",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:adobe:magento:2.4.7:p3:*:*:open_source:*:*:*",
"matchCriteriaId": "8292888D-B0B0-4DF3-8719-EA4CDCAB39D1",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:adobe:magento:2.4.7:p4:*:*:open_source:*:*:*",
"matchCriteriaId": "9830E074-FDCF-41E9-98C7-10C20424EF4C",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:adobe:magento:2.4.7:p5:*:*:open_source:*:*:*",
"matchCriteriaId": "9D0C8648-B39E-47C7-AA5C-3AFED22F8D40",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:adobe:magento:2.4.7:p6:*:*:open_source:*:*:*",
"matchCriteriaId": "082F8B60-ECC5-4C55-BBFE-A0C8A3E95590",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:adobe:magento:2.4.7:p7:*:*:open_source:*:*:*",
"matchCriteriaId": "A7B83AD4-3134-414A-80E3-106C3C0F975A",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:adobe:magento:2.4.7:p8:*:*:open_source:*:*:*",
"matchCriteriaId": "FAA14D5B-ACF2-497B-ACE7-33C42682D2DF",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:adobe:magento:2.4.8:-:*:*:open_source:*:*:*",
"matchCriteriaId": "00E8284F-10CD-449C-AEF1-688B8287292F",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:adobe:magento:2.4.8:beta1:*:*:open_source:*:*:*",
"matchCriteriaId": "59C10C74-FDB1-46EC-8F41-F3AC24AEFB7D",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:adobe:magento:2.4.8:beta2:*:*:open_source:*:*:*",
"matchCriteriaId": "2957B390-52C5-48D7-A6D7-709BC76B9C69",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:adobe:magento:2.4.8:p1:*:*:open_source:*:*:*",
"matchCriteriaId": "524F64B6-F7F7-4926-884F-E9448636007C",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:adobe:magento:2.4.8:p2:*:*:open_source:*:*:*",
"matchCriteriaId": "9F56F919-69B6-4A77-B8CE-F13409542F14",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:adobe:magento:2.4.8:p3:*:*:open_source:*:*:*",
"matchCriteriaId": "F81D46F6-AEA3-4A83-A6F5-2231FD4CEC46",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:adobe:magento:2.4.9:alpha3:*:*:open_source:*:*:*",
"matchCriteriaId": "D38BAED7-20E6-4750-8E97-829302ED42D2",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
}
]
}
],
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "Adobe Commerce versions 2.4.9-alpha3, 2.4.8-p3, 2.4.7-p8, 2.4.6-p13, 2.4.5-p15, 2.4.4-p16 and earlier are affected by an Incorrect Authorization vulnerability that could result in a Security feature bypass. A low-privileged attacker could leverage this vulnerability to bypass security measures and gain limited unauthorized access to a feature. Exploitation of this issue does not require user interaction."
},
{
"lang": "es",
"value": "Las versiones de Adobe Commerce 2.4.9-alpha3, 2.4.8-p3, 2.4.7-p8, 2.4.6-p13, 2.4.5-p15, 2.4.4-p16 y anteriores est\u00e1n afectadas por una vulnerabilidad de Autorizaci\u00f3n Incorrecta que podr\u00eda resultar en una omisi\u00f3n de caracter\u00edstica de seguridad. Un atacante con pocos privilegios podr\u00eda aprovechar esta vulnerabilidad para omitir medidas de seguridad y obtener acceso no autorizado limitado a una caracter\u00edstica. La explotaci\u00f3n de este problema no requiere interacci\u00f3n del usuario."
}
],
"id": "CVE-2026-21297",
"lastModified": "2026-06-17T10:18:26.737",
"metrics": {
"cvssMetricV31": [
{
"cvssData": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "LOW",
"integrityImpact": "NONE",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
"version": "3.1"
},
"exploitabilityScore": 2.8,
"impactScore": 1.4,
"source": "psirt@adobe.com",
"type": "Secondary"
}
],
"ssvcV203": [
{
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"ssvcData": {
"id": "CVE-2026-21297",
"options": [
{
"exploitation": "none"
},
{
"automatable": "no"
},
{
"technicalImpact": "partial"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-03-11T13:36:50.843565Z",
"version": "2.0.3"
}
}
]
},
"published": "2026-03-11T03:15:54.990",
"references": [
{
"source": "psirt@adobe.com",
"tags": [
"Vendor Advisory"
],
"url": "https://helpx.adobe.com/security/products/magento/apsb26-05.html"
}
],
"sourceIdentifier": "psirt@adobe.com",
"vulnStatus": "Analyzed",
"weaknesses": [
{
"description": [
{
"lang": "en",
"value": "CWE-863"
}
],
"source": "psirt@adobe.com",
"type": "Secondary"
}
]
}
GHSA-9VRH-7WGW-4CHF
Vulnerability from github – Published: 2026-03-11 03:31 – Updated: 2026-03-11 03:31Adobe Commerce versions 2.4.9-alpha3, 2.4.8-p3, 2.4.7-p8, 2.4.6-p13, 2.4.5-p15, 2.4.4-p16 and earlier are affected by an Incorrect Authorization vulnerability that could result in a Security feature bypass. A low-privileged attacker could leverage this vulnerability to bypass security measures and gain limited unauthorized access to a feature. Exploitation of this issue does not require user interaction.
{
"affected": [],
"aliases": [
"CVE-2026-21297"
],
"database_specific": {
"cwe_ids": [
"CWE-863"
],
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2026-03-11T03:15:54Z",
"severity": "MODERATE"
},
"details": "Adobe Commerce versions 2.4.9-alpha3, 2.4.8-p3, 2.4.7-p8, 2.4.6-p13, 2.4.5-p15, 2.4.4-p16 and earlier are affected by an Incorrect Authorization vulnerability that could result in a Security feature bypass. A low-privileged attacker could leverage this vulnerability to bypass security measures and gain limited unauthorized access to a feature. Exploitation of this issue does not require user interaction.",
"id": "GHSA-9vrh-7wgw-4chf",
"modified": "2026-03-11T03:31:27Z",
"published": "2026-03-11T03:31:27Z",
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-21297"
},
{
"type": "WEB",
"url": "https://helpx.adobe.com/security/products/magento/apsb26-05.html"
}
],
"schema_version": "1.4.0",
"severity": [
{
"score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
"type": "CVSS_V3"
}
]
}
NCSC-2026-0087
Vulnerability from csaf_ncscnl - Published: 2026-03-12 06:49 - Updated: 2026-03-12 06:49Multiple versions of Adobe Commerce up to 2.4.9-alpha3 suffer from an Improper Input Validation vulnerability that can lead to application denial-of-service without requiring user interaction.
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:unknown/*
Adobe / Commerce
|
vers:unknown/* |
Adobe Commerce versions up to 2.4.9-alpha3 contain a stored Cross-Site Scripting (XSS) vulnerability that enables high-privileged attackers to inject malicious scripts into form fields, potentially leading to session hijacking.
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:unknown/*
Adobe / Commerce
|
vers:unknown/* |
Multiple versions of Adobe Commerce up to 2.4.9-alpha3 contain an Incorrect Authorization vulnerability that enables low-privileged attackers to bypass security controls and gain limited unauthorized access without user interaction.
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:unknown/*
Adobe / Commerce
|
vers:unknown/* |
Multiple versions of Adobe Commerce up to 2.4.9-alpha3 contain an Incorrect Authorization vulnerability that enables attackers to bypass security controls and gain limited unauthorized data access without user interaction.
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:unknown/*
Adobe / Commerce
|
vers:unknown/* |
Multiple versions of Adobe Commerce up to 2.4.9-alpha3 suffer from an Incorrect Authorization vulnerability that enables attackers to bypass security controls and access data without user interaction.
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:unknown/*
Adobe / Commerce
|
vers:unknown/* |
Multiple versions of Adobe Commerce up to 2.4.9-alpha3 contain a stored Cross-Site Scripting (XSS) vulnerability that enables low-privileged attackers to inject malicious scripts into form fields, potentially leading to session hijacking.
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:unknown/*
Adobe / Commerce
|
vers:unknown/* |
Multiple versions of Adobe Commerce up to 2.4.9-alpha3 are affected by a stored Cross-Site Scripting (XSS) vulnerability that permits high-privileged attackers to inject malicious scripts into form fields, requiring user interaction for exploitation.
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:unknown/*
Adobe / Commerce
|
vers:unknown/* |
Multiple versions of Adobe Commerce up to 2.4.9-alpha3 are affected by a stored Cross-Site Scripting (XSS) vulnerability that permits low-privileged attackers to inject malicious scripts into form fields, requiring user interaction for exploitation.
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:unknown/*
Adobe / Commerce
|
vers:unknown/* |
Adobe Commerce versions 2.4.9-alpha3 through 2.4.4-p16 and earlier contain a Server-Side Request Forgery (SSRF) vulnerability enabling high-privileged attackers to bypass security controls and access unauthorized resources without user interaction.
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:unknown/*
Adobe / Commerce
|
vers:unknown/* |
Adobe Commerce versions 2.4.9-alpha3 through 2.4.4-p16 and earlier contain a Server-Side Request Forgery (SSRF) vulnerability enabling high-privileged attackers to bypass security controls without user interaction.
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:unknown/*
Adobe / Commerce
|
vers:unknown/* |
Multiple versions of Adobe Commerce up to 2.4.9-alpha3 contain an Open Redirect vulnerability that allows attackers to redirect users to malicious websites, requiring user interaction for exploitation.
CWE-601 - URL Redirection to Untrusted Site ('Open Redirect')| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:unknown/*
Adobe / Commerce
|
vers:unknown/* |
Multiple versions of Adobe Commerce up to 2.4.9-alpha3 contain an Incorrect Authorization vulnerability that enables low-privileged attackers to bypass security controls and gain limited unauthorized data access without user interaction.
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:unknown/*
Adobe / Commerce
|
vers:unknown/* |
Multiple versions of Adobe Commerce up to 2.4.9-alpha3 contain an Incorrect Authorization vulnerability that enables low-privileged attackers to bypass security controls and gain limited unauthorized access without user interaction.
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:unknown/*
Adobe / Commerce
|
vers:unknown/* |
Multiple versions of Adobe Commerce up to 2.4.9-alpha3 suffer from an Incorrect Authorization vulnerability that enables attackers to bypass security controls and access data without user interaction.
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:unknown/*
Adobe / Commerce
|
vers:unknown/* |
Multiple versions of Adobe Commerce up to 2.4.9-alpha3 contain an Improper Input Validation vulnerability that can bypass security features without user interaction, posing a limited integrity risk.
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:unknown/*
Adobe / Commerce
|
vers:unknown/* |
Adobe Commerce versions up to 2.4.9-alpha3 contain a stored Cross-Site Scripting (XSS) vulnerability that enables high-privileged attackers to inject malicious scripts into form fields, potentially leading to session hijacking.
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:unknown/*
Adobe / Commerce
|
vers:unknown/* |
Multiple versions of Adobe Commerce up to 2.4.9-alpha3 contain an Incorrect Authorization vulnerability that enables attackers to bypass security controls without user interaction, potentially affecting data integrity and availability.
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:unknown/*
Adobe / Commerce
|
vers:unknown/* |
Multiple versions of Adobe Commerce up to 2.4.9-alpha3 contain a path traversal vulnerability that enables high-privileged attackers to bypass security controls and access unauthorized files without user interaction.
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:unknown/*
Adobe / Commerce
|
vers:unknown/* |
Multiple versions of Adobe Commerce up to 2.4.9-alpha3 contain a stored Cross-Site Scripting (XSS) vulnerability that enables high-privileged attackers to inject malicious scripts into form fields, potentially leading to session hijacking upon user interaction.
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:unknown/*
Adobe / Commerce
|
vers:unknown/* |
{
"document": {
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"tlp": {
"label": "WHITE"
}
},
"lang": "nl",
"notes": [
{
"category": "legal_disclaimer",
"text": "The Netherlands Cyber Security Center (henceforth: NCSC-NL) maintains this page to enhance access to its information and security advisories. The use of this security advisory is subject to the following terms and conditions:\n\n NCSC-NL makes every reasonable effort to ensure that the content of this page is kept up to date, and that it is accurate and complete. Nevertheless, NCSC-NL cannot entirely rule out the possibility of errors, and therefore cannot give any warranty in respect of its completeness, accuracy or continuous keeping up-to-date. The information contained in this security advisory is intended solely for the purpose of providing general information to professional users. No rights can be derived from the information provided therein.\n\n NCSC-NL and the Kingdom of the Netherlands assume no legal liability or responsibility for any damage resulting from either the use or inability of use of this security advisory. This includes damage resulting from the inaccuracy of incompleteness of the information contained in the advisory.\n This security advisory is subject to Dutch law. All disputes related to or arising from the use of this advisory will be submitted to the competent court in The Hague. This choice of means also applies to the court in summary proceedings."
},
{
"category": "description",
"text": "Adobe heeft kwetsbaarheden verholpen in Adobe Commerce (tot versie 2.4.9-alpha3).",
"title": "Feiten"
},
{
"category": "description",
"text": "De kwetsbaarheden omvatten onder andere een onjuiste invoervalidatie die een denial-of-service kan veroorzaken zonder gebruikersinteractie, en meerdere onjuiste autorisatieproblemen die aanvallers in staat stellen om beveiligingsmechanismen te omzeilen en ongeautoriseerde toegang te verkrijgen tot gevoelige gegevens. Daarnaast zijn er kwetsbaarheden voor opgeslagen Cross-Site Scripting (XSS) die het mogelijk maken voor aanvallers om kwaadaardige JavaScript-code in te voegen in formuliervelden, wat kan leiden tot sessieovername of andere kwaadaardige acties.",
"title": "Interpretaties"
},
{
"category": "description",
"text": "Adobe heeft updates uitgebracht om de kwetsbaarheden te verhelpen. Zie bijgevoegde referenties voor meer informatie.",
"title": "Oplossingen"
},
{
"category": "general",
"text": "medium",
"title": "Kans"
},
{
"category": "general",
"text": "high",
"title": "Schade"
},
{
"category": "general",
"text": "Improper Input Validation",
"title": "CWE-20"
},
{
"category": "general",
"text": "Improper Limitation of a Pathname to a Restricted Directory (\u0027Path Traversal\u0027)",
"title": "CWE-22"
},
{
"category": "general",
"text": "Improper Neutralization of Input During Web Page Generation (\u0027Cross-site Scripting\u0027)",
"title": "CWE-79"
},
{
"category": "general",
"text": "URL Redirection to Untrusted Site (\u0027Open Redirect\u0027)",
"title": "CWE-601"
},
{
"category": "general",
"text": "Incorrect Authorization",
"title": "CWE-863"
},
{
"category": "general",
"text": "Server-Side Request Forgery (SSRF)",
"title": "CWE-918"
}
],
"publisher": {
"category": "coordinator",
"contact_details": "cert@ncsc.nl",
"name": "Nationaal Cyber Security Centrum",
"namespace": "https://www.ncsc.nl/"
},
"references": [
{
"category": "external",
"summary": "Reference",
"url": "https://helpx.adobe.com/security/products/magento/apsb26-05.html"
}
],
"title": "Kwetsbaarheden verholpen in Adobe Commerce",
"tracking": {
"current_release_date": "2026-03-12T06:49:56.459199Z",
"generator": {
"date": "2025-08-04T16:30:00Z",
"engine": {
"name": "V.A.",
"version": "1.3"
}
},
"id": "NCSC-2026-0087",
"initial_release_date": "2026-03-12T06:49:56.459199Z",
"revision_history": [
{
"date": "2026-03-12T06:49:56.459199Z",
"number": "1.0.0",
"summary": "Initiele versie"
}
],
"status": "final",
"version": "1.0.0"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_version_range",
"name": "vers:unknown/*",
"product": {
"name": "vers:unknown/*",
"product_id": "CSAFPID-1"
}
}
],
"category": "product_name",
"name": "Commerce"
}
],
"category": "vendor",
"name": "Adobe"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2026-21282",
"notes": [
{
"category": "description",
"text": "Multiple versions of Adobe Commerce up to 2.4.9-alpha3 suffer from an Improper Input Validation vulnerability that can lead to application denial-of-service without requiring user interaction.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2026-21282 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-21282.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
"version": "3.1"
},
"products": [
"CSAFPID-1"
]
}
],
"title": "CVE-2026-21282"
},
{
"cve": "CVE-2026-21284",
"cwe": {
"id": "CWE-79",
"name": "Improper Neutralization of Input During Web Page Generation (\u0027Cross-site Scripting\u0027)"
},
"notes": [
{
"category": "other",
"text": "Improper Neutralization of Input During Web Page Generation (\u0027Cross-site Scripting\u0027)",
"title": "CWE-79"
},
{
"category": "description",
"text": "Adobe Commerce versions up to 2.4.9-alpha3 contain a stored Cross-Site Scripting (XSS) vulnerability that enables high-privileged attackers to inject malicious scripts into form fields, potentially leading to session hijacking.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2026-21284 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-21284.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.1,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"CSAFPID-1"
]
}
],
"title": "CVE-2026-21284"
},
{
"cve": "CVE-2026-21285",
"cwe": {
"id": "CWE-863",
"name": "Incorrect Authorization"
},
"notes": [
{
"category": "other",
"text": "Incorrect Authorization",
"title": "CWE-863"
},
{
"category": "description",
"text": "Multiple versions of Adobe Commerce up to 2.4.9-alpha3 contain an Incorrect Authorization vulnerability that enables low-privileged attackers to bypass security controls and gain limited unauthorized access without user interaction.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2026-21285 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-21285.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
"version": "3.1"
},
"products": [
"CSAFPID-1"
]
}
],
"title": "CVE-2026-21285"
},
{
"cve": "CVE-2026-21286",
"cwe": {
"id": "CWE-863",
"name": "Incorrect Authorization"
},
"notes": [
{
"category": "other",
"text": "Incorrect Authorization",
"title": "CWE-863"
},
{
"category": "description",
"text": "Multiple versions of Adobe Commerce up to 2.4.9-alpha3 contain an Incorrect Authorization vulnerability that enables attackers to bypass security controls and gain limited unauthorized data access without user interaction.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2026-21286 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-21286.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
"version": "3.1"
},
"products": [
"CSAFPID-1"
]
}
],
"title": "CVE-2026-21286"
},
{
"cve": "CVE-2026-21289",
"cwe": {
"id": "CWE-863",
"name": "Incorrect Authorization"
},
"notes": [
{
"category": "other",
"text": "Incorrect Authorization",
"title": "CWE-863"
},
{
"category": "description",
"text": "Multiple versions of Adobe Commerce up to 2.4.9-alpha3 suffer from an Incorrect Authorization vulnerability that enables attackers to bypass security controls and access data without user interaction.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2026-21289 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-21289.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"CSAFPID-1"
]
}
],
"title": "CVE-2026-21289"
},
{
"cve": "CVE-2026-21290",
"cwe": {
"id": "CWE-79",
"name": "Improper Neutralization of Input During Web Page Generation (\u0027Cross-site Scripting\u0027)"
},
"notes": [
{
"category": "other",
"text": "Improper Neutralization of Input During Web Page Generation (\u0027Cross-site Scripting\u0027)",
"title": "CWE-79"
},
{
"category": "description",
"text": "Multiple versions of Adobe Commerce up to 2.4.9-alpha3 contain a stored Cross-Site Scripting (XSS) vulnerability that enables low-privileged attackers to inject malicious scripts into form fields, potentially leading to session hijacking.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2026-21290 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-21290.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.7,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"CSAFPID-1"
]
}
],
"title": "CVE-2026-21290"
},
{
"cve": "CVE-2026-21291",
"cwe": {
"id": "CWE-79",
"name": "Improper Neutralization of Input During Web Page Generation (\u0027Cross-site Scripting\u0027)"
},
"notes": [
{
"category": "other",
"text": "Improper Neutralization of Input During Web Page Generation (\u0027Cross-site Scripting\u0027)",
"title": "CWE-79"
},
{
"category": "description",
"text": "Multiple versions of Adobe Commerce up to 2.4.9-alpha3 are affected by a stored Cross-Site Scripting (XSS) vulnerability that permits high-privileged attackers to inject malicious scripts into form fields, requiring user interaction for exploitation.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2026-21291 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-21291.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.8,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N",
"version": "3.1"
},
"products": [
"CSAFPID-1"
]
}
],
"title": "CVE-2026-21291"
},
{
"cve": "CVE-2026-21292",
"cwe": {
"id": "CWE-79",
"name": "Improper Neutralization of Input During Web Page Generation (\u0027Cross-site Scripting\u0027)"
},
"notes": [
{
"category": "other",
"text": "Improper Neutralization of Input During Web Page Generation (\u0027Cross-site Scripting\u0027)",
"title": "CWE-79"
},
{
"category": "description",
"text": "Multiple versions of Adobe Commerce up to 2.4.9-alpha3 are affected by a stored Cross-Site Scripting (XSS) vulnerability that permits low-privileged attackers to inject malicious scripts into form fields, requiring user interaction for exploitation.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2026-21292 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-21292.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.4,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
"version": "3.1"
},
"products": [
"CSAFPID-1"
]
}
],
"title": "CVE-2026-21292"
},
{
"cve": "CVE-2026-21293",
"cwe": {
"id": "CWE-918",
"name": "Server-Side Request Forgery (SSRF)"
},
"notes": [
{
"category": "other",
"text": "Server-Side Request Forgery (SSRF)",
"title": "CWE-918"
},
{
"category": "description",
"text": "Adobe Commerce versions 2.4.9-alpha3 through 2.4.4-p16 and earlier contain a Server-Side Request Forgery (SSRF) vulnerability enabling high-privileged attackers to bypass security controls and access unauthorized resources without user interaction.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2026-21293 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-21293.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:L/I:L/A:N",
"version": "3.1"
},
"products": [
"CSAFPID-1"
]
}
],
"title": "CVE-2026-21293"
},
{
"cve": "CVE-2026-21294",
"cwe": {
"id": "CWE-918",
"name": "Server-Side Request Forgery (SSRF)"
},
"notes": [
{
"category": "other",
"text": "Server-Side Request Forgery (SSRF)",
"title": "CWE-918"
},
{
"category": "description",
"text": "Adobe Commerce versions 2.4.9-alpha3 through 2.4.4-p16 and earlier contain a Server-Side Request Forgery (SSRF) vulnerability enabling high-privileged attackers to bypass security controls without user interaction.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2026-21294 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-21294.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:L/I:L/A:N",
"version": "3.1"
},
"products": [
"CSAFPID-1"
]
}
],
"title": "CVE-2026-21294"
},
{
"cve": "CVE-2026-21295",
"cwe": {
"id": "CWE-601",
"name": "URL Redirection to Untrusted Site (\u0027Open Redirect\u0027)"
},
"notes": [
{
"category": "other",
"text": "URL Redirection to Untrusted Site (\u0027Open Redirect\u0027)",
"title": "CWE-601"
},
{
"category": "description",
"text": "Multiple versions of Adobe Commerce up to 2.4.9-alpha3 contain an Open Redirect vulnerability that allows attackers to redirect users to malicious websites, requiring user interaction for exploitation.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2026-21295 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-21295.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 3.1,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:N",
"version": "3.1"
},
"products": [
"CSAFPID-1"
]
}
],
"title": "CVE-2026-21295"
},
{
"cve": "CVE-2026-21296",
"cwe": {
"id": "CWE-863",
"name": "Incorrect Authorization"
},
"notes": [
{
"category": "other",
"text": "Incorrect Authorization",
"title": "CWE-863"
},
{
"category": "description",
"text": "Multiple versions of Adobe Commerce up to 2.4.9-alpha3 contain an Incorrect Authorization vulnerability that enables low-privileged attackers to bypass security controls and gain limited unauthorized data access without user interaction.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2026-21296 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-21296.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N",
"version": "3.1"
},
"products": [
"CSAFPID-1"
]
}
],
"title": "CVE-2026-21296"
},
{
"cve": "CVE-2026-21297",
"cwe": {
"id": "CWE-863",
"name": "Incorrect Authorization"
},
"notes": [
{
"category": "other",
"text": "Incorrect Authorization",
"title": "CWE-863"
},
{
"category": "description",
"text": "Multiple versions of Adobe Commerce up to 2.4.9-alpha3 contain an Incorrect Authorization vulnerability that enables low-privileged attackers to bypass security controls and gain limited unauthorized access without user interaction.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2026-21297 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-21297.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
"version": "3.1"
},
"products": [
"CSAFPID-1"
]
}
],
"title": "CVE-2026-21297"
},
{
"cve": "CVE-2026-21309",
"cwe": {
"id": "CWE-863",
"name": "Incorrect Authorization"
},
"notes": [
{
"category": "other",
"text": "Incorrect Authorization",
"title": "CWE-863"
},
{
"category": "description",
"text": "Multiple versions of Adobe Commerce up to 2.4.9-alpha3 suffer from an Incorrect Authorization vulnerability that enables attackers to bypass security controls and access data without user interaction.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2026-21309 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-21309.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"CSAFPID-1"
]
}
],
"title": "CVE-2026-21309"
},
{
"cve": "CVE-2026-21310",
"notes": [
{
"category": "description",
"text": "Multiple versions of Adobe Commerce up to 2.4.9-alpha3 contain an Improper Input Validation vulnerability that can bypass security features without user interaction, posing a limited integrity risk.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2026-21310 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-21310.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N",
"version": "3.1"
},
"products": [
"CSAFPID-1"
]
}
],
"title": "CVE-2026-21310"
},
{
"cve": "CVE-2026-21311",
"cwe": {
"id": "CWE-79",
"name": "Improper Neutralization of Input During Web Page Generation (\u0027Cross-site Scripting\u0027)"
},
"notes": [
{
"category": "other",
"text": "Improper Neutralization of Input During Web Page Generation (\u0027Cross-site Scripting\u0027)",
"title": "CWE-79"
},
{
"category": "description",
"text": "Adobe Commerce versions up to 2.4.9-alpha3 contain a stored Cross-Site Scripting (XSS) vulnerability that enables high-privileged attackers to inject malicious scripts into form fields, potentially leading to session hijacking.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2026-21311 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-21311.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.0,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"CSAFPID-1"
]
}
],
"title": "CVE-2026-21311"
},
{
"cve": "CVE-2026-21359",
"cwe": {
"id": "CWE-863",
"name": "Incorrect Authorization"
},
"notes": [
{
"category": "other",
"text": "Incorrect Authorization",
"title": "CWE-863"
},
{
"category": "description",
"text": "Multiple versions of Adobe Commerce up to 2.4.9-alpha3 contain an Incorrect Authorization vulnerability that enables attackers to bypass security controls without user interaction, potentially affecting data integrity and availability.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2026-21359 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-21359.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.7,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:N/I:L/A:L",
"version": "3.1"
},
"products": [
"CSAFPID-1"
]
}
],
"title": "CVE-2026-21359"
},
{
"cve": "CVE-2026-21360",
"cwe": {
"id": "CWE-22",
"name": "Improper Limitation of a Pathname to a Restricted Directory (\u0027Path Traversal\u0027)"
},
"notes": [
{
"category": "other",
"text": "Improper Limitation of a Pathname to a Restricted Directory (\u0027Path Traversal\u0027)",
"title": "CWE-22"
},
{
"category": "description",
"text": "Multiple versions of Adobe Commerce up to 2.4.9-alpha3 contain a path traversal vulnerability that enables high-privileged attackers to bypass security controls and access unauthorized files without user interaction.",
"title": "Summary"
},
{
"category": "general",
"text": "CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N",
"title": "CVSSV4"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2026-21360 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-21360.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.8,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"CSAFPID-1"
]
}
],
"title": "CVE-2026-21360"
},
{
"cve": "CVE-2026-21361",
"cwe": {
"id": "CWE-79",
"name": "Improper Neutralization of Input During Web Page Generation (\u0027Cross-site Scripting\u0027)"
},
"notes": [
{
"category": "other",
"text": "Improper Neutralization of Input During Web Page Generation (\u0027Cross-site Scripting\u0027)",
"title": "CWE-79"
},
{
"category": "description",
"text": "Multiple versions of Adobe Commerce up to 2.4.9-alpha3 contain a stored Cross-Site Scripting (XSS) vulnerability that enables high-privileged attackers to inject malicious scripts into form fields, potentially leading to session hijacking upon user interaction.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2026-21361 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-21361.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.1,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"CSAFPID-1"
]
}
],
"title": "CVE-2026-21361"
}
]
}
WID-SEC-W-2026-0668
Vulnerability from csaf_certbund - Published: 2026-03-10 23:00 - Updated: 2026-03-10 23:00| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Adobe Magento <2.4.5‑p16
Adobe / Magento
|
<2.4.5‑p16 | ||
|
Adobe Magento <2.4.7‑p9
Adobe / Magento
|
<2.4.7‑p9 | ||
|
Adobe Magento <2.4.6‑p14
Adobe / Magento
|
<2.4.6‑p14 | ||
|
Adobe Magento <2.4.9‑beta1
Adobe / Magento
|
<2.4.9‑beta1 | ||
|
Adobe Magento <2.4.8‑p4
Adobe / Magento
|
<2.4.8‑p4 |
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Adobe Magento <2.4.5‑p16
Adobe / Magento
|
<2.4.5‑p16 | ||
|
Adobe Magento <2.4.7‑p9
Adobe / Magento
|
<2.4.7‑p9 | ||
|
Adobe Magento <2.4.6‑p14
Adobe / Magento
|
<2.4.6‑p14 | ||
|
Adobe Magento <2.4.9‑beta1
Adobe / Magento
|
<2.4.9‑beta1 | ||
|
Adobe Magento <2.4.8‑p4
Adobe / Magento
|
<2.4.8‑p4 |
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Adobe Magento <2.4.5‑p16
Adobe / Magento
|
<2.4.5‑p16 | ||
|
Adobe Magento <2.4.7‑p9
Adobe / Magento
|
<2.4.7‑p9 | ||
|
Adobe Magento <2.4.6‑p14
Adobe / Magento
|
<2.4.6‑p14 | ||
|
Adobe Magento <2.4.9‑beta1
Adobe / Magento
|
<2.4.9‑beta1 | ||
|
Adobe Magento <2.4.8‑p4
Adobe / Magento
|
<2.4.8‑p4 |
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Adobe Magento <2.4.5‑p16
Adobe / Magento
|
<2.4.5‑p16 | ||
|
Adobe Magento <2.4.7‑p9
Adobe / Magento
|
<2.4.7‑p9 | ||
|
Adobe Magento <2.4.6‑p14
Adobe / Magento
|
<2.4.6‑p14 | ||
|
Adobe Magento <2.4.9‑beta1
Adobe / Magento
|
<2.4.9‑beta1 | ||
|
Adobe Magento <2.4.8‑p4
Adobe / Magento
|
<2.4.8‑p4 |
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Adobe Magento <2.4.5‑p16
Adobe / Magento
|
<2.4.5‑p16 | ||
|
Adobe Magento <2.4.7‑p9
Adobe / Magento
|
<2.4.7‑p9 | ||
|
Adobe Magento <2.4.6‑p14
Adobe / Magento
|
<2.4.6‑p14 | ||
|
Adobe Magento <2.4.9‑beta1
Adobe / Magento
|
<2.4.9‑beta1 | ||
|
Adobe Magento <2.4.8‑p4
Adobe / Magento
|
<2.4.8‑p4 |
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Adobe Magento <2.4.5‑p16
Adobe / Magento
|
<2.4.5‑p16 | ||
|
Adobe Magento <2.4.7‑p9
Adobe / Magento
|
<2.4.7‑p9 | ||
|
Adobe Magento <2.4.6‑p14
Adobe / Magento
|
<2.4.6‑p14 | ||
|
Adobe Magento <2.4.9‑beta1
Adobe / Magento
|
<2.4.9‑beta1 | ||
|
Adobe Magento <2.4.8‑p4
Adobe / Magento
|
<2.4.8‑p4 |
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Adobe Magento <2.4.5‑p16
Adobe / Magento
|
<2.4.5‑p16 | ||
|
Adobe Magento <2.4.7‑p9
Adobe / Magento
|
<2.4.7‑p9 | ||
|
Adobe Magento <2.4.6‑p14
Adobe / Magento
|
<2.4.6‑p14 | ||
|
Adobe Magento <2.4.9‑beta1
Adobe / Magento
|
<2.4.9‑beta1 | ||
|
Adobe Magento <2.4.8‑p4
Adobe / Magento
|
<2.4.8‑p4 |
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Adobe Magento <2.4.5‑p16
Adobe / Magento
|
<2.4.5‑p16 | ||
|
Adobe Magento <2.4.7‑p9
Adobe / Magento
|
<2.4.7‑p9 | ||
|
Adobe Magento <2.4.6‑p14
Adobe / Magento
|
<2.4.6‑p14 | ||
|
Adobe Magento <2.4.9‑beta1
Adobe / Magento
|
<2.4.9‑beta1 | ||
|
Adobe Magento <2.4.8‑p4
Adobe / Magento
|
<2.4.8‑p4 |
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Adobe Magento <2.4.5‑p16
Adobe / Magento
|
<2.4.5‑p16 | ||
|
Adobe Magento <2.4.7‑p9
Adobe / Magento
|
<2.4.7‑p9 | ||
|
Adobe Magento <2.4.6‑p14
Adobe / Magento
|
<2.4.6‑p14 | ||
|
Adobe Magento <2.4.9‑beta1
Adobe / Magento
|
<2.4.9‑beta1 | ||
|
Adobe Magento <2.4.8‑p4
Adobe / Magento
|
<2.4.8‑p4 |
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Adobe Magento <2.4.5‑p16
Adobe / Magento
|
<2.4.5‑p16 | ||
|
Adobe Magento <2.4.7‑p9
Adobe / Magento
|
<2.4.7‑p9 | ||
|
Adobe Magento <2.4.6‑p14
Adobe / Magento
|
<2.4.6‑p14 | ||
|
Adobe Magento <2.4.9‑beta1
Adobe / Magento
|
<2.4.9‑beta1 | ||
|
Adobe Magento <2.4.8‑p4
Adobe / Magento
|
<2.4.8‑p4 |
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Adobe Magento <2.4.5‑p16
Adobe / Magento
|
<2.4.5‑p16 | ||
|
Adobe Magento <2.4.7‑p9
Adobe / Magento
|
<2.4.7‑p9 | ||
|
Adobe Magento <2.4.6‑p14
Adobe / Magento
|
<2.4.6‑p14 | ||
|
Adobe Magento <2.4.9‑beta1
Adobe / Magento
|
<2.4.9‑beta1 | ||
|
Adobe Magento <2.4.8‑p4
Adobe / Magento
|
<2.4.8‑p4 |
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Adobe Magento <2.4.5‑p16
Adobe / Magento
|
<2.4.5‑p16 | ||
|
Adobe Magento <2.4.7‑p9
Adobe / Magento
|
<2.4.7‑p9 | ||
|
Adobe Magento <2.4.6‑p14
Adobe / Magento
|
<2.4.6‑p14 | ||
|
Adobe Magento <2.4.9‑beta1
Adobe / Magento
|
<2.4.9‑beta1 | ||
|
Adobe Magento <2.4.8‑p4
Adobe / Magento
|
<2.4.8‑p4 |
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Adobe Magento <2.4.5‑p16
Adobe / Magento
|
<2.4.5‑p16 | ||
|
Adobe Magento <2.4.7‑p9
Adobe / Magento
|
<2.4.7‑p9 | ||
|
Adobe Magento <2.4.6‑p14
Adobe / Magento
|
<2.4.6‑p14 | ||
|
Adobe Magento <2.4.9‑beta1
Adobe / Magento
|
<2.4.9‑beta1 | ||
|
Adobe Magento <2.4.8‑p4
Adobe / Magento
|
<2.4.8‑p4 |
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Adobe Magento <2.4.5‑p16
Adobe / Magento
|
<2.4.5‑p16 | ||
|
Adobe Magento <2.4.7‑p9
Adobe / Magento
|
<2.4.7‑p9 | ||
|
Adobe Magento <2.4.6‑p14
Adobe / Magento
|
<2.4.6‑p14 | ||
|
Adobe Magento <2.4.9‑beta1
Adobe / Magento
|
<2.4.9‑beta1 | ||
|
Adobe Magento <2.4.8‑p4
Adobe / Magento
|
<2.4.8‑p4 |
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Adobe Magento <2.4.5‑p16
Adobe / Magento
|
<2.4.5‑p16 | ||
|
Adobe Magento <2.4.7‑p9
Adobe / Magento
|
<2.4.7‑p9 | ||
|
Adobe Magento <2.4.6‑p14
Adobe / Magento
|
<2.4.6‑p14 | ||
|
Adobe Magento <2.4.9‑beta1
Adobe / Magento
|
<2.4.9‑beta1 | ||
|
Adobe Magento <2.4.8‑p4
Adobe / Magento
|
<2.4.8‑p4 |
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Adobe Magento <2.4.5‑p16
Adobe / Magento
|
<2.4.5‑p16 | ||
|
Adobe Magento <2.4.7‑p9
Adobe / Magento
|
<2.4.7‑p9 | ||
|
Adobe Magento <2.4.6‑p14
Adobe / Magento
|
<2.4.6‑p14 | ||
|
Adobe Magento <2.4.9‑beta1
Adobe / Magento
|
<2.4.9‑beta1 | ||
|
Adobe Magento <2.4.8‑p4
Adobe / Magento
|
<2.4.8‑p4 |
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Adobe Magento <2.4.5‑p16
Adobe / Magento
|
<2.4.5‑p16 | ||
|
Adobe Magento <2.4.7‑p9
Adobe / Magento
|
<2.4.7‑p9 | ||
|
Adobe Magento <2.4.6‑p14
Adobe / Magento
|
<2.4.6‑p14 | ||
|
Adobe Magento <2.4.9‑beta1
Adobe / Magento
|
<2.4.9‑beta1 | ||
|
Adobe Magento <2.4.8‑p4
Adobe / Magento
|
<2.4.8‑p4 |
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Adobe Magento <2.4.5‑p16
Adobe / Magento
|
<2.4.5‑p16 | ||
|
Adobe Magento <2.4.7‑p9
Adobe / Magento
|
<2.4.7‑p9 | ||
|
Adobe Magento <2.4.6‑p14
Adobe / Magento
|
<2.4.6‑p14 | ||
|
Adobe Magento <2.4.9‑beta1
Adobe / Magento
|
<2.4.9‑beta1 | ||
|
Adobe Magento <2.4.8‑p4
Adobe / Magento
|
<2.4.8‑p4 |
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Adobe Magento <2.4.5‑p16
Adobe / Magento
|
<2.4.5‑p16 | ||
|
Adobe Magento <2.4.7‑p9
Adobe / Magento
|
<2.4.7‑p9 | ||
|
Adobe Magento <2.4.6‑p14
Adobe / Magento
|
<2.4.6‑p14 | ||
|
Adobe Magento <2.4.9‑beta1
Adobe / Magento
|
<2.4.9‑beta1 | ||
|
Adobe Magento <2.4.8‑p4
Adobe / Magento
|
<2.4.8‑p4 |
{
"document": {
"aggregate_severity": {
"text": "hoch"
},
"category": "csaf_base",
"csaf_version": "2.0",
"distribution": {
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "de-DE",
"notes": [
{
"category": "legal_disclaimer",
"text": "Das BSI ist als Anbieter f\u00fcr die eigenen, zur Nutzung bereitgestellten Inhalte nach den allgemeinen Gesetzen verantwortlich. Nutzerinnen und Nutzer sind jedoch daf\u00fcr verantwortlich, die Verwendung und/oder die Umsetzung der mit den Inhalten bereitgestellten Informationen sorgf\u00e4ltig im Einzelfall zu pr\u00fcfen."
},
{
"category": "description",
"text": "Magento ist ein Online-Shop System von Adobe.",
"title": "Produktbeschreibung"
},
{
"category": "summary",
"text": "Ein Angreifer kann mehrere Schwachstellen in Adobe Magento ausnutzen, um erweiterte Berechtigungen zu erlangen, beliebigen Code auszuf\u00fchren, Sicherheitsma\u00dfnahmen zu umgehen, Cross-Site-Scripting-Angriffe durchzuf\u00fchren, vertrauliche Informationen offenzulegen oder einen Denial-of-Service-Zustand zu verursachen.",
"title": "Angriff"
},
{
"category": "general",
"text": "- Sonstiges\n- UNIX\n- Windows",
"title": "Betroffene Betriebssysteme"
}
],
"publisher": {
"category": "other",
"contact_details": "csaf-provider@cert-bund.de",
"name": "Bundesamt f\u00fcr Sicherheit in der Informationstechnik",
"namespace": "https://www.bsi.bund.de"
},
"references": [
{
"category": "self",
"summary": "WID-SEC-W-2026-0668 - CSAF Version",
"url": "https://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-0668.json"
},
{
"category": "self",
"summary": "WID-SEC-2026-0668 - Portal Version",
"url": "https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-0668"
},
{
"category": "external",
"summary": "Adobe Security Bulletin APSB26-05 vom 2026-03-10",
"url": "https://helpx.adobe.com/security/products/magento/apsb26-05.html"
}
],
"source_lang": "en-US",
"title": "Adobe Magento: Mehrere Schwachstellen",
"tracking": {
"current_release_date": "2026-03-10T23:00:00.000+00:00",
"generator": {
"date": "2026-03-11T08:46:59.259+00:00",
"engine": {
"name": "BSI-WID",
"version": "1.5.0"
}
},
"id": "WID-SEC-W-2026-0668",
"initial_release_date": "2026-03-10T23:00:00.000+00:00",
"revision_history": [
{
"date": "2026-03-10T23:00:00.000+00:00",
"number": "1",
"summary": "Initiale Fassung"
}
],
"status": "final",
"version": "1"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_version_range",
"name": "\u003c2.4.9\u2011beta1",
"product": {
"name": "Adobe Magento \u003c2.4.9\u2011beta1",
"product_id": "T051550"
}
},
{
"category": "product_version",
"name": "2.4.9\u2011beta1",
"product": {
"name": "Adobe Magento 2.4.9\u2011beta1",
"product_id": "T051550-fixed",
"product_identification_helper": {
"cpe": "cpe:/a:adobe:magento:2.4.9beta1"
}
}
},
{
"category": "product_version_range",
"name": "\u003c2.4.8\u2011p4",
"product": {
"name": "Adobe Magento \u003c2.4.8\u2011p4",
"product_id": "T051551"
}
},
{
"category": "product_version",
"name": "2.4.8\u2011p4",
"product": {
"name": "Adobe Magento 2.4.8\u2011p4",
"product_id": "T051551-fixed",
"product_identification_helper": {
"cpe": "cpe:/a:adobe:magento:2.4.8p4"
}
}
},
{
"category": "product_version_range",
"name": "\u003c2.4.7\u2011p9",
"product": {
"name": "Adobe Magento \u003c2.4.7\u2011p9",
"product_id": "T051552"
}
},
{
"category": "product_version",
"name": "2.4.7\u2011p9",
"product": {
"name": "Adobe Magento 2.4.7\u2011p9",
"product_id": "T051552-fixed",
"product_identification_helper": {
"cpe": "cpe:/a:adobe:magento:2.4.7p9"
}
}
},
{
"category": "product_version_range",
"name": "\u003c2.4.6\u2011p14",
"product": {
"name": "Adobe Magento \u003c2.4.6\u2011p14",
"product_id": "T051553"
}
},
{
"category": "product_version",
"name": "2.4.6\u2011p14",
"product": {
"name": "Adobe Magento 2.4.6\u2011p14",
"product_id": "T051553-fixed",
"product_identification_helper": {
"cpe": "cpe:/a:adobe:magento:2.4.6p14"
}
}
},
{
"category": "product_version_range",
"name": "\u003c2.4.5\u2011p16",
"product": {
"name": "Adobe Magento \u003c2.4.5\u2011p16",
"product_id": "T051554"
}
},
{
"category": "product_version",
"name": "2.4.5\u2011p16",
"product": {
"name": "Adobe Magento 2.4.5\u2011p16",
"product_id": "T051554-fixed",
"product_identification_helper": {
"cpe": "cpe:/a:adobe:magento:2.4.5p16"
}
}
}
],
"category": "product_name",
"name": "Magento"
}
],
"category": "vendor",
"name": "Adobe"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2026-21282",
"product_status": {
"known_affected": [
"T051554",
"T051552",
"T051553",
"T051550",
"T051551"
]
},
"release_date": "2026-03-10T23:00:00.000+00:00",
"title": "CVE-2026-21282"
},
{
"cve": "CVE-2026-21284",
"product_status": {
"known_affected": [
"T051554",
"T051552",
"T051553",
"T051550",
"T051551"
]
},
"release_date": "2026-03-10T23:00:00.000+00:00",
"title": "CVE-2026-21284"
},
{
"cve": "CVE-2026-21285",
"product_status": {
"known_affected": [
"T051554",
"T051552",
"T051553",
"T051550",
"T051551"
]
},
"release_date": "2026-03-10T23:00:00.000+00:00",
"title": "CVE-2026-21285"
},
{
"cve": "CVE-2026-21286",
"product_status": {
"known_affected": [
"T051554",
"T051552",
"T051553",
"T051550",
"T051551"
]
},
"release_date": "2026-03-10T23:00:00.000+00:00",
"title": "CVE-2026-21286"
},
{
"cve": "CVE-2026-21289",
"product_status": {
"known_affected": [
"T051554",
"T051552",
"T051553",
"T051550",
"T051551"
]
},
"release_date": "2026-03-10T23:00:00.000+00:00",
"title": "CVE-2026-21289"
},
{
"cve": "CVE-2026-21290",
"product_status": {
"known_affected": [
"T051554",
"T051552",
"T051553",
"T051550",
"T051551"
]
},
"release_date": "2026-03-10T23:00:00.000+00:00",
"title": "CVE-2026-21290"
},
{
"cve": "CVE-2026-21291",
"product_status": {
"known_affected": [
"T051554",
"T051552",
"T051553",
"T051550",
"T051551"
]
},
"release_date": "2026-03-10T23:00:00.000+00:00",
"title": "CVE-2026-21291"
},
{
"cve": "CVE-2026-21292",
"product_status": {
"known_affected": [
"T051554",
"T051552",
"T051553",
"T051550",
"T051551"
]
},
"release_date": "2026-03-10T23:00:00.000+00:00",
"title": "CVE-2026-21292"
},
{
"cve": "CVE-2026-21293",
"product_status": {
"known_affected": [
"T051554",
"T051552",
"T051553",
"T051550",
"T051551"
]
},
"release_date": "2026-03-10T23:00:00.000+00:00",
"title": "CVE-2026-21293"
},
{
"cve": "CVE-2026-21294",
"product_status": {
"known_affected": [
"T051554",
"T051552",
"T051553",
"T051550",
"T051551"
]
},
"release_date": "2026-03-10T23:00:00.000+00:00",
"title": "CVE-2026-21294"
},
{
"cve": "CVE-2026-21295",
"product_status": {
"known_affected": [
"T051554",
"T051552",
"T051553",
"T051550",
"T051551"
]
},
"release_date": "2026-03-10T23:00:00.000+00:00",
"title": "CVE-2026-21295"
},
{
"cve": "CVE-2026-21296",
"product_status": {
"known_affected": [
"T051554",
"T051552",
"T051553",
"T051550",
"T051551"
]
},
"release_date": "2026-03-10T23:00:00.000+00:00",
"title": "CVE-2026-21296"
},
{
"cve": "CVE-2026-21297",
"product_status": {
"known_affected": [
"T051554",
"T051552",
"T051553",
"T051550",
"T051551"
]
},
"release_date": "2026-03-10T23:00:00.000+00:00",
"title": "CVE-2026-21297"
},
{
"cve": "CVE-2026-21309",
"product_status": {
"known_affected": [
"T051554",
"T051552",
"T051553",
"T051550",
"T051551"
]
},
"release_date": "2026-03-10T23:00:00.000+00:00",
"title": "CVE-2026-21309"
},
{
"cve": "CVE-2026-21310",
"product_status": {
"known_affected": [
"T051554",
"T051552",
"T051553",
"T051550",
"T051551"
]
},
"release_date": "2026-03-10T23:00:00.000+00:00",
"title": "CVE-2026-21310"
},
{
"cve": "CVE-2026-21311",
"product_status": {
"known_affected": [
"T051554",
"T051552",
"T051553",
"T051550",
"T051551"
]
},
"release_date": "2026-03-10T23:00:00.000+00:00",
"title": "CVE-2026-21311"
},
{
"cve": "CVE-2026-21359",
"product_status": {
"known_affected": [
"T051554",
"T051552",
"T051553",
"T051550",
"T051551"
]
},
"release_date": "2026-03-10T23:00:00.000+00:00",
"title": "CVE-2026-21359"
},
{
"cve": "CVE-2026-21360",
"product_status": {
"known_affected": [
"T051554",
"T051552",
"T051553",
"T051550",
"T051551"
]
},
"release_date": "2026-03-10T23:00:00.000+00:00",
"title": "CVE-2026-21360"
},
{
"cve": "CVE-2026-21361",
"product_status": {
"known_affected": [
"T051554",
"T051552",
"T051553",
"T051550",
"T051551"
]
},
"release_date": "2026-03-10T23:00:00.000+00:00",
"title": "CVE-2026-21361"
}
]
}
Sightings
| Author | Source | Type | Date | Other |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or observed by the user.
- Confirmed: The vulnerability has been validated from an analyst's perspective.
- Published Proof of Concept: A public proof of concept is available for this vulnerability.
- Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
- Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
- Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
- Not confirmed: The user expressed doubt about the validity of the vulnerability.
- Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.