Adobe Magento

Name: Adobe Magento
Brand: Adobe

productDE

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

by severity

25critical37high31medium4low

updated 2026-10-27

vulnerabilities (182)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2025-54236US	—OT critical	94.7% (100th)	KEV	Hotfix for CVE-2025-54236	2025-09-09	< Hotfix for CVE-2025-54236
CVE-2026-71362US	—OT critical	90.5% (100th)	KEV	2.4.6-2026-aug	2026-08-11	4 versions
CVE-2026-75650US	critical10.0OT critical	3.95% (90th)	KEV	no fix	2026-09-07	5 versions
CVE-2026-103849US	critical10.0	1.17% (67th)	Exploit	no fix	2026-10-13	5 versions
CVE-2026-48356US	critical9.3	1.00% (63rd)	Exploit	2.4.6-2026-jul	2026-07-14	4 versions
CVE-2026-34648US	—	21.4% (98th)	—	2.4.9	2026-05-12	4 versions
CVE-2025-24434US	—OT elevated	17.2% (97th)	—	2.4.8-beta2	2025-02-11	5 versions
CVE-2026-34650US	—	15.1% (97th)	—	2.4.9	2026-05-12	4 versions
CVE-2020-3716US	critical9.8	14.0% (97th)	—	no fix	2020-01-29	4 versions
CVE-2026-34649US	—	13.6% (96th)	—	2.4.9	2026-05-12	4 versions
CVE-2020-9664US	critical9.8	8.38% (95th)	—	no fix	2020-07-22	≤ 1.14.4.5 and earlier, and 1.9.4.5 and earlier versions
CVE-2020-3718US	critical9.8	7.52% (94th)	—	no fix	2020-01-29	4 versions
CVE-2020-9632US	critical9.8	7.40% (94th)	—	no fix	2020-06-26	≤ 2.3.4 and earlier, 2.2.11 and earlier (see note), 1.14.4.4 and earlier, and 1.9.4.4 and earlier versions
CVE-2020-9631US	critical9.8	7.40% (94th)	—	no fix	2020-06-26	≤ 2.3.4 and earlier, 2.2.11 and earlier (see note), 1.14.4.4 and earlier, and 1.9.4.4 and earlier versions
CVE-2020-9691US	critical9.6	6.02% (93rd)	—	no fix	2020-07-29	≤ 2.3.5-p1 and earlier, and 2.3.5-p1 and earlier versions
CVE-2020-9583US	critical9.8	5.72% (93rd)	—	no fix	2020-06-26	≤ 2.3.4 and earlier, 2.2.11 and earlier (see note), 1.14.4.4 and earlier, and 1.9.4.4 and earlier versions
CVE-2020-9582US	critical9.8	5.72% (93rd)	—	no fix	2020-06-26	≤ 2.3.4 and earlier, 2.2.11 and earlier (see note), 1.14.4.4 and earlier, and 1.9.4.4 and earlier versions
CVE-2020-9578US	critical9.8	5.72% (93rd)	—	no fix	2020-06-26	≤ 2.3.4 and earlier, 2.2.11 and earlier (see note), 1.14.4.4 and earlier, and 1.9.4.4 and earlier versions
CVE-2020-9576US	critical9.8	5.72% (93rd)	—	no fix	2020-06-26	≤ 2.3.4 and earlier, 2.2.11 and earlier (see note), 1.14.4.4 and earlier, and 1.9.4.4 and earlier versions
CVE-2020-9580US	critical9.8	5.04% (92nd)	—	no fix	2020-06-26	≤ 2.3.4 and earlier, 2.2.11 and earlier (see note), 1.14.4.4 and earlier, and 1.9.4.4 and earlier versions
CVE-2020-9579US	critical9.8	5.04% (92nd)	—	no fix	2020-06-26	≤ 2.3.4 and earlier, 2.2.11 and earlier (see note), 1.14.4.4 and earlier, and 1.9.4.4 and earlier versions
CVE-2020-9587US	high7.5OT elevated	5.01% (92nd)	—	no fix	2020-06-26	≤ 2.3.4 and earlier, 2.2.11 and earlier (see note), 1.14.4.4 and earlier, and 1.9.4.4 and earlier versions
CVE-2020-9585US	critical9.8	4.95% (92nd)	—	no fix	2020-06-26	≤ 2.3.4 and earlier, 2.2.11 and earlier (see note), 1.14.4.4 and earlier, and 1.9.4.4 and earlier versions
CVE-2020-9689US	medium6.5	4.14% (91st)	—	no fix	2020-07-29	≤ 2.3.5-p1 and earlier, and 2.3.5-p1 and earlier versions
CVE-2020-9630US	critical9.8	3.95% (90th)	—	no fix	2020-06-26	≤ 2.3.4 and earlier, 2.2.11 and earlier (see note), 1.14.4.4 and earlier, and 1.9.4.4 and earlier versions
CVE-2020-9692US	medium6.5OT elevated	3.81% (90th)	—	no fix	2020-07-29	≤ 2.3.5-p1 and earlier, and 2.3.5-p1 and earlier versions
CVE-2020-9591US	high7.5	3.43% (89th)	—	no fix	2020-06-26	≤ 2.3.4 and earlier, 2.2.11 and earlier (see note), 1.14.4.4 and earlier, and 1.9.4.4 and earlier versions
CVE-2020-3719US	high7.5	3.16% (88th)	—	no fix	2020-01-29	4 versions
CVE-2020-3717US	medium5.3	3.16% (88th)	—	no fix	2020-01-29	4 versions
CVE-2020-9588US	high7.2	2.92% (87th)	—	no fix	2020-06-26	≤ 2.3.4 and earlier, 2.2.11 and earlier (see note), 1.14.4.4 and earlier, and 1.9.4.4 and earlier versions
CVE-2019-8235US	medium6.5	1.88% (79th)	—	no fix	2019-10-30	3 versions
CVE-2020-3758US	medium6.1	1.84% (79th)	—	no fix	2020-01-29	4 versions
CVE-2020-3715US	medium6.1	1.84% (79th)	—	no fix	2020-01-29	4 versions
CVE-2020-9690US	medium4.2	1.63% (76th)	—	no fix	2020-07-29	≤ 2.3.5-p1 and earlier, and 2.3.5-p1 and earlier versions
CVE-2020-9581US	medium6.1	1.50% (74th)	—	no fix	2020-06-26	≤ 2.3.4 and earlier, 2.2.11 and earlier (see note), 1.14.4.4 and earlier, and 1.9.4.4 and earlier versions
CVE-2020-9577US	medium6.1	1.50% (74th)	—	no fix	2020-06-26	≤ 2.3.4 and earlier, 2.2.11 and earlier (see note), 1.14.4.4 and earlier, and 1.9.4.4 and earlier versions
CVE-2020-9665US	medium6.1	1.43% (73rd)	—	no fix	2020-07-22	≤ 1.14.4.5 and earlier, and 1.9.4.5 and earlier versions
CVE-2024-20758US	critical9.0	1.42% (73rd)	—	2.4.6	2024-04-10	4 versions
CVE-2025-24406US	high7.5	1.40% (72nd)	—	2.4.6-p9	2025-02-11	5 versions
CVE-2024-45115US	—	1.25% (69th)	—	2.4.6-p8	2024-10-10	4 versions
CVE-2026-48358US	critical9.1	1.21% (68th)	—	2.4.6-2026-jul	2026-07-14	4 versions
CVE-2020-9584US	medium5.4	1.17% (67th)	—	no fix	2020-06-26	≤ 2.3.4 and earlier, 2.2.11 and earlier (see note), 1.14.4.4 and earlier, and 1.9.4.4 and earlier versions
CVE-2026-77110US	high7.6	1.09% (65th)	—	no fix	2026-09-08	3 versions
CVE-2026-100133US	critical9.3	1.05% (64th)	—	no fix	2026-10-13	5 versions
CVE-2025-27189US	—	1.03% (63rd)	—	2.4.5-p12	2025-04-08	5 versions
CVE-2024-20759US	—	1.03% (63rd)	—	2.4.5-p7	2024-04-10	4 versions
CVE-2026-47992US	—	0.99% (62nd)	—	2.4.6-2026-jul	2026-07-14	4 versions
CVE-2025-24408US	medium6.5	0.96% (61st)	—	2.4.7-p4	2025-02-11	5 versions
CVE-2025-24418US	high8.1	0.96% (61st)	—	2.4.5-p11	2025-02-11	5 versions
CVE-2024-45116US	—	0.94% (61st)	—	2.4.6-p8	2024-10-10	4 versions

showing 50 of 182

weaknesses (8)

The flaw types (CWEs) most of these CVEs share.

CWE-863Incorrect Authorization46 CVEs
CWE-79Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')45 CVEs
CWE-284Improper Access Control26 CVEs
CWE-20Improper Input Validation11 CVEs
CWE-285Improper Authorization9 CVEs
CWE-22Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')7 CVEs
CWE-94Improper Control of Generation of Code ('Code Injection')7 CVEs
CWE-918Server-Side Request Forgery (SSRF)5 CVEs

sources (3)

Which sources assert this record, and when.

DECERT-Bund (BSI CSAF)153 CVEs
EUEU Vulnerability Database (ENISA)29 CVEs
NLNCSC-NL (CSAF)23 CVEs

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.

Free scan