Adobe Commerce is affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by an attacker to inject malicious scripts into vulnerable form fields. Malicious JavaScript may be executed in a victim's browser when they browse to the page containing the vulnerable field, potentially gaining elevated access or control over the victim's account or session. Scope is changed.
Veri: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Bilgiler kaynaktaki haliyle, İngilizce yayımlanır.
| Üretici | Ürün | Sürümler | |
|---|---|---|---|
| Adobe | Adobe Commerce | ≤ 2.4.9-2026-aug, 2.4.8-2026-aug, 2.4.7-2026-aug, 2.4.6-2026-aug, 2.4.5-2026-aug, 2.4.4-2026-aug, fixed 2.4.9-2026-sep, 2.4.8-2026-sep, 2.4.7-2026-sep, 2.4.6-2026-sep, 2.4.5-2026-sep, 2.4.4-2026-sep | |
| Adobe | Adobe Commerce B2B | ≤ 1.5.3-2026-aug, 1.5.2-2026-aug, 1.4.2-2026-aug, 1.3.4-2026-aug, 1.3.3-2026-aug, fixed 1.5.3-2026-sep, 1.5.2-2026-sep, 1.4.2-2026-sep, 1.3.4-2026-sep, 1.3.3-2026-sep | |
| adobe | commerce | < 2.4.4 | |
| adobe | commerce b2b | < 1.3.3 | |
| adobe | magento | ≤ 2.4.6 | |
| Adobe | Magento Open Source | ≤ 2.4.9-2026-aug, 2.4.8-2026-aug, 2.4.7-2026-aug, 2.4.6-2026-aug, fixed 2.4.9-2026-sep, 2.4.8-2026-sep, 2.4.7-2026-sep |
cpe:2.3:a:adobe:magento:*:*:*:*:open_source:*:*:* ≤ 2.4.6cpe:2.3:a:adobe:magento:2.4.7:-:*:*:open_source:*:*:*cpe:2.3:a:adobe:magento:2.4.7:b1:*:*:open_source:*:*:*cpe:2.3:a:adobe:magento:2.4.7:b2:*:*:open_source:*:*:*cpe:2.3:a:adobe:magento:2.4.7:beta3:*:*:open_source:*:*:*cpe:2.3:a:adobe:magento:2.4.7:p1:*:*:open_source:*:*:*cpe:2.3:a:adobe:magento:2.4.7:p10:*:*:open_source:*:*:*cpe:2.3:a:adobe:magento:2.4.7:p2:*:*:open_source:*:*:*cpe:2.3:a:adobe:magento:2.4.7:p3:*:*:open_source:*:*:*cpe:2.3:a:adobe:magento:2.4.7:p4:*:*:open_source:*:*:*cpe:2.3:a:adobe:magento:2.4.7:p5:*:*:open_source:*:*:*cpe:2.3:a:adobe:magento:2.4.7:p6:*:*:open_source:*:*:*cpe:2.3:a:adobe:magento:2.4.7:p7:*:*:open_source:*:*:*cpe:2.3:a:adobe:magento:2.4.7:p8:*:*:open_source:*:*:*cpe:2.3:a:adobe:magento:2.4.7:p9:*:*:open_source:*:*:*cpe:2.3:a:adobe:magento:2.4.8:-:*:*:open_source:*:*:*cpe:2.3:a:adobe:magento:2.4.8:beta1:*:*:open_source:*:*:*cpe:2.3:a:adobe:magento:2.4.8:beta2:*:*:open_source:*:*:*cpe:2.3:a:adobe:magento:2.4.8:p1:*:*:open_source:*:*:*cpe:2.3:a:adobe:magento:2.4.8:p2:*:*:open_source:*:*:*cpe:2.3:a:adobe:magento:2.4.8:p3:*:*:open_source:*:*:*cpe:2.3:a:adobe:magento:2.4.8:p4:*:*:open_source:*:*:*cpe:2.3:a:adobe:magento:2.4.8:p5:*:*:open_source:*:*:*cpe:2.3:a:adobe:magento:2.4.9:-:*:*:open_source:*:*:*cpe:2.3:a:adobe:commerce:*:*:*:*:*:*:*:* < 2.4.4cpe:2.3:a:adobe:commerce:2.4.4:-:*:*:*:*:*:*cpe:2.3:a:adobe:commerce:2.4.4:p1:*:*:*:*:*:*cpe:2.3:a:adobe:commerce:2.4.4:p10:*:*:*:*:*:*cpe:2.3:a:adobe:commerce:2.4.4:p11:*:*:*:*:*:*cpe:2.3:a:adobe:commerce:2.4.4:p12:*:*:*:*:*:*cpe:2.3:a:adobe:commerce:2.4.4:p13:*:*:*:*:*:*cpe:2.3:a:adobe:commerce:2.4.4:p14:*:*:*:*:*:*cpe:2.3:a:adobe:commerce:2.4.4:p15:*:*:*:*:*:*cpe:2.3:a:adobe:commerce:2.4.4:p16:*:*:*:*:*:*cpe:2.3:a:adobe:commerce:2.4.4:p17:*:*:*:*:*:*cpe:2.3:a:adobe:commerce:2.4.4:p18:*:*:*:*:*:*cpe:2.3:a:adobe:commerce:2.4.4:p2:*:*:*:*:*:*cpe:2.3:a:adobe:commerce:2.4.4:p3:*:*:*:*:*:*cpe:2.3:a:adobe:commerce:2.4.4:p4:*:*:*:*:*:*cpe:2.3:a:adobe:commerce:2.4.4:p5:*:*:*:*:*:*cpe:2.3:a:adobe:commerce:2.4.4:p6:*:*:*:*:*:*cpe:2.3:a:adobe:commerce:2.4.4:p7:*:*:*:*:*:*cpe:2.3:a:adobe:commerce:2.4.4:p8:*:*:*:*:*:*cpe:2.3:a:adobe:commerce:2.4.4:p9:*:*:*:*:*:*cpe:2.3:a:adobe:commerce:2.4.5:-:*:*:*:*:*:*cpe:2.3:a:adobe:commerce:2.4.5:p1:*:*:*:*:*:*cpe:2.3:a:adobe:commerce:2.4.5:p10:*:*:*:*:*:*cpe:2.3:a:adobe:commerce:2.4.5:p11:*:*:*:*:*:*cpe:2.3:a:adobe:commerce:2.4.5:p12:*:*:*:*:*:*cpe:2.3:a:adobe:commerce:2.4.5:p13:*:*:*:*:*:*cpe:2.3:a:adobe:commerce:2.4.5:p14:*:*:*:*:*:*cpe:2.3:a:adobe:commerce:2.4.5:p15:*:*:*:*:*:*cpe:2.3:a:adobe:commerce:2.4.5:p16:*:*:*:*:*:*cpe:2.3:a:adobe:commerce:2.4.5:p17:*:*:*:*:*:*cpe:2.3:a:adobe:commerce:2.4.5:p2:*:*:*:*:*:*cpe:2.3:a:adobe:commerce:2.4.5:p3:*:*:*:*:*:*cpe:2.3:a:adobe:commerce:2.4.5:p4:*:*:*:*:*:*cpe:2.3:a:adobe:commerce:2.4.5:p5:*:*:*:*:*:*cpe:2.3:a:adobe:commerce:2.4.5:p6:*:*:*:*:*:*cpe:2.3:a:adobe:commerce:2.4.5:p7:*:*:*:*:*:*Ücretsiz ve açık kaynak honeypot sensörümüz, sunucunuzun kullanmadığı portlarda bekler; bağlanan tarayıcıları ve saldırganları ortak kara listeye bildirir.