Vulnerabilities
Vulnerable Software

Vulnerability Details CVE-2025-24409

Adobe Commerce versions 2.4.8-beta1, 2.4.7-p3, 2.4.6-p8, 2.4.5-p10, 2.4.4-p11 and earlier are affected by an Incorrect Authorization vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to bypass security measures and gain unauthorized access, leading to both a High impact to confidentiality and Low impact to integrity. Exploitation of this issue does not require user interaction.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.002
EPSS Ranking 38.7%
CVSS Severity
CVSS v3 Score 8.2
Products affected by CVE-2025-24409
  • Adobe » Commerce » Version: N/A
    cpe:2.3:a:adobe:commerce:-
  • Adobe » Commerce » Version: 2.3.7
    cpe:2.3:a:adobe:commerce:2.3.7
  • Adobe » Commerce » Version: 2.4.0
    cpe:2.3:a:adobe:commerce:2.4.0
  • Adobe » Commerce » Version: 2.4.1
    cpe:2.3:a:adobe:commerce:2.4.1
  • Adobe » Commerce » Version: 2.4.2
    cpe:2.3:a:adobe:commerce:2.4.2
  • Adobe » Commerce » Version: 2.4.3
    cpe:2.3:a:adobe:commerce:2.4.3
  • Adobe » Commerce » Version: 2.4.4
    cpe:2.3:a:adobe:commerce:2.4.4
  • Adobe » Commerce » Version: 2.4.5
    cpe:2.3:a:adobe:commerce:2.4.5
  • Adobe » Commerce » Version: 2.4.6
    cpe:2.3:a:adobe:commerce:2.4.6
  • Adobe » Commerce » Version: 2.4.7
    cpe:2.3:a:adobe:commerce:2.4.7
  • Adobe » Commerce » Version: 2.4.8
    cpe:2.3:a:adobe:commerce:2.4.8
  • Adobe » Commerce B2b » Version: 1.2.0
    cpe:2.3:a:adobe:commerce_b2b:1.2.0
  • Adobe » Commerce B2b » Version: 1.3.0
    cpe:2.3:a:adobe:commerce_b2b:1.3.0
  • Adobe » Commerce B2b » Version: 1.3.1
    cpe:2.3:a:adobe:commerce_b2b:1.3.1
  • Adobe » Commerce B2b » Version: 1.3.2
    cpe:2.3:a:adobe:commerce_b2b:1.3.2
  • Adobe » Commerce B2b » Version: 1.3.3
    cpe:2.3:a:adobe:commerce_b2b:1.3.3
  • Adobe » Commerce B2b » Version: 1.3.4
    cpe:2.3:a:adobe:commerce_b2b:1.3.4
  • Adobe » Commerce B2b » Version: 1.3.5
    cpe:2.3:a:adobe:commerce_b2b:1.3.5
  • Adobe » Commerce B2b » Version: 1.4.2
    cpe:2.3:a:adobe:commerce_b2b:1.4.2
  • Adobe » Commerce B2b » Version: 1.5.0
    cpe:2.3:a:adobe:commerce_b2b:1.5.0
  • Adobe » Magento » Version: N/A
    cpe:2.3:a:adobe:magento:-
  • Adobe » Magento » Version: 2.3.0
    cpe:2.3:a:adobe:magento:2.3.0
  • Adobe » Magento » Version: 2.3.1
    cpe:2.3:a:adobe:magento:2.3.1
  • Adobe » Magento » Version: 2.3.2
    cpe:2.3:a:adobe:magento:2.3.2
  • Adobe » Magento » Version: 2.3.3
    cpe:2.3:a:adobe:magento:2.3.3
  • Adobe » Magento » Version: 2.3.4
    cpe:2.3:a:adobe:magento:2.3.4
  • Adobe » Magento » Version: 2.3.5
    cpe:2.3:a:adobe:magento:2.3.5
  • Adobe » Magento » Version: 2.3.6
    cpe:2.3:a:adobe:magento:2.3.6
  • Adobe » Magento » Version: 2.3.7
    cpe:2.3:a:adobe:magento:2.3.7
  • Adobe » Magento » Version: 2.4.0
    cpe:2.3:a:adobe:magento:2.4.0
  • Adobe » Magento » Version: 2.4.1
    cpe:2.3:a:adobe:magento:2.4.1
  • Adobe » Magento » Version: 2.4.2
    cpe:2.3:a:adobe:magento:2.4.2
  • Adobe » Magento » Version: 2.4.3
    cpe:2.3:a:adobe:magento:2.4.3
  • Adobe » Magento » Version: 2.4.4
    cpe:2.3:a:adobe:magento:2.4.4
  • Adobe » Magento » Version: 2.4.5
    cpe:2.3:a:adobe:magento:2.4.5
  • Adobe » Magento » Version: 2.4.6
    cpe:2.3:a:adobe:magento:2.4.6
  • Adobe » Magento » Version: 2.4.7
    cpe:2.3:a:adobe:magento:2.4.7
  • Adobe » Magento » Version: 2.4.8
    cpe:2.3:a:adobe:magento:2.4.8


Contact Us

Shodan ® - All rights reserved