How many Adobe commerce webhooks CVEs are in CISA KEV?

Yes — 1 of Adobe commerce webhooks's CVEs are listed in CISA's Known Exploited Vulnerabilities catalog, confirmed exploited in the wild and carrying a CISA remediation deadline.

Are there public exploits for Adobe commerce webhooks vulnerabilities?

Yes — 1 of Adobe commerce webhooks's CVEs have a known public exploit.

Which versions of Adobe commerce webhooks are affected?

3 distinct Adobe commerce webhooks versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version.

What are the most common weakness types in Adobe commerce webhooks CVEs?

Adobe commerce webhooks's CVEs most often map to these CWE weakness types: CWE-20 (Improper Input Validation), CWE-284 (Improper Access Control), CWE-285 (Improper Authorization), CWE-287 (Improper Authentication).

How many critical Adobe commerce webhooks vulnerabilities are there?

Adobe commerce webhooks has 3 critical and 3 high-severity CVEs.

What is the average severity of Adobe commerce webhooks CVEs?

The average CVSS base score across Adobe commerce webhooks's scored CVEs is 7.5.

RadicalNotion.AI

Log in Start free

Log in

Log in Start free

Adobe

10 CVEs

1 in CISA KEV

Adobe commerce webhooks Vulnerabilities

Name: Adobe commerce webhooks vulnerability dataset (CVEs)
Creator: RadicalNotion.AI
License: https://creativecommons.org/licenses/by-nc/4.0/

CVE security advisories and vulnerability history for commerce webhooks by Adobe.

10

Total CVEs

Published

1

In CISA KEV

Exploited in the wild

1

Public exploits

PoC or exploit code

7.5

Avg CVSS

2024–2024

Last updated June 13, 2024

Overview

Adobe commerce webhooks has 10 published CVE records since 2024, of which 1 are in CISA's Known Exploited Vulnerabilities catalog and 1 have a known public exploit. The average CVSS base score across scored CVEs is 7.5.

This page aggregates every publicly disclosed vulnerability (CVE) affecting Adobe commerce webhooks, with a severity breakdown, the affected and patched versions, the most common weakness types, and the full CVE list.

Severity and exploitation

How the CVSS severity of Adobe commerce webhooks's CVEs breaks down, plus how many are exploited in the wild or have public exploit code.

Critical3

High3

Medium4

Low0

In CISA’s Known Exploited Vulnerabilities catalog

1

One of Adobe commerce webhooks's CVEs is confirmed exploited in the wild.

Public exploits

1

One of Adobe commerce webhooks's CVEs has a known public exploit available.

Affected versions and CVEs

Browse every Adobe commerce webhooks version named in a CVE, then pick one to see only the CVEs that affect it.

Version ranges

1.2.0 <= v <= 1.4.09 CVEs
1.2.0 <= v < 1.5.01 CVE

Fixed in

1.5.01 CVE

Find a version

10 CVEs

Sort

Insecure Direct Object Reference - An attacker can able to erase the victim quote details
CVE-2024-34106
Patch
CWE-863
Medium · CVSS 6.9
EPSS 0.8% (54th pct)2024-06-13
Critical vulnerability · 2024-06-13
CVE-2024-34103
Patch
CWE-287
Critical · CVSS 9.2
EPSS 0.8% (52th pct)2024-06-13
High vulnerability · 2024-06-13
CVE-2024-34109
Patch
CWE-20
High · CVSS 7.2
EPSS 1.6% (73th pct)2024-06-13
High vulnerability · 2024-06-13
CVE-2024-34110
Patch
CWE-434
High · CVSS 7.2
EPSS 1.4% (69th pct)2024-06-13
Medium vulnerability · 2024-06-13
CVE-2024-34111
Patch
CWE-918
Medium · CVSS 6.3
EPSS 1.1% (63th pct)2024-06-13
Adobe Commerce | Improper Access Control (CWE-284)
CVE-2024-34107
Patch
CWE-284
Medium · CVSS 6.9
EPSS 1.1% (63th pct)2024-06-13
Stored Cross Site Scripting in Order Comment
CVE-2024-34105
Patch
CWE-79
Medium · CVSS 4.6
EPSS 0.7% (48th pct)2024-06-13
High vulnerability · 2024-06-13
CVE-2024-34104
Patch
CWE-285
High · CVSS 8.7
EPSS 0.8% (53th pct)2024-06-13
XXE can expose crypt key and other secrets granting full admin access
CVE-2024-34102
CISA KEV
Public exploit
Patch
CWE-611
Added to CISA KEV 2024-07-17
Critical · CVSS 9.3
EPSS 100.0% (100th pct)2024-06-13
Critical vulnerability · 2024-06-13
CVE-2024-34108
Patch
CWE-20
Critical · CVSS 9.1
EPSS 1.6% (74th pct)2024-06-13

Common weakness types

The CWE weakness categories most often found in Adobe commerce webhooks CVEs. Follow any weakness for its full explanation.

Other Adobe products

Browse vulnerabilities for other products by Adobe.

acrobat dc1,799 CVEs acrobat reader dc1,799 CVEs acrobat1,382 CVEs experience manager1,165 CVEs Acrobat Reader1,149 CVEs flash player1,084 CVEs Adobe Experience Manager1,018 CVEs Adobe Acrobat and Reader516 CVEs

All Adobe vulnerabilities

Frequently asked questions

Common questions about Adobe commerce webhooks vulnerabilities.

How many CVEs does Adobe commerce webhooks have?: Adobe commerce webhooks has 10 published CVE records since 2024.
How many Adobe commerce webhooks CVEs are in CISA KEV?: Yes — 1 of Adobe commerce webhooks's CVEs are listed in CISA's Known Exploited Vulnerabilities catalog, confirmed exploited in the wild and carrying a CISA remediation deadline.
Are there public exploits for Adobe commerce webhooks vulnerabilities?: Yes — 1 of Adobe commerce webhooks's CVEs have a known public exploit.
Which versions of Adobe commerce webhooks are affected?: 3 distinct Adobe commerce webhooks versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version.
What are the most common weakness types in Adobe commerce webhooks CVEs?: Adobe commerce webhooks's CVEs most often map to these CWE weakness types: CWE-20 (Improper Input Validation), CWE-284 (Improper Access Control), CWE-285 (Improper Authorization), CWE-287 (Improper Authentication).
How many critical Adobe commerce webhooks vulnerabilities are there?: Adobe commerce webhooks has 3 critical and 3 high-severity CVEs.
What is the average severity of Adobe commerce webhooks CVEs?: The average CVSS base score across Adobe commerce webhooks's scored CVEs is 7.5.

References

Vulnerability data is sourced from the CVE Program; severity, KEV, and exploit signals are aggregated by RadicalNotion.AI.

Track Adobe commerce webhooks vulnerabilities

Monitor new Adobe commerce webhooks vulnerabilities as they are disclosed, with AI-written analysis and remediation guidance.

Start free See pricing