[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$f3qTNM_EdarKrPZaicfp94ulHQa1cLT8Bj20vF8-0jEs":3,"g5a-family:adobe\u002Fcommerce":174,"g5a-ex:adobe\u002Fcommerce@*":181},{"success":4,"data":5},true,{"product":6,"versions":62,"topVulnerabilitiesByEpss":80,"kevVulnerabilities":136,"seoMetadata":152,"meta":171},{"vendorName":7,"productName":8,"versionCount":9,"totalCves":10,"kevCount":11,"lastCveUpdate":12,"versions":13,"description":61},"adobe","commerce",17,141,3,"2025-10-14",[14,18,20,22,24,26,28,32,36,38,41,43,46,49,52,55,58],{"version":15,"cve_count":16,"kev_count":16,"has_kev":17},"2.3.0",0,false,{"version":19,"cve_count":16,"kev_count":16,"has_kev":17},"2.3.2",{"version":21,"cve_count":16,"kev_count":16,"has_kev":17},"2.3.3",{"version":23,"cve_count":16,"kev_count":16,"has_kev":17},"2.3.4",{"version":25,"cve_count":16,"kev_count":16,"has_kev":17},"2.3.5",{"version":27,"cve_count":16,"kev_count":16,"has_kev":17},"2.3.6",{"version":29,"cve_count":30,"kev_count":31,"has_kev":4},"2.3.7",63,2,{"version":33,"cve_count":34,"kev_count":35,"has_kev":4},"2.4.0",52,1,{"version":37,"cve_count":34,"kev_count":35,"has_kev":4},"2.4.1",{"version":39,"cve_count":40,"kev_count":35,"has_kev":4},"2.4.2",53,{"version":42,"cve_count":30,"kev_count":31,"has_kev":4},"2.4.3",{"version":44,"cve_count":45,"kev_count":31,"has_kev":4},"2.4.4",136,{"version":47,"cve_count":48,"kev_count":31,"has_kev":4},"2.4.5",128,{"version":50,"cve_count":51,"kev_count":31,"has_kev":4},"2.4.6",122,{"version":53,"cve_count":54,"kev_count":31,"has_kev":4},"2.4.7",93,{"version":56,"cve_count":57,"kev_count":35,"has_kev":4},"2.4.8",36,{"version":59,"cve_count":60,"kev_count":35,"has_kev":4},"2.4.9",6,"Commerce by Adobe is a technology product with 17 tracked versions and 141 known security vulnerabilities including 3 CISA Known Exploited Vulnerabilities. Get comprehensive security analysis, vulnerability tracking, and threat intelligence for this product.",[63,64,65,66,67,68,69,70,71,72,73,74,75,76,77,78,79],{"version":15,"cve_count":16,"kev_count":16,"has_kev":17},{"version":19,"cve_count":16,"kev_count":16,"has_kev":17},{"version":21,"cve_count":16,"kev_count":16,"has_kev":17},{"version":23,"cve_count":16,"kev_count":16,"has_kev":17},{"version":25,"cve_count":16,"kev_count":16,"has_kev":17},{"version":27,"cve_count":16,"kev_count":16,"has_kev":17},{"version":29,"cve_count":30,"kev_count":31,"has_kev":4},{"version":33,"cve_count":34,"kev_count":35,"has_kev":4},{"version":37,"cve_count":34,"kev_count":35,"has_kev":4},{"version":39,"cve_count":40,"kev_count":35,"has_kev":4},{"version":42,"cve_count":30,"kev_count":31,"has_kev":4},{"version":44,"cve_count":45,"kev_count":31,"has_kev":4},{"version":47,"cve_count":48,"kev_count":31,"has_kev":4},{"version":50,"cve_count":51,"kev_count":31,"has_kev":4},{"version":53,"cve_count":54,"kev_count":31,"has_kev":4},{"version":56,"cve_count":57,"kev_count":35,"has_kev":4},{"version":59,"cve_count":60,"kev_count":35,"has_kev":4},[81,89,94,100,107,112,119,122,127,130],{"cveId":82,"description":83,"publishedDate":84,"cvssScore":85,"cvssVersion":86,"severity":87,"isKev":4,"epssScore":88},"CVE-2024-34102","Adobe Commerce versions 2.4.7, 2.4.6-p5, 2.4.5-p7, 2.4.4-p8 and earlier are affected by an Improper Restriction of XML External Entity Reference ('XXE') vulnerability that could result in arbitrary code execution. An attacker could exploit this vulnerability by sending a crafted XML document that references external entities. Exploitation of this issue does not require user interaction.","2024-06-13",9.8,"v3.1","Critical",0.99994,{"cveId":90,"description":91,"publishedDate":92,"cvssScore":85,"cvssVersion":86,"severity":87,"isKev":4,"epssScore":93},"CVE-2022-24086","Adobe Commerce versions 2.4.3-p1 (and earlier) and 2.3.7-p2 (and earlier) are affected by an improper input validation vulnerability during the checkout process. Exploitation of this issue does not require user interaction and could result in arbitrary code execution.","2022-02-16",0.99199,{"cveId":95,"description":96,"publishedDate":97,"cvssScore":98,"cvssVersion":86,"severity":87,"isKev":4,"epssScore":99},"CVE-2025-54236","Adobe Commerce versions 2.4.9-alpha2, 2.4.8-p2, 2.4.7-p7, 2.4.6-p12, 2.4.5-p14, 2.4.4-p15 and earlier are affected by an Improper Input Validation vulnerability. A successful attacker can abuse this to achieve session takeover, increasing the confidentiality, and integrity impact to high. Exploitation of this issue does not require user interaction.","2025-09-09",9.1,0.96742,{"cveId":101,"description":102,"publishedDate":103,"cvssScore":104,"cvssVersion":86,"severity":105,"isKev":17,"epssScore":106},"CVE-2022-34258","Adobe Commerce versions 2.4.3-p2 (and earlier), 2.3.7-p3 (and earlier) and 2.4.4 (and earlier) are affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by an attacker with admin privileges to inject malicious scripts into vulnerable form fields. Malicious JavaScript may be executed in a victim’s browser when they browse to the page containing the vulnerable field.","2022-08-16",4.8,"Medium",0.68332,{"cveId":108,"description":109,"publishedDate":110,"cvssScore":104,"cvssVersion":86,"severity":105,"isKev":17,"epssScore":111},"CVE-2023-22249","Adobe Commerce versions 2.4.4-p2 (and earlier) and 2.4.5-p1 (and earlier) are affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a high-privileged attacker to inject malicious scripts into vulnerable form fields. Malicious JavaScript may be executed in a victim’s browser when they browse to the page containing the vulnerable field.","2023-03-27",0.57424,{"cveId":113,"description":114,"publishedDate":115,"cvssScore":116,"cvssVersion":86,"severity":117,"isKev":17,"epssScore":118},"CVE-2026-34648","Adobe Commerce versions 2.4.9-beta1, 2.4.8-p4, 2.4.7-p9, 2.4.6-p14, 2.4.5-p16, 2.4.4-p17 and earlier are affected by an Uncontrolled Resource Consumption vulnerability that could lead to application denial-of-service. An attacker could exploit this vulnerability to exhaust system resources, resulting in an application denial-of-service condition. Exploitation of this issue does not require user interaction.","2026-05-12",7.5,"High",0.2255,{"cveId":120,"description":114,"publishedDate":115,"cvssScore":116,"cvssVersion":86,"severity":117,"isKev":17,"epssScore":121},"CVE-2026-34650",0.15933,{"cveId":123,"description":124,"publishedDate":125,"cvssScore":98,"cvssVersion":86,"severity":87,"isKev":17,"epssScore":126},"CVE-2025-24434","Adobe Commerce versions 2.4.8-beta1, 2.4.7-p3, 2.4.6-p8, 2.4.5-p10, 2.4.4-p11 and earlier are affected by an Incorrect Authorization vulnerability that could result in Privilege escalation. An attacker could leverage this vulnerability to bypass security measures and gain unauthorized access. Exploitation of this issue does not require user interaction. A successful attacker can abuse this to achieve session takeover, increasing the confidentiality and integrity impact as high.","2025-02-11",0.15857,{"cveId":128,"description":114,"publishedDate":115,"cvssScore":116,"cvssVersion":86,"severity":117,"isKev":17,"epssScore":129},"CVE-2026-34649",0.14383,{"cveId":131,"description":132,"publishedDate":133,"cvssScore":134,"cvssVersion":86,"severity":105,"isKev":17,"epssScore":135},"CVE-2022-35698","Adobe Commerce versions 2.4.4-p1 (and earlier) and 2.4.5 (and earlier) are affected by a Stored Cross-site Scripting vulnerability. Exploitation of this issue does not require user interaction and could result in a post-authentication arbitrary code execution.","2022-10-14",5.4,0.09722,[137,142,147],{"cveId":95,"description":96,"publishedDate":97,"cvssScore":98,"severity":87,"isKev":4,"epssScore":99,"cisaVulnName":138,"cisaDateAdded":139,"cisaShortDescription":140,"cisaRequiredAction":141},"Adobe Commerce and Magento Improper Input Validation Vulnerability","2025-10-24","Adobe Commerce and Magento Open Source contain an improper input validation vulnerability that could allow an attacker to take over customer accounts through the Commerce REST API.","Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.",{"cveId":82,"description":83,"publishedDate":84,"cvssScore":85,"severity":87,"isKev":4,"epssScore":88,"cisaVulnName":143,"cisaDateAdded":144,"cisaShortDescription":145,"cisaRequiredAction":146},"Adobe Commerce and Magento Open Source Improper Restriction of XML External Entity Reference (XXE) Vulnerability","2024-07-17","Adobe Commerce and Magento Open Source contain an improper restriction of XML external entity reference (XXE) vulnerability that allows for remote code execution.","Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.",{"cveId":90,"description":91,"publishedDate":92,"cvssScore":85,"severity":87,"isKev":4,"epssScore":93,"cisaVulnName":148,"cisaDateAdded":149,"cisaShortDescription":150,"cisaRequiredAction":151},"Adobe Commerce and Magento Open Source Improper Input Validation Vulnerability","2022-02-15","Adobe Commerce and Magento Open Source contain an improper input validation vulnerability which can allow for arbitrary code execution.","Apply updates per vendor instructions.",{"title":153,"metaDescription":154,"keywords":155,"structuredData":156},"Commerce by Adobe - Security Vulnerabilities & Analysis | EdgeProtect","Comprehensive security analysis for Commerce by Adobe covering 17 versions with 141 tracked vulnerabilities including 3 critical and 0 high-severity issues and 3 CISA KEV vulnerabilities. Real-time threat intelligence, CVE tracking, and security recommendations.","Commerce vulnerabilities, Commerce security, Commerce CVE, Adobe Commerce, Commerce threat intelligence, Adobe security, product security analysis, cybersecurity threats, vulnerability management, CVE tracking, Commerce KEV, Commerce exploited vulnerabilities",{"@context":157,"@type":158,"name":159,"description":154,"url":160,"manufacturer":161,"applicationCategory":165,"softwareVersion":166,"mainEntity":167},"https:\u002F\u002Fschema.org","SoftwareApplication","Commerce","https:\u002F\u002Fedgeprotect.io\u002Fvulnerabilities\u002Ftechnologies\u002Fvendors\u002Fadobe\u002Fcommerce",{"@type":162,"name":163,"url":164},"Organization","Adobe","https:\u002F\u002Fedgeprotect.io\u002Fvendors\u002Fadobe","Security Software","17 versions tracked",{"@type":168,"name":169,"description":170,"vulnerabilityCount":10,"dateModified":12},"SecurityVulnerability","Commerce Security Vulnerabilities","Security vulnerabilities affecting Commerce by Adobe",{"totalVersions":9,"totalVulnerabilities":10,"kevVulnerabilities":11,"lastUpdated":12,"generatedAt":172,"apiVersion":173},"2026-10-28T14:24:38.674Z","3.0",[175,178],{"product":176,"cves":177},"commerce_b2b",66,{"product":179,"cves":180},"commerce_webhooks",10,{"rows":182,"total":11,"capped":17,"failed":16},[183,244,258],{"cveId":95,"name":138,"severity":87,"cvss":98,"added":139,"epss":99,"published":184,"ranges":185,"checked":4,"hits":243,"covers":17},"2025-09-09T14:15:46.563",[44,186,187,188,189,190,191,192,193,194,195,196,197,198,199,200,47,201,202,203,204,205,206,207,208,209,210,211,212,213,214,50,215,216,217,218,219,220,221,222,223,224,225,226,227,228,229,53,230,231,232,233,234,235,236,237,238,56,239,240,241,242],"2.4.4-p1","2.4.4-p2","2.4.4-p3","2.4.4-p4","2.4.4-p5","2.4.4-p6","2.4.4-p7","2.4.4-p8","2.4.4-p9","2.4.4-p10","2.4.4-p11","2.4.4-p12","2.4.4-p13","2.4.4-p14","2.4.4-p15","2.4.5-p1","2.4.5-p2","2.4.5-p3","2.4.5-p4","2.4.5-p5","2.4.5-p6","2.4.5-p7","2.4.5-p8","2.4.5-p9","2.4.5-p10","2.4.5-p11","2.4.5-p12","2.4.5-p13","2.4.5-p14","2.4.6-p1","2.4.6-p2","2.4.6-p3","2.4.6-p4","2.4.6-p5","2.4.6-p6","2.4.6-p7","2.4.6-p8","2.4.6-p9","2.4.6-p10","2.4.6-p11","2.4.6-p12","2.4.7-b1","2.4.7-b2","2.4.7-beta3","2.4.7-p1","2.4.7-p2","2.4.7-p3","2.4.7-p4","2.4.7-p5","2.4.7-p6","2.4.7-p7","2.4.8-beta1","2.4.8-beta2","2.4.8-p1","2.4.8-p2","2.4.9-alpha1","2.4.9-alpha2",[],{"cveId":82,"name":143,"severity":87,"cvss":85,"added":144,"epss":88,"published":245,"ranges":246,"checked":4,"hits":257,"covers":17},"2024-06-13T09:15:10.38",[39,247,248,249,250,251,42,252,253,254,255,256,44,186,187,188,189,190,191,193,47,201,202,203,204,205,207,50,215,216,217,219,53],"2.4.2-ext-1","2.4.2-ext-2","2.4.2-ext-3","2.4.2-ext-4","2.4.2-ext-7","2.4.3-ext-1","2.4.3-ext-2","2.4.3-ext-3","2.4.3-ext-4","2.4.3-ext-7",[],{"cveId":90,"name":148,"severity":87,"cvss":85,"added":149,"epss":93,"published":259,"ranges":260,"checked":4,"hits":267,"covers":17},"2022-02-16T17:15:13.307",[261,262,263,264,265,42,266],"before 2.3.0","2.3.3 to 2.3.6","2.3.7-p1","2.3.7-p2","2.4.0 to 2.4.2","2.4.3-p1",[]]