Lucene search

K
adobeAdobeAPSB22-13
HistoryApr 12, 2022 - 12:00 a.m.

APSB22-13 : Security update available for Adobe Commerce

2022-04-1200:00:00
helpx.adobe.com
54
adobe
commerce
magento
security
update
critical
vulnerability
arbitrary code execution

CVSS3

9.1

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H

EPSS

0.001

Percentile

50.1%

Adobe has released a security update for Adobe Commerce and Magento Open Source. This update resolves a critical vulnerability. Successful exploitation could lead to arbitrary code execution.

Affected configurations

Vulners
Node
adobeadobe_commerceRange2.4.3-p1
OR
adobeadobe_commerceRange2.3.7-p2
OR
adobemagentoRange2.4.3-p1open_source
OR
adobemagentoRange2.3.7-p2open_source
VendorProductVersionCPE
adobeadobe_commerce*cpe:2.3:a:adobe:adobe_commerce:*:*:*:*:*:*:*:*
adobemagento*cpe:2.3:a:adobe:magento:*:*:*:*:open_source:*:*:*

CVSS3

9.1

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H

EPSS

0.001

Percentile

50.1%

Related for APSB22-13