Vulnerability Details CVE-2024-39412
Adobe Commerce versions 2.4.7-p1, 2.4.6-p6, 2.4.5-p8, 2.4.4-p9 and earlier are affected by an Improper Authorization vulnerability that could result in a Security feature bypass. A low-privileged attacker could leverage this vulnerability to bypass security measures and perform a minor integrity change. Exploitation of this issue does not require user interaction.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.001
EPSS Ranking 23.1%
CVSS Severity
CVSS v3 Score 4.3
Products affected by CVE-2024-39412
-
cpe:2.3:a:adobe:commerce:-
-
cpe:2.3:a:adobe:commerce:2.3.7
-
cpe:2.3:a:adobe:commerce:2.4.0
-
cpe:2.3:a:adobe:commerce:2.4.1
-
cpe:2.3:a:adobe:commerce:2.4.2
-
cpe:2.3:a:adobe:commerce:2.4.3
-
cpe:2.3:a:adobe:commerce:2.4.4
-
cpe:2.3:a:adobe:commerce:2.4.5
-
cpe:2.3:a:adobe:commerce:2.4.6
-
cpe:2.3:a:adobe:commerce:2.4.7
-
cpe:2.3:a:adobe:magento:-
-
cpe:2.3:a:adobe:magento:2.4.3
-
cpe:2.3:a:adobe:magento:2.4.4
-
cpe:2.3:a:adobe:magento:2.4.5
-
cpe:2.3:a:adobe:magento:2.4.6
-
cpe:2.3:a:adobe:magento:2.4.7