[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fRx8u9eG0Sdv_B3ZN1pOwC8gzkOsdIucgUMoSEPJR4c8":3,"g5a-family:adobe\u002Fcommerce_b2b":146,"g5a-ex:adobe\u002Fcommerce_b2b@*":147},{"success":4,"data":5},true,{"product":6,"versions":49,"topVulnerabilitiesByEpss":64,"kevVulnerabilities":118,"seoMetadata":124,"meta":143},{"vendorName":7,"productName":8,"versionCount":9,"totalCves":10,"kevCount":11,"lastCveUpdate":12,"versions":13,"description":48},"adobe","commerce_b2b",14,66,1,"2025-10-14",[14,18,20,22,24,26,28,31,33,35,37,40,43,46],{"version":15,"cve_count":16,"kev_count":16,"has_kev":17},"1.2.0",0,false,{"version":19,"cve_count":16,"kev_count":16,"has_kev":17},"1.3.0",{"version":21,"cve_count":16,"kev_count":16,"has_kev":17},"1.3.1",{"version":23,"cve_count":16,"kev_count":16,"has_kev":17},"1.3.2",{"version":25,"cve_count":10,"kev_count":11,"has_kev":4},"1.3.3",{"version":27,"cve_count":10,"kev_count":11,"has_kev":4},"1.3.4",{"version":29,"cve_count":30,"kev_count":16,"has_kev":17},"1.3.5",65,{"version":32,"cve_count":16,"kev_count":16,"has_kev":17},"1.4.0",{"version":34,"cve_count":16,"kev_count":16,"has_kev":17},"1.4.1",{"version":36,"cve_count":10,"kev_count":11,"has_kev":4},"1.4.2",{"version":38,"cve_count":39,"kev_count":16,"has_kev":17},"1.5.0",30,{"version":41,"cve_count":42,"kev_count":16,"has_kev":17},"1.5.1",4,{"version":44,"cve_count":45,"kev_count":11,"has_kev":4},"1.5.2",12,{"version":47,"cve_count":45,"kev_count":11,"has_kev":4},"1.5.3","Commerce B2b by Adobe is a technology product with 14 tracked versions and 66 known security vulnerabilities including 1 CISA Known Exploited Vulnerability. Get comprehensive security analysis, vulnerability tracking, and threat intelligence for this product.",[50,51,52,53,54,55,56,57,58,59,60,61,62,63],{"version":15,"cve_count":16,"kev_count":16,"has_kev":17},{"version":19,"cve_count":16,"kev_count":16,"has_kev":17},{"version":21,"cve_count":16,"kev_count":16,"has_kev":17},{"version":23,"cve_count":16,"kev_count":16,"has_kev":17},{"version":25,"cve_count":10,"kev_count":11,"has_kev":4},{"version":27,"cve_count":10,"kev_count":11,"has_kev":4},{"version":29,"cve_count":30,"kev_count":16,"has_kev":17},{"version":32,"cve_count":16,"kev_count":16,"has_kev":17},{"version":34,"cve_count":16,"kev_count":16,"has_kev":17},{"version":36,"cve_count":10,"kev_count":11,"has_kev":4},{"version":38,"cve_count":39,"kev_count":16,"has_kev":17},{"version":41,"cve_count":42,"kev_count":16,"has_kev":17},{"version":44,"cve_count":45,"kev_count":11,"has_kev":4},{"version":47,"cve_count":45,"kev_count":11,"has_kev":4},[65,73,80,83,88,91,95,101,108,113],{"cveId":66,"description":67,"publishedDate":68,"cvssScore":69,"cvssVersion":70,"severity":71,"isKev":4,"epssScore":72},"CVE-2025-54236","Adobe Commerce versions 2.4.9-alpha2, 2.4.8-p2, 2.4.7-p7, 2.4.6-p12, 2.4.5-p14, 2.4.4-p15 and earlier are affected by an Improper Input Validation vulnerability. A successful attacker can abuse this to achieve session takeover, increasing the confidentiality, and integrity impact to high. Exploitation of this issue does not require user interaction.","2025-09-09",9.1,"v3.1","Critical",0.96742,{"cveId":74,"description":75,"publishedDate":76,"cvssScore":77,"cvssVersion":70,"severity":78,"isKev":17,"epssScore":79},"CVE-2026-34648","Adobe Commerce versions 2.4.9-beta1, 2.4.8-p4, 2.4.7-p9, 2.4.6-p14, 2.4.5-p16, 2.4.4-p17 and earlier are affected by an Uncontrolled Resource Consumption vulnerability that could lead to application denial-of-service. An attacker could exploit this vulnerability to exhaust system resources, resulting in an application denial-of-service condition. Exploitation of this issue does not require user interaction.","2026-05-12",7.5,"High",0.2255,{"cveId":81,"description":75,"publishedDate":76,"cvssScore":77,"cvssVersion":70,"severity":78,"isKev":17,"epssScore":82},"CVE-2026-34650",0.15933,{"cveId":84,"description":85,"publishedDate":86,"cvssScore":69,"cvssVersion":70,"severity":71,"isKev":17,"epssScore":87},"CVE-2025-24434","Adobe Commerce versions 2.4.8-beta1, 2.4.7-p3, 2.4.6-p8, 2.4.5-p10, 2.4.4-p11 and earlier are affected by an Incorrect Authorization vulnerability that could result in Privilege escalation. An attacker could leverage this vulnerability to bypass security measures and gain unauthorized access. Exploitation of this issue does not require user interaction. A successful attacker can abuse this to achieve session takeover, increasing the confidentiality and integrity impact as high.","2025-02-11",0.15857,{"cveId":89,"description":75,"publishedDate":76,"cvssScore":77,"cvssVersion":70,"severity":78,"isKev":17,"epssScore":90},"CVE-2026-34649",0.14383,{"cveId":92,"description":93,"publishedDate":86,"cvssScore":77,"cvssVersion":70,"severity":78,"isKev":17,"epssScore":94},"CVE-2025-24406","Adobe Commerce versions 2.4.8-beta1, 2.4.7-p3, 2.4.6-p8, 2.4.5-p10, 2.4.4-p11 and earlier are affected by an Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability that could lead to a security feature bypass. An unauthenticated attacker could exploit this vulnerability to modify files that are stored outside the restricted directory. Exploitation of this issue does not require user interaction.",0.01278,{"cveId":96,"description":97,"publishedDate":98,"cvssScore":99,"cvssVersion":70,"severity":71,"isKev":17,"epssScore":100},"CVE-2024-45115","Adobe Commerce versions 2.4.7-p2, 2.4.6-p7, 2.4.5-p9, 2.4.4-p10 and earlier are affected by an Improper Authentication vulnerability that could result in privilege escalation. An attacker could exploit this vulnerability to gain unauthorized access or elevated privileges within the application. Exploitation of this issue does not require user interaction.","2024-10-10",9.8,0.0108,{"cveId":102,"description":103,"publishedDate":104,"cvssScore":105,"cvssVersion":70,"severity":106,"isKev":17,"epssScore":107},"CVE-2025-27189","Adobe Commerce versions 2.4.7-p4, 2.4.6-p9, 2.4.5-p11, 2.4.4-p12, 2.4.8-beta2 and earlier are affected by a Cross-Site Request Forgery (CSRF) vulnerability that could be exploited to cause a denial-of-service condition. An attacker could trick a logged-in user into submitting a forged request to the vulnerable application, which may disrupt service availability. Exploitation of this issue requires user interaction, typically in the form of clicking a malicious link or visiting an attacker-controlled website.","2025-04-08",4.3,"Medium",0.00936,{"cveId":109,"description":110,"publishedDate":98,"cvssScore":111,"cvssVersion":70,"severity":78,"isKev":17,"epssScore":112},"CVE-2024-45116","Adobe Commerce versions 2.4.7-p2, 2.4.6-p7, 2.4.5-p9, 2.4.4-p10 and earlier are affected by a Cross-Site Scripting (XSS) vulnerability that could be exploited to execute arbitrary code. If an admin attacker can trick a user into clicking a specially crafted link or submitting a form, malicious scripts may be executed within the context of the victim's browser and have high impact on confidentiality and integrity. Exploitation of this issue requires user interaction.",8.1,0.00916,{"cveId":114,"description":115,"publishedDate":98,"cvssScore":116,"cvssVersion":70,"severity":78,"isKev":17,"epssScore":117},"CVE-2024-45117","Adobe Commerce versions 2.4.7-p2, 2.4.6-p7, 2.4.5-p9, 2.4.4-p10 and earlier are affected by an Improper Input Validation vulnerability that could lead to arbitrary file system read. An admin attacker could exploit this vulnerability to read files from the system outside of the intended directories via PHP filter chain and also can have a low-availability impact on the service. Exploitation of this issue does not require user interaction and scope is changed.",7.6,0.00852,[119],{"cveId":66,"description":67,"publishedDate":68,"cvssScore":69,"severity":71,"isKev":4,"epssScore":72,"cisaVulnName":120,"cisaDateAdded":121,"cisaShortDescription":122,"cisaRequiredAction":123},"Adobe Commerce and Magento Improper Input Validation Vulnerability","2025-10-24","Adobe Commerce and Magento Open Source contain an improper input validation vulnerability that could allow an attacker to take over customer accounts through the Commerce REST API.","Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.",{"title":125,"metaDescription":126,"keywords":127,"structuredData":128},"Commerce B2b by Adobe - Security Vulnerabilities & Analysis | EdgeProtect","Comprehensive security analysis for Commerce B2b by Adobe covering 14 versions with 66 tracked vulnerabilities including 1 critical and 0 high-severity issues and 1 CISA KEV vulnerability. Real-time threat intelligence, CVE tracking, and security recommendations.","Commerce B2b vulnerabilities, Commerce B2b security, Commerce B2b CVE, Adobe Commerce B2b, Commerce B2b threat intelligence, Adobe security, product security analysis, cybersecurity threats, vulnerability management, CVE tracking, Commerce B2b KEV, Commerce B2b exploited vulnerabilities",{"@context":129,"@type":130,"name":131,"description":126,"url":132,"manufacturer":133,"applicationCategory":137,"softwareVersion":138,"mainEntity":139},"https:\u002F\u002Fschema.org","SoftwareApplication","Commerce B2b","https:\u002F\u002Fedgeprotect.io\u002Fvulnerabilities\u002Ftechnologies\u002Fvendors\u002Fadobe\u002Fcommerce_b2b",{"@type":134,"name":135,"url":136},"Organization","Adobe","https:\u002F\u002Fedgeprotect.io\u002Fvendors\u002Fadobe","Security Software","14 versions tracked",{"@type":140,"name":141,"description":142,"vulnerabilityCount":10,"dateModified":12},"SecurityVulnerability","Commerce B2b Security Vulnerabilities","Security vulnerabilities affecting Commerce B2b by Adobe",{"totalVersions":9,"totalVulnerabilities":10,"kevVulnerabilities":11,"lastUpdated":12,"generatedAt":144,"apiVersion":145},"2026-10-28T15:41:18.506Z","3.0",[],{"rows":148,"total":11,"capped":17,"failed":16},[149],{"cveId":66,"name":120,"severity":71,"cvss":69,"added":121,"epss":72,"published":150,"ranges":151,"checked":4,"hits":192,"covers":17},"2025-09-09T14:15:46.563",[25,152,153,154,155,156,157,158,159,160,161,162,163,164,165,166,27,167,168,169,170,171,172,173,174,175,176,177,178,179,180,36,181,182,183,184,185,186,187,44,188,189,190,191],"1.3.3-p1","1.3.3-p2","1.3.3-p3","1.3.3-p4","1.3.3-p5","1.3.3-p6","1.3.3-p7","1.3.3-p8","1.3.3-p9","1.3.3-p10","1.3.3-p11","1.3.3-p12","1.3.3-p13","1.3.3-p14","1.3.3-p15","1.3.4-p1","1.3.4-p2","1.3.4-p3","1.3.4-p4","1.3.4-p5","1.3.4-p6","1.3.4-p7","1.3.4-p8","1.3.4-p9","1.3.4-p10","1.3.4-p11","1.3.4-p12","1.3.4-p13","1.3.4-p14","1.4.2-p1","1.4.2-p2","1.4.2-p3","1.4.2-p4","1.4.2-p5","1.4.2-p6","1.4.2-p7","1.5.2-p1","1.5.2-p2","1.5.3-alpha1","1.5.3-alpha2",[]]