[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fr4awpjuv18MQgGLAsHF6AE0ExJEMUPRnwcxud9E6ulI":3,"g5a-ex:adobe\u002Fadobe_commerce@*":87,"g5a-family:adobe\u002Fadobe_commerce":89},{"success":4,"data":5},true,{"product":6,"versions":18,"topVulnerabilitiesByEpss":20,"kevVulnerabilities":64,"seoMetadata":65,"meta":84},{"vendorName":7,"productName":8,"versionCount":9,"totalCves":10,"kevCount":11,"lastCveUpdate":12,"versions":13,"description":17},"adobe","adobe_commerce",1,23,0,"2021-09-01",[14],{"version":15,"cve_count":10,"kev_count":11,"has_kev":16},"2.4.2",false,"Adobe Commerce by Adobe is a technology product with 1 tracked version and 23 known security vulnerabilities. Get comprehensive security analysis, vulnerability tracking, and threat intelligence for this product.",[19],{"version":15,"cve_count":10,"kev_count":11,"has_kev":16},[21,28,32,36,40,43,47,51,54,60],{"cveId":22,"description":23,"publishedDate":12,"cvssScore":24,"cvssVersion":25,"severity":26,"isKev":16,"epssScore":27},"CVE-2021-36022","Magento Commerce versions 2.4.2 (and earlier), 2.4.2-p1 (and earlier) and 2.3.7 (and earlier) are affected by an XML Injection vulnerability in the Widgets Update Layout. An attacker with admin privileges can trigger a specially crafted script to achieve remote code execution.",7.2,"v3.1","High",0.0344,{"cveId":29,"description":30,"publishedDate":12,"cvssScore":24,"cvssVersion":25,"severity":26,"isKev":16,"epssScore":31},"CVE-2021-36033","Magento Commerce versions 2.4.2 (and earlier), 2.4.2-p1 (and earlier) and 2.3.7 (and earlier) are affected by an XML Injection vulnerability in the Widgets Module. An attacker with admin privileges can trigger a specially crafted script to achieve remote code execution.",0.03122,{"cveId":33,"description":34,"publishedDate":12,"cvssScore":24,"cvssVersion":25,"severity":26,"isKev":16,"epssScore":35},"CVE-2021-36031","Magento Commerce versions 2.4.2 (and earlier), 2.4.2-p1 (and earlier) and 2.3.7 (and earlier) are affected by a Path Traversal vulnerability via the `theme[preview_image]` parameter. An attacker with admin privileges could leverage this vulnerability to achieve remote code execution.",0.03116,{"cveId":37,"description":38,"publishedDate":12,"cvssScore":24,"cvssVersion":25,"severity":26,"isKev":16,"epssScore":39},"CVE-2021-36024","Magento Commerce versions 2.4.2 (and earlier), 2.4.2-p1 (and earlier) and 2.3.7 (and earlier) are affected by an Improper Neutralization of Special Elements Used In A Command via the Data collection endpoint. An attacker with admin privileges can upload a specially crafted file to achieve remote code execution.",0.02894,{"cveId":41,"description":42,"publishedDate":12,"cvssScore":24,"cvssVersion":25,"severity":26,"isKev":16,"epssScore":39},"CVE-2021-36028","Magento Commerce versions 2.4.2 (and earlier), 2.4.2-p1 (and earlier) and 2.3.7 (and earlier) are affected by an XML Injection vulnerability when saving a configurable product. An attacker with admin privileges can trigger a specially crafted script to achieve remote code execution.",{"cveId":44,"description":45,"publishedDate":12,"cvssScore":24,"cvssVersion":25,"severity":26,"isKev":16,"epssScore":46},"CVE-2021-36040","Magento Commerce versions 2.4.2 (and earlier), 2.4.2-p1 (and earlier) and 2.3.7 (and earlier) are affected by an improper input validation vulnerability. An attacker with admin privileges can upload a specially crafted file to bypass file extension restrictions and could lead to remote code execution.",0.02867,{"cveId":48,"description":49,"publishedDate":12,"cvssScore":24,"cvssVersion":25,"severity":26,"isKev":16,"epssScore":50},"CVE-2021-36035","Magento Commerce versions 2.4.2 (and earlier), 2.4.2-p1 (and earlier) and 2.3.7 (and earlier) are affected by an improper input validation vulnerability. An attacker with admin privileges could make a crafted request to the Adobe Stock API to achieve remote code execution.",0.02807,{"cveId":52,"description":53,"publishedDate":12,"cvssScore":24,"cvssVersion":25,"severity":26,"isKev":16,"epssScore":50},"CVE-2021-36025","Magento Commerce versions 2.4.2 (and earlier), 2.4.2-p1 (and earlier) and 2.3.7 (and earlier) are affected by an improper input validation vulnerability while saving a customer's details with a specially crafted file. An authenticated attacker with admin privileges can leverage this vulnerability to achieve remote code execution.",{"cveId":55,"description":56,"publishedDate":12,"cvssScore":57,"cvssVersion":25,"severity":58,"isKev":16,"epssScore":59},"CVE-2021-36020","Magento Commerce versions 2.4.2 (and earlier), 2.4.2-p1 (and earlier) and 2.3.7 (and earlier) are affected by an XML Injection vulnerability in the 'City' field. An unauthenticated attacker can trigger a specially crafted script to achieve remote code execution.",9.8,"Critical",0.02715,{"cveId":61,"description":62,"publishedDate":12,"cvssScore":24,"cvssVersion":25,"severity":26,"isKev":16,"epssScore":63},"CVE-2021-36029","Magento Commerce versions 2.4.2 (and earlier), 2.4.2-p1 (and earlier) and 2.3.7 (and earlier) are affected by an improper improper authorization vulnerability. An attacker with admin privileges could leverage this vulnerability to achieve remote code execution.",0.02478,[],{"title":66,"metaDescription":67,"keywords":68,"structuredData":69},"Adobe Commerce by Adobe - Security Vulnerabilities & Analysis | EdgeProtect","Comprehensive security analysis for Adobe Commerce by Adobe covering 1 version with 23 tracked vulnerabilities. Real-time threat intelligence, CVE tracking, and security recommendations.","Adobe Commerce vulnerabilities, Adobe Commerce security, Adobe Commerce CVE, Adobe Adobe Commerce, Adobe Commerce threat intelligence, Adobe security, product security analysis, cybersecurity threats, vulnerability management, CVE tracking",{"@context":70,"@type":71,"name":72,"description":67,"url":73,"manufacturer":74,"applicationCategory":78,"softwareVersion":79,"mainEntity":80},"https:\u002F\u002Fschema.org","SoftwareApplication","Adobe Commerce","https:\u002F\u002Fedgeprotect.io\u002Fvulnerabilities\u002Ftechnologies\u002Fvendors\u002Fadobe\u002Fadobe_commerce",{"@type":75,"name":76,"url":77},"Organization","Adobe","https:\u002F\u002Fedgeprotect.io\u002Fvendors\u002Fadobe","Security Software","1 versions tracked",{"@type":81,"name":82,"description":83,"vulnerabilityCount":10,"dateModified":12},"SecurityVulnerability","Adobe Commerce Security Vulnerabilities","Security vulnerabilities affecting Adobe Commerce by Adobe",{"totalVersions":9,"totalVulnerabilities":10,"kevVulnerabilities":11,"lastUpdated":12,"generatedAt":85,"apiVersion":86},"2026-10-28T17:19:56.256Z","3.0",{"rows":88,"total":11,"capped":16,"failed":11},[],[]]