Catalog

Findings

Filter the merged record by severity, source, stack, and weakness type.

SearchSeveritySourceStackWeaknessSort

Known exploited only

Reset

Medium5.5Adobe Commerce versions 2.4.9-alpha3, 2.4.8-p3, 2.4.7-p8, 2.4.6-p13, 2.4.5-p15, 2.4.4-p16 and earlier are affected by a Server-Side Request Forgery (SSRF) vulnerabilit…CVE-2026-21293 · adobe · commerce · CVE.org · FIRST EPSS · NIST NVD · Adobe, MagentoEPSS 0.2%Mar 11, 2026
Medium5.4Adobe Commerce versions 2.4.9-alpha3, 2.4.8-p3, 2.4.7-p8, 2.4.6-p13, 2.4.5-p15, 2.4.4-p16 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability…CVE-2026-21292 · adobe · commerce b2b · CVE.org · FIRST EPSS · NIST NVD · Adobe, MagentoEPSS 0.3%Mar 11, 2026
Medium4.8Adobe Commerce versions 2.4.9-alpha3, 2.4.8-p3, 2.4.7-p8, 2.4.6-p13, 2.4.5-p15, 2.4.4-p16 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability…CVE-2026-21291 · adobe · magento · CVE.org · FIRST EPSS · NIST NVD · Adobe, MagentoEPSS 0.3%Mar 11, 2026
High8.7Adobe Commerce versions 2.4.9-alpha3, 2.4.8-p3, 2.4.7-p8, 2.4.6-p13, 2.4.5-p15, 2.4.4-p16 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability…CVE-2026-21290 · adobe · commerce b2b · CVE.org · FIRST EPSS · NIST NVD · Adobe, MagentoEPSS 0.5%Mar 11, 2026
High7.5Adobe Commerce versions 2.4.9-alpha3, 2.4.8-p3, 2.4.7-p8, 2.4.6-p13, 2.4.5-p15, 2.4.4-p16 and earlier are affected by an Incorrect Authorization vulnerability that cou…CVE-2026-21289 · adobe · commerce b2b · CVE.org · FIRST EPSS · NIST NVD · Adobe, MagentoEPSS 0.6%Mar 11, 2026
Medium5.3Adobe Commerce versions 2.4.9-alpha3, 2.4.8-p3, 2.4.7-p8, 2.4.6-p13, 2.4.5-p15, 2.4.4-p16 and earlier are affected by an Incorrect Authorization vulnerability that cou…CVE-2026-21286 · adobe · commerce b2b · CVE.org · FIRST EPSS · NIST NVD · Adobe, MagentoEPSS 0.3%Mar 11, 2026
Medium4.3Adobe Commerce versions 2.4.9-alpha3, 2.4.8-p3, 2.4.7-p8, 2.4.6-p13, 2.4.5-p15, 2.4.4-p16 and earlier are affected by an Incorrect Authorization vulnerability that cou…CVE-2026-21285 · adobe · commerce b2b · CVE.org · FIRST EPSS · NIST NVD · Adobe, MagentoEPSS 0.3%Mar 11, 2026
High8.1Adobe Commerce versions 2.4.9-alpha3, 2.4.8-p3, 2.4.7-p8, 2.4.6-p13, 2.4.5-p15, 2.4.4-p16 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability…CVE-2026-21284 · adobe · commerce b2b · CVE.org · FIRST EPSS · NIST NVD · Adobe, MagentoEPSS 0.4%Mar 11, 2026
Medium5.3Adobe Commerce versions 2.4.9-alpha3, 2.4.8-p3, 2.4.7-p8, 2.4.6-p13, 2.4.5-p15, 2.4.4-p16 and earlier are affected by an Improper Input Validation vulnerability that c…CVE-2026-21282 · adobe · commerce · CVE.org · FIRST EPSS · NIST NVD · Adobe, MagentoEPSS 0.5%Mar 11, 2026
Medium5.4Adobe Experience Manager versions 6.5.23 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low-privileged attacke…CVE-2026-27266 · adobe · experience manager · CVE.org · NIST NVD · AdobeMar 11, 2026
Medium5.4Adobe Experience Manager versions 6.5.23 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low-privileged attacke…CVE-2026-27265 · adobe · experience manager · CVE.org · NIST NVD · AdobeMar 11, 2026
Medium5.4Adobe Experience Manager versions 6.5.23 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by an attacker to inject ma…CVE-2026-27262 · adobe · experience manager · CVE.org · NIST NVD · AdobeMar 11, 2026
Medium5.4Adobe Experience Manager versions 6.5.23 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low-privileged attacke…CVE-2026-27257 · adobe · experience manager · CVE.org · NIST NVD · AdobeMar 11, 2026
Medium5.4Adobe Experience Manager versions 6.5.23 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low-privileged attacke…CVE-2026-27256 · adobe · experience manager · CVE.org · NIST NVD · AdobeMar 11, 2026
Medium5.4Adobe Experience Manager versions 6.5.23 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low-privileged attacke…CVE-2026-27255 · adobe · experience manager · CVE.org · NIST NVD · AdobeMar 11, 2026
Medium5.4Adobe Experience Manager versions 6.5.23 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low-privileged attacke…CVE-2026-27254 · adobe · experience manager · CVE.org · NIST NVD · AdobeMar 11, 2026
Medium5.4Adobe Experience Manager versions 6.5.23 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low-privileged attacke…CVE-2026-27253 · adobe · experience manager · CVE.org · NIST NVD · AdobeMar 11, 2026
Medium5.4Adobe Experience Manager versions 6.5.23 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low-privileged attacke…CVE-2026-27252 · adobe · experience manager · CVE.org · NIST NVD · AdobeMar 11, 2026
Medium5.4Adobe Experience Manager versions 6.5.23 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low-privileged attacke…CVE-2026-27251 · adobe · experience manager · CVE.org · NIST NVD · AdobeMar 11, 2026
Medium5.4Adobe Experience Manager versions 6.5.23 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low-privileged attacke…CVE-2026-27250 · adobe · experience manager · CVE.org · NIST NVD · AdobeMar 11, 2026
Medium5.4Adobe Experience Manager versions 6.5.23 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low-privileged attacke…CVE-2026-27249 · adobe · experience manager · CVE.org · NIST NVD · AdobeMar 11, 2026
Medium5.4Adobe Experience Manager versions 6.5.23 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low-privileged attacke…CVE-2026-27248 · adobe · experience manager · CVE.org · NIST NVD · AdobeMar 11, 2026
Medium5.4Adobe Experience Manager versions 6.5.23 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low-privileged attacke…CVE-2026-27247 · adobe · experience manager · CVE.org · NIST NVD · AdobeMar 11, 2026
Medium5.4Adobe Experience Manager versions 6.5.23 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low-privileged attacke…CVE-2026-27244 · adobe · experience manager · CVE.org · NIST NVD · AdobeMar 11, 2026
Medium5.4Adobe Experience Manager versions 6.5.23 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low-privileged attacke…CVE-2026-27242 · adobe · experience manager · CVE.org · NIST NVD · AdobeMar 11, 2026