Shodan
Vulnerabilities
Vulnerable Software

Vulnerability Details CVE-2025-49557

Adobe Commerce versions 2.4.9-alpha1, 2.4.8-p1, 2.4.7-p6, 2.4.6-p11, 2.4.5-p13, 2.4.4-p14 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability that could be exploited by a low-privileged attacker to inject malicious scripts into vulnerable form fields. A successful attacker can abuse this to achieve session takeover, increasing the confidentiality and integrity impact as high. Exploitation of this issue requires user interaction in that a victim must browse to the page containing the vulnerable field. Scope is changed.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.001
EPSS Ranking 17.8%
CVSS Severity
CVSS v3 Score 8.7
Products affected by CVE-2025-49557
  • Adobe » Commerce » Version: 2.3.0
    cpe:2.3:a:adobe:commerce:2.3.0
  • Adobe » Commerce » Version: 2.3.2
    cpe:2.3:a:adobe:commerce:2.3.2
  • Adobe » Commerce » Version: 2.3.3
    cpe:2.3:a:adobe:commerce:2.3.3
  • Adobe » Commerce » Version: 2.3.4
    cpe:2.3:a:adobe:commerce:2.3.4
  • Adobe » Commerce » Version: 2.3.5
    cpe:2.3:a:adobe:commerce:2.3.5
  • Adobe » Commerce » Version: 2.3.6
    cpe:2.3:a:adobe:commerce:2.3.6
  • Adobe » Commerce » Version: 2.3.7
    cpe:2.3:a:adobe:commerce:2.3.7
  • Adobe » Commerce » Version: 2.4.0
    cpe:2.3:a:adobe:commerce:2.4.0
  • Adobe » Commerce » Version: 2.4.1
    cpe:2.3:a:adobe:commerce:2.4.1
  • Adobe » Commerce » Version: 2.4.2
    cpe:2.3:a:adobe:commerce:2.4.2
  • Adobe » Commerce » Version: 2.4.3
    cpe:2.3:a:adobe:commerce:2.4.3
  • Adobe » Commerce » Version: 2.4.4
    cpe:2.3:a:adobe:commerce:2.4.4
  • Adobe » Commerce » Version: 2.4.5
    cpe:2.3:a:adobe:commerce:2.4.5
  • Adobe » Commerce » Version: 2.4.6
    cpe:2.3:a:adobe:commerce:2.4.6
  • Adobe » Commerce » Version: 2.4.7
    cpe:2.3:a:adobe:commerce:2.4.7
  • Adobe » Commerce » Version: 2.4.8
    cpe:2.3:a:adobe:commerce:2.4.8
  • Adobe » Commerce B2b » Version: 1.2.0
    cpe:2.3:a:adobe:commerce_b2b:1.2.0
  • Adobe » Commerce B2b » Version: 1.3.3
    cpe:2.3:a:adobe:commerce_b2b:1.3.3
  • Adobe » Commerce B2b » Version: 1.3.4
    cpe:2.3:a:adobe:commerce_b2b:1.3.4
  • Adobe » Commerce B2b » Version: 1.3.5
    cpe:2.3:a:adobe:commerce_b2b:1.3.5
  • Adobe » Commerce B2b » Version: 1.4.2
    cpe:2.3:a:adobe:commerce_b2b:1.4.2
  • Adobe » Commerce B2b » Version: 1.5.2
    cpe:2.3:a:adobe:commerce_b2b:1.5.2
  • Adobe » Commerce B2b » Version: 1.5.3
    cpe:2.3:a:adobe:commerce_b2b:1.5.3
  • Adobe » Magento » Version: 2.3.2
    cpe:2.3:a:adobe:magento:2.3.2
  • Adobe » Magento » Version: 2.3.3
    cpe:2.3:a:adobe:magento:2.3.3
  • Adobe » Magento » Version: 2.3.4
    cpe:2.3:a:adobe:magento:2.3.4
  • Adobe » Magento » Version: 2.3.5
    cpe:2.3:a:adobe:magento:2.3.5
  • Adobe » Magento » Version: 2.3.6
    cpe:2.3:a:adobe:magento:2.3.6
  • Adobe » Magento » Version: 2.3.7
    cpe:2.3:a:adobe:magento:2.3.7
  • Adobe » Magento » Version: 2.4.0
    cpe:2.3:a:adobe:magento:2.4.0
  • Adobe » Magento » Version: 2.4.1
    cpe:2.3:a:adobe:magento:2.4.1
  • Adobe » Magento » Version: 2.4.2
    cpe:2.3:a:adobe:magento:2.4.2
  • Adobe » Magento » Version: 2.4.3
    cpe:2.3:a:adobe:magento:2.4.3
  • Adobe » Magento » Version: 2.4.4
    cpe:2.3:a:adobe:magento:2.4.4
  • Adobe » Magento » Version: 2.4.5
    cpe:2.3:a:adobe:magento:2.4.5
  • Adobe » Magento » Version: 2.4.6
    cpe:2.3:a:adobe:magento:2.4.6
  • Adobe » Magento » Version: 2.4.7
    cpe:2.3:a:adobe:magento:2.4.7
  • Adobe » Magento » Version: 2.4.8
    cpe:2.3:a:adobe:magento:2.4.8
  • Adobe » Magento » Version: 2.4.9
    cpe:2.3:a:adobe:magento:2.4.9


Products
Pricing
Contact Us

Shodan ® - All rights reserved