← Back

CVE-2025-49556

nvd nist
Published: Aug 12, 2025Modified: Aug 15, 2025

JSON object

Loading...
7.5
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Exploitability: 3.9 / Impact: 3.6
Source: psirt@adobe.com (Secondary)

Description

Adobe Commerce versions 2.4.9-alpha1, 2.4.8-p1, 2.4.7-p6, 2.4.6-p11, 2.4.5-p13, 2.4.4-p14 and earlier are affected by an Incorrect Authorization vulnerability that could result in a security feature bypass. An attacker could leverage this vulnerability to bypass security measures and gain unauthorized read access. Exploitation of this issue does not require user interaction, and scope is unchanged.

Affected (148)

Adobe
3 products
Commerce
Commerce B2b
Magento
Configuration A
54 vulnerable
Vulnerable SoftwareAffected Versions
Adobe
Commerce
Before 2.4.4
Commerce
Version 2.4.4
Commerce
Version 2.4.4 p10
Commerce
Version 2.4.4 p11
Commerce
Version 2.4.4 p12
Commerce
Version 2.4.4 p13
Commerce
Version 2.4.4 p14
Commerce
Version 2.4.4 p1
Commerce
Version 2.4.4 p2
Commerce
Version 2.4.4 p3
Commerce
Version 2.4.4 p4
Commerce
Version 2.4.4 p5
Commerce
Version 2.4.4 p6
Commerce
Version 2.4.4 p7
Commerce
Version 2.4.4 p8
Commerce
Version 2.4.4 p9
Commerce
Version 2.4.5
Commerce
Version 2.4.5 p10
Commerce
Version 2.4.5 p11
Commerce
Version 2.4.5 p12
Commerce
Version 2.4.5 p13
Commerce
Version 2.4.5 p1
Commerce
Version 2.4.5 p2
Commerce
Version 2.4.5 p3
Commerce
Version 2.4.5 p4
Commerce
Version 2.4.5 p5
Commerce
Version 2.4.5 p6
Commerce
Version 2.4.5 p7
Commerce
Version 2.4.5 p8
Commerce
Version 2.4.5 p9
Commerce
Version 2.4.6
Commerce
Version 2.4.6 p10
Commerce
Version 2.4.6 p11
Commerce
Version 2.4.6 p1
Commerce
Version 2.4.6 p2
Commerce
Version 2.4.6 p3
Commerce
Version 2.4.6 p4
Commerce
Version 2.4.6 p5
Commerce
Version 2.4.6 p6
Commerce
Version 2.4.6 p7
Commerce
Version 2.4.6 p8
Commerce
Version 2.4.6 p9
Commerce
Version 2.4.7
Commerce
Version 2.4.7 b1
Commerce
Version 2.4.7 b2
Commerce
Version 2.4.7 beta3
Commerce
Version 2.4.7 p1
Commerce
Version 2.4.7 p2
Commerce
Version 2.4.7 p3
Commerce
Version 2.4.7 p4
Commerce
Version 2.4.7 p5
Commerce
Version 2.4.7 p6
Commerce
Version 2.4.8
Commerce
Version 2.4.8 beta1
Configuration B
52 vulnerable
Vulnerable SoftwareAffected Versions
Adobe
Commerce B2b
Before 1.3.3
Commerce B2b
Version 1.3.3
Commerce B2b
Version 1.3.3 p10
Commerce B2b
Version 1.3.3 p11
Commerce B2b
Version 1.3.3 p12
Commerce B2b
Version 1.3.3 p13
Commerce B2b
Version 1.3.3 p14
Commerce B2b
Version 1.3.3 p1
Commerce B2b
Version 1.3.3 p2
Commerce B2b
Version 1.3.3 p3
Commerce B2b
Version 1.3.3 p4
Commerce B2b
Version 1.3.3 p5
Commerce B2b
Version 1.3.3 p6
Commerce B2b
Version 1.3.3 p7
Commerce B2b
Version 1.3.3 p8
Commerce B2b
Version 1.3.3 p9
Commerce B2b
Version 1.3.4
Commerce B2b
Version 1.3.4 p10
Commerce B2b
Version 1.3.4 p11
Commerce B2b
Version 1.3.4 p12
Commerce B2b
Version 1.3.4 p13
Commerce B2b
Version 1.3.4 p1
Commerce B2b
Version 1.3.4 p2
Commerce B2b
Version 1.3.4 p3
Commerce B2b
Version 1.3.4 p4
Commerce B2b
Version 1.3.4 p5
Commerce B2b
Version 1.3.4 p6
Commerce B2b
Version 1.3.4 p7
Commerce B2b
Version 1.3.4 p8
Commerce B2b
Version 1.3.4 p9
Commerce B2b
Version 1.3.5
Commerce B2b
Version 1.3.5 p10
Commerce B2b
Version 1.3.5 p11
Commerce B2b
Version 1.3.5 p1
Commerce B2b
Version 1.3.5 p2
Commerce B2b
Version 1.3.5 p3
Commerce B2b
Version 1.3.5 p4
Commerce B2b
Version 1.3.5 p5
Commerce B2b
Version 1.3.5 p6
Commerce B2b
Version 1.3.5 p7
Commerce B2b
Version 1.3.5 p8
Commerce B2b
Version 1.3.5 p9
Commerce B2b
Version 1.4.2
Commerce B2b
Version 1.4.2 p1
Commerce B2b
Version 1.4.2 p2
Commerce B2b
Version 1.4.2 p3
Commerce B2b
Version 1.4.2 p4
Commerce B2b
Version 1.4.2 p5
Commerce B2b
Version 1.4.2 p6
Commerce B2b
Version 1.5.2
Commerce B2b
Version 1.5.2 p1
Commerce B2b
Version 1.5.3 alpha1
Configuration C
42 vulnerable
Vulnerable SoftwareAffected Versions
Adobe
Magento
Before 2.4.5
Magento
Version 2.4.5
Magento
Version 2.4.5 p10
Magento
Version 2.4.5 p11
Magento
Version 2.4.5 p12
Magento
Version 2.4.5 p13
Magento
Version 2.4.5 p1
Magento
Version 2.4.5 p2
Magento
Version 2.4.5 p3
Magento
Version 2.4.5 p4
Magento
Version 2.4.5 p5
Magento
Version 2.4.5 p6
Magento
Version 2.4.5 p7
Magento
Version 2.4.5 p8
Magento
Version 2.4.5 p9
Magento
Version 2.4.6
Magento
Version 2.4.6 p10
Magento
Version 2.4.6 p11
Magento
Version 2.4.6 p1
Magento
Version 2.4.6 p2
Magento
Version 2.4.6 p3
Magento
Version 2.4.6 p4
Magento
Version 2.4.6 p5
Magento
Version 2.4.6 p6
Magento
Version 2.4.6 p7
Magento
Version 2.4.6 p8
Magento
Version 2.4.6 p9
Magento
Version 2.4.7
Magento
Version 2.4.7 b1
Magento
Version 2.4.7 b2
Magento
Version 2.4.7 beta3
Magento
Version 2.4.7 p1
Magento
Version 2.4.7 p2
Magento
Version 2.4.7 p3
Magento
Version 2.4.7 p4
Magento
Version 2.4.7 p5
Magento
Version 2.4.7 p6
Magento
Version 2.4.8
Magento
Version 2.4.8 beta1
Magento
Version 2.4.8 beta2
Magento
Version 2.4.8 p1
Magento
Version 2.4.9 alpha1

Related CWEs

CWE-863
Incorrect Authorization
The product performs an authorization check when an actor attempts to access a resource or perform an action, but it does not correctly perform the check. This allows attackers to bypass intended access restrictions.

References (1)

Source: psirt@adobe.com
Vendor Advisory

Timeline

No history available yet.