[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fRx8u9eG0Sdv_B3ZN1pOwC8gzkOsdIucgUMoSEPJR4c8":3,"g5a-family:adobe\u002Fcommerce_b2b":151,"g5a-ex:adobe\u002Fcommerce_b2b@*":152},{"success":4,"data":5},true,{"product":6,"versions":49,"topVulnerabilitiesByEpss":64,"kevVulnerabilities":118,"seoMetadata":129,"meta":148},{"vendorName":7,"productName":8,"versionCount":9,"totalCves":10,"kevCount":11,"lastCveUpdate":12,"versions":13,"description":48},"adobe","commerce_b2b",14,66,1,"2025-10-14",[14,18,20,22,24,26,28,31,33,35,37,40,43,46],{"version":15,"cve_count":16,"kev_count":16,"has_kev":17},"1.2.0",0,false,{"version":19,"cve_count":16,"kev_count":16,"has_kev":17},"1.3.0",{"version":21,"cve_count":16,"kev_count":16,"has_kev":17},"1.3.1",{"version":23,"cve_count":16,"kev_count":16,"has_kev":17},"1.3.2",{"version":25,"cve_count":10,"kev_count":11,"has_kev":4},"1.3.3",{"version":27,"cve_count":10,"kev_count":11,"has_kev":4},"1.3.4",{"version":29,"cve_count":30,"kev_count":16,"has_kev":17},"1.3.5",65,{"version":32,"cve_count":16,"kev_count":16,"has_kev":17},"1.4.0",{"version":34,"cve_count":16,"kev_count":16,"has_kev":17},"1.4.1",{"version":36,"cve_count":10,"kev_count":11,"has_kev":4},"1.4.2",{"version":38,"cve_count":39,"kev_count":16,"has_kev":17},"1.5.0",30,{"version":41,"cve_count":42,"kev_count":16,"has_kev":17},"1.5.1",4,{"version":44,"cve_count":45,"kev_count":11,"has_kev":4},"1.5.2",12,{"version":47,"cve_count":45,"kev_count":11,"has_kev":4},"1.5.3","Commerce B2b by Adobe is a technology product with 14 tracked versions and 66 known security vulnerabilities including 1 CISA Known Exploited Vulnerability. Get comprehensive security analysis, vulnerability tracking, and threat intelligence for this product.",[50,51,52,53,54,55,56,57,58,59,60,61,62,63],{"version":15,"cve_count":16,"kev_count":16,"has_kev":17},{"version":19,"cve_count":16,"kev_count":16,"has_kev":17},{"version":21,"cve_count":16,"kev_count":16,"has_kev":17},{"version":23,"cve_count":16,"kev_count":16,"has_kev":17},{"version":25,"cve_count":10,"kev_count":11,"has_kev":4},{"version":27,"cve_count":10,"kev_count":11,"has_kev":4},{"version":29,"cve_count":30,"kev_count":16,"has_kev":17},{"version":32,"cve_count":16,"kev_count":16,"has_kev":17},{"version":34,"cve_count":16,"kev_count":16,"has_kev":17},{"version":36,"cve_count":10,"kev_count":11,"has_kev":4},{"version":38,"cve_count":39,"kev_count":16,"has_kev":17},{"version":41,"cve_count":42,"kev_count":16,"has_kev":17},{"version":44,"cve_count":45,"kev_count":11,"has_kev":4},{"version":47,"cve_count":45,"kev_count":11,"has_kev":4},[65,73,79,86,91,94,97,101,107,111],{"cveId":66,"description":67,"publishedDate":68,"cvssScore":69,"cvssVersion":70,"severity":71,"isKev":4,"epssScore":72},"CVE-2025-54236","Adobe Commerce versions 2.4.9-alpha2, 2.4.8-p2, 2.4.7-p7, 2.4.6-p12, 2.4.5-p14, 2.4.4-p15 and earlier are affected by an Improper Input Validation vulnerability. A successful attacker can abuse this to achieve session takeover, increasing the confidentiality, and integrity impact to high. Exploitation of this issue does not require user interaction.","2025-09-09",9.1,"v3.1","Critical",0.9466,{"cveId":74,"description":75,"publishedDate":76,"cvssScore":77,"cvssVersion":70,"severity":71,"isKev":4,"epssScore":78},"CVE-2026-48356","Adobe Commerce is affected by an Unrestricted Upload of File with Dangerous Type vulnerability that could result in arbitrary code execution in the context of the current user, potentially gaining elevated access or control over the victim's account or session. Exploitation of this issue requires user interaction in that a victim must visit a maliciously crafted URL or interact with a compromised web page. Scope is changed.","2026-07-14",9.3,0.30582,{"cveId":80,"description":81,"publishedDate":82,"cvssScore":83,"cvssVersion":70,"severity":84,"isKev":17,"epssScore":85},"CVE-2026-34648","Adobe Commerce versions 2.4.9-beta1, 2.4.8-p4, 2.4.7-p9, 2.4.6-p14, 2.4.5-p16, 2.4.4-p17 and earlier are affected by an Uncontrolled Resource Consumption vulnerability that could lead to application denial-of-service. An attacker could exploit this vulnerability to exhaust system resources, resulting in an application denial-of-service condition. Exploitation of this issue does not require user interaction.","2026-05-12",7.5,"High",0.21379,{"cveId":87,"description":88,"publishedDate":89,"cvssScore":69,"cvssVersion":70,"severity":71,"isKev":17,"epssScore":90},"CVE-2025-24434","Adobe Commerce versions 2.4.8-beta1, 2.4.7-p3, 2.4.6-p8, 2.4.5-p10, 2.4.4-p11 and earlier are affected by an Incorrect Authorization vulnerability that could result in Privilege escalation. An attacker could leverage this vulnerability to bypass security measures and gain unauthorized access. Exploitation of this issue does not require user interaction. A successful attacker can abuse this to achieve session takeover, increasing the confidentiality and integrity impact as high.","2025-02-11",0.17186,{"cveId":92,"description":81,"publishedDate":82,"cvssScore":83,"cvssVersion":70,"severity":84,"isKev":17,"epssScore":93},"CVE-2026-34650",0.1508,{"cveId":95,"description":81,"publishedDate":82,"cvssScore":83,"cvssVersion":70,"severity":84,"isKev":17,"epssScore":96},"CVE-2026-34649",0.13608,{"cveId":98,"description":99,"publishedDate":89,"cvssScore":83,"cvssVersion":70,"severity":84,"isKev":17,"epssScore":100},"CVE-2025-24406","Adobe Commerce versions 2.4.8-beta1, 2.4.7-p3, 2.4.6-p8, 2.4.5-p10, 2.4.4-p11 and earlier are affected by an Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability that could lead to a security feature bypass. An unauthenticated attacker could exploit this vulnerability to modify files that are stored outside the restricted directory. Exploitation of this issue does not require user interaction.",0.01395,{"cveId":102,"description":103,"publishedDate":104,"cvssScore":105,"cvssVersion":70,"severity":71,"isKev":17,"epssScore":106},"CVE-2024-45115","Adobe Commerce versions 2.4.7-p2, 2.4.6-p7, 2.4.5-p9, 2.4.4-p10 and earlier are affected by an Improper Authentication vulnerability that could result in privilege escalation. An attacker could exploit this vulnerability to gain unauthorized access or elevated privileges within the application. Exploitation of this issue does not require user interaction.","2024-10-10",9.8,0.0125,{"cveId":108,"description":109,"publishedDate":76,"cvssScore":69,"cvssVersion":70,"severity":71,"isKev":17,"epssScore":110},"CVE-2026-48358","Adobe Commerce is affected by an Improper Encoding or Escaping of Output vulnerability that could result in arbitrary code execution in the context of the current user. An attacker with high privileges could exploit this vulnerability to execute arbitrary code. Exploitation of this issue does not require user interaction. Scope is changed.",0.01206,{"cveId":112,"description":113,"publishedDate":114,"cvssScore":115,"cvssVersion":70,"severity":116,"isKev":17,"epssScore":117},"CVE-2025-27189","Adobe Commerce versions 2.4.7-p4, 2.4.6-p9, 2.4.5-p11, 2.4.4-p12, 2.4.8-beta2 and earlier are affected by a Cross-Site Request Forgery (CSRF) vulnerability that could be exploited to cause a denial-of-service condition. An attacker could trick a logged-in user into submitting a forged request to the vulnerable application, which may disrupt service availability. Exploitation of this issue requires user interaction, typically in the form of clicking a malicious link or visiting an attacker-controlled website.","2025-04-08",4.3,"Medium",0.01028,[119,124],{"cveId":74,"description":75,"publishedDate":76,"cvssScore":77,"severity":71,"isKev":4,"epssScore":78,"cisaVulnName":120,"cisaDateAdded":121,"cisaShortDescription":122,"cisaRequiredAction":123},"Adobe Commerce and Magento Unrestricted Upload of File with Dangerous Type Vulnerability","2026-10-27","Adobe Commerce and Magento contain an unrestricted upload of file with dangerous type vulnerability that could result in arbitrary code execution in the context of the current user, potentially gaining elevated access or control over the victim's account or session.","Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.",{"cveId":66,"description":67,"publishedDate":68,"cvssScore":69,"severity":71,"isKev":4,"epssScore":72,"cisaVulnName":125,"cisaDateAdded":126,"cisaShortDescription":127,"cisaRequiredAction":128},"Adobe Commerce and Magento Improper Input Validation Vulnerability","2025-10-24","Adobe Commerce and Magento Open Source contain an improper input validation vulnerability that could allow an attacker to take over customer accounts through the Commerce REST API.","Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.",{"title":130,"metaDescription":131,"keywords":132,"structuredData":133},"Commerce B2b by Adobe - Security Vulnerabilities & Analysis | EdgeProtect","Comprehensive security analysis for Commerce B2b by Adobe covering 14 versions with 66 tracked vulnerabilities including 2 critical and 0 high-severity issues and 1 CISA KEV vulnerability. Real-time threat intelligence, CVE tracking, and security recommendations.","Commerce B2b vulnerabilities, Commerce B2b security, Commerce B2b CVE, Adobe Commerce B2b, Commerce B2b threat intelligence, Adobe security, product security analysis, cybersecurity threats, vulnerability management, CVE tracking, Commerce B2b KEV, Commerce B2b exploited vulnerabilities",{"@context":134,"@type":135,"name":136,"description":131,"url":137,"manufacturer":138,"applicationCategory":142,"softwareVersion":143,"mainEntity":144},"https:\u002F\u002Fschema.org","SoftwareApplication","Commerce B2b","https:\u002F\u002Fedgeprotect.io\u002Fvulnerabilities\u002Ftechnologies\u002Fvendors\u002Fadobe\u002Fcommerce_b2b",{"@type":139,"name":140,"url":141},"Organization","Adobe","https:\u002F\u002Fedgeprotect.io\u002Fvendors\u002Fadobe","Security Software","14 versions tracked",{"@type":145,"name":146,"description":147,"vulnerabilityCount":10,"dateModified":12},"SecurityVulnerability","Commerce B2b Security Vulnerabilities","Security vulnerabilities affecting Commerce B2b by Adobe",{"totalVersions":9,"totalVulnerabilities":10,"kevVulnerabilities":11,"lastUpdated":12,"generatedAt":149,"apiVersion":150},"2026-10-28T17:20:00.945Z","3.0",[],{"rows":153,"total":214,"capped":17,"failed":16},[154,208],{"cveId":74,"name":120,"severity":71,"cvss":77,"added":121,"epss":78,"published":155,"ranges":156,"checked":4,"hits":207,"covers":17},"2026-07-14T20:17:08.437",[25,157,158,159,160,161,162,163,164,165,166,167,168,169,170,171,172,173,174,27,175,176,177,178,179,180,181,182,183,184,185,186,187,188,189,190,191,36,192,193,194,195,196,197,198,199,200,201,44,202,203,204,205,206,47],"1.3.3-p1","1.3.3-p2","1.3.3-p3","1.3.3-p4","1.3.3-p5","1.3.3-p6","1.3.3-p7","1.3.3-p8","1.3.3-p9","1.3.3-p10","1.3.3-p11","1.3.3-p12","1.3.3-p13","1.3.3-p14","1.3.3-p15","1.3.3-p16","1.3.3-p17","1.3.3-p18","1.3.4-p1","1.3.4-p2","1.3.4-p3","1.3.4-p4","1.3.4-p5","1.3.4-p6","1.3.4-p7","1.3.4-p8","1.3.4-p9","1.3.4-p10","1.3.4-p11","1.3.4-p12","1.3.4-p13","1.3.4-p14","1.3.4-p15","1.3.4-p16","1.3.4-p17","1.4.2-p1","1.4.2-p2","1.4.2-p3","1.4.2-p4","1.4.2-p5","1.4.2-p6","1.4.2-p7","1.4.2-p8","1.4.2-p9","1.4.2-p10","1.5.2-p1","1.5.2-p2","1.5.2-p3","1.5.2-p4","1.5.2-p5",[],{"cveId":66,"name":125,"severity":71,"cvss":69,"added":126,"epss":72,"published":209,"ranges":210,"checked":4,"hits":213,"covers":17},"2025-09-09T14:15:46.563",[25,157,158,159,160,161,162,163,164,165,166,167,168,169,170,171,27,175,176,177,178,179,180,181,182,183,184,185,186,187,188,36,192,193,194,195,196,197,198,44,202,203,211,212],"1.5.3-alpha1","1.5.3-alpha2",[],2]