Adobe Magento Commerce — known CVE vulnerabilities

Every CVE whose affected-product data names Adobe Magento Commerce, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (2)

• CVE-2021-21012 — CVSS 5.3 (medium): Magento versions 2.4.1 (and earlier), 2.4.0-p1 (and earlier) and 2.3.6 (and earlier) are vulnerable to an insecure direct object…
• CVE-2022-35692 — CVSS 5.3 (medium): Adobe Commerce versions 2.4.3-p2 (and earlier), 2.3.7-p3 (and earlier) and 2.4.4 (and earlier) are affected by an Improper Access Control…