Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2022-35698

Adobe Commerce versions 2.4.4-p1 (and earlier) and 2.4.5 (and earlier) are affected by a Stored Cross-site Scripting vulnerability. Exploitation of this issue does not require user interaction and could result in a post-authentication arbitrary code execution.

Published

2022-10-14T20:15:11.770

Last Modified

2024-11-21T07:11:30.073

Status

Modified

Source

[email protected]

Severity

CVSSv3.1: 10.0 (CRITICAL)

Weaknesses
  • Type: Primary
    CWE-79
Affected Vendors & Products
Type Vendor Product Version/Range Vulnerable?
Application adobe commerce < 2.4.4 Yes
Application adobe commerce 2.4.4 Yes
Application adobe commerce 2.4.4 Yes
Application adobe commerce 2.4.5 Yes
Application adobe magento_open_source < 2.4.4 Yes
Application adobe magento_open_source 2.4.4 Yes
Application adobe magento_open_source 2.4.4 Yes
Application adobe magento_open_source 2.4.5 Yes
References