Search
Find a vulnerability
Search criteria
26 vulnerabilities found for commerce by adobe
CERTFR-2026-AVI-1301
Vulnerability from certfr_avis - Published: 2026-10-14 - Updated: 2026-10-14
De multiples vulnérabilités ont été découvertes dans les produits Adobe. Certaines d'entre elles permettent à un attaquant de provoquer une exécution de code arbitraire à distance, une élévation de privilèges et un déni de service à distance.
Solutions
Se référer au bulletin de sécurité de l'éditeur pour l'obtention des correctifs (cf. section Documentation).
Impacted products
| Vendor | Product | Description | ||
|---|---|---|---|---|
| Adobe | Magento | Magento Open Source versions 2.4.9-x antérieures à 2.4.9-2026-oct | ||
| Adobe | Commerce B2B | Adobe Commerce B2B versions 1.4.2-x antérieures à 1.4.2-2026-oct | ||
| Adobe | Commerce B2B | Adobe Commerce B2B versions 1.5.3-x antérieures à 1.5.3-2026-oct | ||
| Adobe | ColdFusion | ColdFusion 2025 versions antérieures à 2025.0.14 | ||
| Adobe | Commerce | Adobe Commerce versions 2.4.7-x antérieures à 2.4.7-2026-oct | ||
| Adobe | Magento | Magento Open Source versions 2.4.8-x antérieures à 2.4.8-2026-oct | ||
| Adobe | Commerce | Adobe Commerce versions 2.4.10-x antérieures à 2.4.10-alpha1 | ||
| Adobe | Commerce B2B | Adobe Commerce B2B versions 1.3.4-x antérieures à 1.3.4-2026-oct | ||
| Adobe | Magento | Magento Open Source versions 2.4.7-x antérieures à 2.4.7-2026-oct | ||
| Adobe | ColdFusion | ColdFusion 2023 versions antérieures à 2023.0.26 | ||
| Adobe | Commerce | Adobe Commerce versions 2.4.6-x antérieures à 2.4.6-2026-oct | ||
| Adobe | Commerce B2B | Adobe Commerce B2B versions 1.5.2-x antérieures à 1.5.2-2026-oct | ||
| Adobe | Commerce | Adobe Commerce versions 2.4.8-x antérieures à 2.4.8-2026-oct | ||
| Adobe | Commerce B2B | Adobe Commerce B2B versions 1.3.3-x antérieures à 1.3.3-2026-oct | ||
| Adobe | Commerce | Adobe Commerce versions 2.4.4-x antérieures à 2.4.4-2026-oct | ||
| Adobe | Commerce | Adobe Commerce versions 2.4.5-x antérieures à 2.4.5-2026-oct | ||
| Adobe | Magento | Magento Open Source versions 2.4.10-x antérieures à 2.4.10-alpha1 | ||
| Adobe | Commerce B2B | Adobe Commerce B2B versions 1.5.4-x antérieures à 1.5.4-alpha1 | ||
| Adobe | Commerce | Adobe Commerce versions 2.4.9-x antérieures à 2.4.9-2026-oct |
References
| Title | Publication Time | Tags | ||||||
|---|---|---|---|---|---|---|---|---|
|
||||||||
{
"$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
"affected_systems": [
{
"description": "Magento Open Source versions 2.4.9-x ant\u00e9rieures \u00e0 2.4.9-2026-oct",
"product": {
"name": "Magento",
"vendor": {
"name": "Adobe",
"scada": false
}
}
},
{
"description": "Adobe Commerce B2B versions 1.4.2-x ant\u00e9rieures \u00e0 1.4.2-2026-oct",
"product": {
"name": "Commerce B2B",
"vendor": {
"name": "Adobe",
"scada": false
}
}
},
{
"description": "Adobe Commerce B2B versions 1.5.3-x ant\u00e9rieures \u00e0 1.5.3-2026-oct",
"product": {
"name": "Commerce B2B",
"vendor": {
"name": "Adobe",
"scada": false
}
}
},
{
"description": "ColdFusion 2025 versions ant\u00e9rieures \u00e0 2025.0.14",
"product": {
"name": "ColdFusion",
"vendor": {
"name": "Adobe",
"scada": false
}
}
},
{
"description": "Adobe Commerce versions 2.4.7-x ant\u00e9rieures \u00e0 2.4.7-2026-oct",
"product": {
"name": "Commerce",
"vendor": {
"name": "Adobe",
"scada": false
}
}
},
{
"description": "Magento Open Source versions 2.4.8-x ant\u00e9rieures \u00e0 2.4.8-2026-oct",
"product": {
"name": "Magento",
"vendor": {
"name": "Adobe",
"scada": false
}
}
},
{
"description": "Adobe Commerce versions 2.4.10-x ant\u00e9rieures \u00e0 2.4.10-alpha1",
"product": {
"name": "Commerce",
"vendor": {
"name": "Adobe",
"scada": false
}
}
},
{
"description": "Adobe Commerce B2B versions 1.3.4-x ant\u00e9rieures \u00e0 1.3.4-2026-oct",
"product": {
"name": "Commerce B2B",
"vendor": {
"name": "Adobe",
"scada": false
}
}
},
{
"description": "Magento Open Source versions 2.4.7-x ant\u00e9rieures \u00e0 2.4.7-2026-oct",
"product": {
"name": "Magento",
"vendor": {
"name": "Adobe",
"scada": false
}
}
},
{
"description": "ColdFusion 2023 versions ant\u00e9rieures \u00e0 2023.0.26",
"product": {
"name": "ColdFusion",
"vendor": {
"name": "Adobe",
"scada": false
}
}
},
{
"description": "Adobe Commerce versions 2.4.6-x ant\u00e9rieures \u00e0 2.4.6-2026-oct",
"product": {
"name": "Commerce",
"vendor": {
"name": "Adobe",
"scada": false
}
}
},
{
"description": "Adobe Commerce B2B versions 1.5.2-x ant\u00e9rieures \u00e0 1.5.2-2026-oct",
"product": {
"name": "Commerce B2B",
"vendor": {
"name": "Adobe",
"scada": false
}
}
},
{
"description": "Adobe Commerce versions 2.4.8-x ant\u00e9rieures \u00e0 2.4.8-2026-oct",
"product": {
"name": "Commerce",
"vendor": {
"name": "Adobe",
"scada": false
}
}
},
{
"description": "Adobe Commerce B2B versions 1.3.3-x ant\u00e9rieures \u00e0 1.3.3-2026-oct",
"product": {
"name": "Commerce B2B",
"vendor": {
"name": "Adobe",
"scada": false
}
}
},
{
"description": "Adobe Commerce versions 2.4.4-x ant\u00e9rieures \u00e0 2.4.4-2026-oct",
"product": {
"name": "Commerce",
"vendor": {
"name": "Adobe",
"scada": false
}
}
},
{
"description": "Adobe Commerce versions 2.4.5-x ant\u00e9rieures \u00e0 2.4.5-2026-oct",
"product": {
"name": "Commerce",
"vendor": {
"name": "Adobe",
"scada": false
}
}
},
{
"description": "Magento Open Source versions 2.4.10-x ant\u00e9rieures \u00e0 2.4.10-alpha1",
"product": {
"name": "Magento",
"vendor": {
"name": "Adobe",
"scada": false
}
}
},
{
"description": "Adobe Commerce B2B versions 1.5.4-x ant\u00e9rieures \u00e0 1.5.4-alpha1",
"product": {
"name": "Commerce B2B",
"vendor": {
"name": "Adobe",
"scada": false
}
}
},
{
"description": "Adobe Commerce versions 2.4.9-x ant\u00e9rieures \u00e0 2.4.9-2026-oct",
"product": {
"name": "Commerce",
"vendor": {
"name": "Adobe",
"scada": false
}
}
}
],
"affected_systems_content": "",
"content": "## Solutions\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des correctifs (cf. section Documentation).",
"cves": [
{
"name": "CVE-2026-71385",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-71385"
},
{
"name": "CVE-2026-92911",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-92911"
},
{
"name": "CVE-2026-95631",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-95631"
},
{
"name": "CVE-2026-76001",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-76001"
},
{
"name": "CVE-2026-106617",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-106617"
},
{
"name": "CVE-2026-105900",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-105900"
},
{
"name": "CVE-2026-92464",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-92464"
},
{
"name": "CVE-2026-90530",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-90530"
},
{
"name": "CVE-2026-95630",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-95630"
},
{
"name": "CVE-2026-105898",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-105898"
},
{
"name": "CVE-2026-75650",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-75650"
},
{
"name": "CVE-2026-106614",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-106614"
},
{
"name": "CVE-2026-106090",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-106090"
},
{
"name": "CVE-2026-106620",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-106620"
},
{
"name": "CVE-2026-91013",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-91013"
},
{
"name": "CVE-2026-106089",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-106089"
},
{
"name": "CVE-2026-106621",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-106621"
},
{
"name": "CVE-2026-75994",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-75994"
},
{
"name": "CVE-2026-105903",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-105903"
},
{
"name": "CVE-2026-75748",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-75748"
},
{
"name": "CVE-2026-106618",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-106618"
},
{
"name": "CVE-2026-92922",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-92922"
},
{
"name": "CVE-2026-92909",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-92909"
},
{
"name": "CVE-2026-75995",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-75995"
},
{
"name": "CVE-2026-106619",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-106619"
},
{
"name": "CVE-2026-48378",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-48378"
},
{
"name": "CVE-2026-34633",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-34633"
},
{
"name": "CVE-2026-105899",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-105899"
},
{
"name": "CVE-2026-106623",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-106623"
},
{
"name": "CVE-2026-103849",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-103849"
},
{
"name": "CVE-2026-105901",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-105901"
},
{
"name": "CVE-2026-106624",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-106624"
},
{
"name": "CVE-2026-34634",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-34634"
},
{
"name": "CVE-2026-75996",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-75996"
},
{
"name": "CVE-2026-105994",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-105994"
},
{
"name": "CVE-2026-106613",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-106613"
},
{
"name": "CVE-2026-106612",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-106612"
},
{
"name": "CVE-2026-105897",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-105897"
},
{
"name": "CVE-2026-92908",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-92908"
},
{
"name": "CVE-2026-92910",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-92910"
},
{
"name": "CVE-2026-106616",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-106616"
},
{
"name": "CVE-2026-106615",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-106615"
},
{
"name": "CVE-2026-100133",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-100133"
},
{
"name": "CVE-2026-106622",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-106622"
}
],
"initial_release_date": "2026-10-14T00:00:00",
"last_revision_date": "2026-10-14T00:00:00",
"links": [],
"reference": "CERTFR-2026-AVI-1301",
"revisions": [
{
"description": "Version initiale",
"revision_date": "2026-10-14T00:00:00.000000"
}
],
"risks": [
{
"description": "D\u00e9ni de service \u00e0 distance"
},
{
"description": "Injection de code indirecte \u00e0 distance (XSS)"
},
{
"description": "Ex\u00e9cution de code arbitraire \u00e0 distance"
},
{
"description": "Atteinte \u00e0 l\u0027int\u00e9grit\u00e9 des donn\u00e9es"
},
{
"description": "Contournement de la politique de s\u00e9curit\u00e9"
},
{
"description": "Atteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es"
},
{
"description": "\u00c9l\u00e9vation de privil\u00e8ges"
}
],
"summary": "De multiples vuln\u00e9rabilit\u00e9s ont \u00e9t\u00e9 d\u00e9couvertes dans les produits Adobe. Certaines d\u0027entre elles permettent \u00e0 un attaquant de provoquer une ex\u00e9cution de code arbitraire \u00e0 distance, une \u00e9l\u00e9vation de privil\u00e8ges et un d\u00e9ni de service \u00e0 distance.",
"title": "Multiples vuln\u00e9rabilit\u00e9s dans les produits Adobe",
"vendor_advisories": [
{
"published_at": "2026-10-13",
"title": "Bulletin de s\u00e9curit\u00e9 Adobe apsb26-153",
"url": "https://www.adobe.com/trust/security/products/commerce/apsb26-153"
},
{
"published_at": "2026-10-13",
"title": "Bulletin de s\u00e9curit\u00e9 Adobe apsb26-144",
"url": "https://www.adobe.com/trust/security/products/coldfusion/apsb26-144"
}
]
}
CERTFR-2026-AVI-1140
Vulnerability from certfr_avis - Published: 2026-09-09 - Updated: 2026-09-09
De multiples vulnérabilités ont été découvertes dans les produits Adobe. Certaines d'entre elles permettent à un attaquant de provoquer une exécution de code arbitraire à distance, une élévation de privilèges et un déni de service à distance.
Solutions
Se référer au bulletin de sécurité de l'éditeur pour l'obtention des correctifs (cf. section Documentation).
Impacted products
| Vendor | Product | Description | ||
|---|---|---|---|---|
| Adobe | Commerce | Adobe Commerce versions antérieures à 2.4.4-2026-sep | ||
| Adobe | Commerce | Adobe Commerce versions 2.4.5-x antérieures à 2.4.5-2026-sep | ||
| Adobe | Commerce B2B | Adobe Commerce B2B versions 1.4.x antérieures à 1.4.2-2026-sep | ||
| Adobe | Magento | Magento Open Source versions 2.4.9-x antérieures à 2.4.9-2026-sep | ||
| Adobe | ColdFusion | ColdFusion 2025 versions antérieures à 2025.0.13 | ||
| Adobe | Acrobat | Acrobat 2024 versions antérieures à 24.001.30429 pour Windows et macOS | ||
| Adobe | Commerce | Adobe Commerce versions 2.4.9-x antérieures à 2.4.9-2026-sep | ||
| Adobe | Commerce | Adobe Commerce versions 2.4.6-x antérieures à 2.4.6-2026-sep | ||
| Adobe | Magento | Magento Open Source versions 2.4.8-x antérieures à 2.4.8-2026-sep | ||
| Adobe | Magento | Magento Open Source versions antérieures à 2.4.7-2026-sep | ||
| Adobe | Commerce B2B | Adobe Commerce B2B versions 1.3.4-x antérieures à 1.3.4-2026-sep | ||
| Adobe | Commerce | Adobe Commerce versions 2.4.7-x antérieures à 2.4.7-2026-sep | ||
| Adobe | Commerce B2B | Adobe Commerce B2B versions 1.5.3-x antérieures à 1.5.3-2026-sep | ||
| Adobe | Commerce B2B | Adobe Commerce B2B versions 1.5.2-x antérieures à 1.5.2-2026-sep | ||
| Adobe | Commerce B2B | Adobe Commerce B2B versions antérieures à 1.3.3-2026-sep | ||
| Adobe | Commerce | Adobe Commerce versions 2.4.8-x antérieures à 2.4.8-2026-sep | ||
| Adobe | Acrobat | Adobe Acrobat versions antérieures à 26.002.21901 pour Windows et macOS | ||
| Adobe | Acrobat | Acrobat Reader versions antérieures à 26.002.21901 pour Windows et macOS | ||
| Adobe | ColdFusion | ColdFusion 2023 versions antérieures à 2023.0.24 |
References
| Title | Publication Time | Tags | |||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|
|
|||||||||||
{
"$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
"affected_systems": [
{
"description": "Adobe Commerce versions ant\u00e9rieures \u00e0 2.4.4-2026-sep",
"product": {
"name": "Commerce",
"vendor": {
"name": "Adobe",
"scada": false
}
}
},
{
"description": "Adobe Commerce versions 2.4.5-x ant\u00e9rieures \u00e0 2.4.5-2026-sep",
"product": {
"name": "Commerce",
"vendor": {
"name": "Adobe",
"scada": false
}
}
},
{
"description": "Adobe Commerce B2B versions 1.4.x ant\u00e9rieures \u00e0 1.4.2-2026-sep",
"product": {
"name": "Commerce B2B",
"vendor": {
"name": "Adobe",
"scada": false
}
}
},
{
"description": "Magento Open Source versions 2.4.9-x ant\u00e9rieures \u00e0 2.4.9-2026-sep",
"product": {
"name": "Magento",
"vendor": {
"name": "Adobe",
"scada": false
}
}
},
{
"description": "ColdFusion 2025 versions ant\u00e9rieures \u00e0 2025.0.13",
"product": {
"name": "ColdFusion",
"vendor": {
"name": "Adobe",
"scada": false
}
}
},
{
"description": "Acrobat 2024 versions ant\u00e9rieures \u00e0 24.001.30429 pour Windows et macOS",
"product": {
"name": "Acrobat",
"vendor": {
"name": "Adobe",
"scada": false
}
}
},
{
"description": "Adobe Commerce versions 2.4.9-x ant\u00e9rieures \u00e0 2.4.9-2026-sep",
"product": {
"name": "Commerce",
"vendor": {
"name": "Adobe",
"scada": false
}
}
},
{
"description": "Adobe Commerce versions 2.4.6-x ant\u00e9rieures \u00e0 2.4.6-2026-sep",
"product": {
"name": "Commerce",
"vendor": {
"name": "Adobe",
"scada": false
}
}
},
{
"description": "Magento Open Source versions 2.4.8-x ant\u00e9rieures \u00e0 2.4.8-2026-sep",
"product": {
"name": "Magento",
"vendor": {
"name": "Adobe",
"scada": false
}
}
},
{
"description": "Magento Open Source versions ant\u00e9rieures \u00e0 2.4.7-2026-sep",
"product": {
"name": "Magento",
"vendor": {
"name": "Adobe",
"scada": false
}
}
},
{
"description": "Adobe Commerce B2B versions 1.3.4-x ant\u00e9rieures \u00e0 1.3.4-2026-sep",
"product": {
"name": "Commerce B2B",
"vendor": {
"name": "Adobe",
"scada": false
}
}
},
{
"description": "Adobe Commerce versions 2.4.7-x ant\u00e9rieures \u00e0 2.4.7-2026-sep",
"product": {
"name": "Commerce",
"vendor": {
"name": "Adobe",
"scada": false
}
}
},
{
"description": "Adobe Commerce B2B versions 1.5.3-x ant\u00e9rieures \u00e0 1.5.3-2026-sep",
"product": {
"name": "Commerce B2B",
"vendor": {
"name": "Adobe",
"scada": false
}
}
},
{
"description": "Adobe Commerce B2B versions 1.5.2-x ant\u00e9rieures \u00e0 1.5.2-2026-sep",
"product": {
"name": "Commerce B2B",
"vendor": {
"name": "Adobe",
"scada": false
}
}
},
{
"description": "Adobe Commerce B2B versions ant\u00e9rieures \u00e0 1.3.3-2026-sep",
"product": {
"name": "Commerce B2B",
"vendor": {
"name": "Adobe",
"scada": false
}
}
},
{
"description": "Adobe Commerce versions 2.4.8-x ant\u00e9rieures \u00e0 2.4.8-2026-sep",
"product": {
"name": "Commerce",
"vendor": {
"name": "Adobe",
"scada": false
}
}
},
{
"description": "Adobe Acrobat versions ant\u00e9rieures \u00e0 26.002.21901 pour Windows et macOS",
"product": {
"name": "Acrobat",
"vendor": {
"name": "Adobe",
"scada": false
}
}
},
{
"description": "Acrobat Reader versions ant\u00e9rieures \u00e0 26.002.21901 pour Windows et macOS",
"product": {
"name": "Acrobat",
"vendor": {
"name": "Adobe",
"scada": false
}
}
},
{
"description": "ColdFusion 2023 versions ant\u00e9rieures \u00e0 2023.0.24",
"product": {
"name": "ColdFusion",
"vendor": {
"name": "Adobe",
"scada": false
}
}
}
],
"affected_systems_content": "",
"content": "## Solutions\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des correctifs (cf. section Documentation).",
"cves": [
{
"name": "CVE-2026-82001",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-82001"
},
{
"name": "CVE-2026-81990",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-81990"
},
{
"name": "CVE-2026-81982",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-81982"
},
{
"name": "CVE-2026-81984",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-81984"
},
{
"name": "CVE-2026-81989",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-81989"
},
{
"name": "CVE-2026-81988",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-81988"
},
{
"name": "CVE-2026-77108",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-77108"
},
{
"name": "CVE-2026-76190",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-76190"
},
{
"name": "CVE-2026-81978",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-81978"
},
{
"name": "CVE-2026-81991",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-81991"
},
{
"name": "CVE-2026-81985",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-81985"
},
{
"name": "CVE-2026-81977",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-81977"
},
{
"name": "CVE-2026-80161",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-80161"
},
{
"name": "CVE-2026-75999",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-75999"
},
{
"name": "CVE-2026-81973",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-81973"
},
{
"name": "CVE-2026-81986",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-81986"
},
{
"name": "CVE-2026-81975",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-81975"
},
{
"name": "CVE-2026-79907",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-79907"
},
{
"name": "CVE-2026-81976",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-81976"
},
{
"name": "CVE-2026-81994",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-81994"
},
{
"name": "CVE-2026-76201",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-76201"
},
{
"name": "CVE-2026-81980",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-81980"
},
{
"name": "CVE-2026-77111",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-77111"
},
{
"name": "CVE-2026-80160",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-80160"
},
{
"name": "CVE-2026-77109",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-77109"
},
{
"name": "CVE-2026-81981",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-81981"
},
{
"name": "CVE-2026-81992",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-81992"
},
{
"name": "CVE-2026-79909",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-79909"
},
{
"name": "CVE-2026-48273",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-48273"
},
{
"name": "CVE-2026-81983",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-81983"
},
{
"name": "CVE-2026-81997",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-81997"
},
{
"name": "CVE-2026-80162",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-80162"
},
{
"name": "CVE-2026-76002",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-76002"
},
{
"name": "CVE-2026-76000",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-76000"
},
{
"name": "CVE-2026-76200",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-76200"
},
{
"name": "CVE-2026-79910",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-79910"
},
{
"name": "CVE-2026-77774",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-77774"
},
{
"name": "CVE-2026-75746",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-75746"
},
{
"name": "CVE-2026-77110",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-77110"
},
{
"name": "CVE-2026-81993",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-81993"
},
{
"name": "CVE-2026-75993",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-75993"
},
{
"name": "CVE-2026-80159",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-80159"
},
{
"name": "CVE-2026-81996",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-81996"
},
{
"name": "CVE-2026-81987",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-81987"
},
{
"name": "CVE-2026-79908",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-79908"
},
{
"name": "CVE-2026-21269",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-21269"
},
{
"name": "CVE-2026-76202",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-76202"
},
{
"name": "CVE-2026-75998",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-75998"
},
{
"name": "CVE-2026-81979",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-81979"
}
],
"initial_release_date": "2026-09-09T00:00:00",
"last_revision_date": "2026-09-09T00:00:00",
"links": [],
"reference": "CERTFR-2026-AVI-1140",
"revisions": [
{
"description": "Version initiale",
"revision_date": "2026-09-09T00:00:00.000000"
}
],
"risks": [
{
"description": "D\u00e9ni de service \u00e0 distance"
},
{
"description": "Injection de code indirecte \u00e0 distance (XSS)"
},
{
"description": "Ex\u00e9cution de code arbitraire \u00e0 distance"
},
{
"description": "Injection SQL (SQLi)"
},
{
"description": "Contournement de la politique de s\u00e9curit\u00e9"
},
{
"description": "Atteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es"
},
{
"description": "\u00c9l\u00e9vation de privil\u00e8ges"
}
],
"summary": "De multiples vuln\u00e9rabilit\u00e9s ont \u00e9t\u00e9 d\u00e9couvertes dans les produits Adobe. Certaines d\u0027entre elles permettent \u00e0 un attaquant de provoquer une ex\u00e9cution de code arbitraire \u00e0 distance, une \u00e9l\u00e9vation de privil\u00e8ges et un d\u00e9ni de service \u00e0 distance.",
"title": "Multiples vuln\u00e9rabilit\u00e9s dans les produits Adobe",
"vendor_advisories": [
{
"published_at": "2026-09-08",
"title": "Bulletin de s\u00e9curit\u00e9 Adobe APSB26-119",
"url": "https://helpx.adobe.com/security/products/coldfusion/apsb26-119.html"
},
{
"published_at": "2026-09-08",
"title": "Bulletin de s\u00e9curit\u00e9 Adobe APSB26-138",
"url": "https://helpx.adobe.com/security/products/magento/apsb26-138.html"
},
{
"published_at": "2026-09-08",
"title": "Bulletin de s\u00e9curit\u00e9 Adobe APSB26-141",
"url": "https://helpx.adobe.com/security/products/acrobat/apsb26-141.html"
}
]
}
CERTFR-2026-AVI-1130
Vulnerability from certfr_avis - Published: 2026-09-08 - Updated: 2026-09-08
Une vulnérabilité a été découverte dans les produits Adobe. Elle permet à un attaquant de provoquer une exécution de code arbitraire à distance.
Adobe indique que la vulnérabilité CVE-2026-75650 est activement exploitée.
Solutions
Se référer au bulletin de sécurité de l'éditeur pour l'obtention des correctifs (cf. section Documentation).
Impacted products
References
| Title | Publication Time | Tags | ||||||
|---|---|---|---|---|---|---|---|---|
|
||||||||
{
"$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
"affected_systems": [
{
"description": "Commerce B2B sans le correctif de s\u00e9curit\u00e9 pour CVE-2026-75650",
"product": {
"name": "Commerce B2B",
"vendor": {
"name": "Adobe",
"scada": false
}
}
},
{
"description": "Magento Open Source sans le correctif de s\u00e9curit\u00e9 pour CVE-2026-75650",
"product": {
"name": "Magento",
"vendor": {
"name": "Adobe",
"scada": false
}
}
},
{
"description": "Commerce sans le correctif de s\u00e9curit\u00e9 pour CVE-2026-75650",
"product": {
"name": "Commerce",
"vendor": {
"name": "Adobe",
"scada": false
}
}
}
],
"affected_systems_content": "",
"content": "## Solutions\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des correctifs (cf. section Documentation).",
"cves": [
{
"name": "CVE-2026-75650",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-75650"
}
],
"initial_release_date": "2026-09-08T00:00:00",
"last_revision_date": "2026-09-08T00:00:00",
"links": [
{
"title": "Action urgente requise : mise \u00e0 jour de s\u00e9curit\u00e9 critique disponible pour Adobe Commerce (APSB26-146)",
"url": "https://experienceleague.adobe.com/fr/docs/commerce-knowledge-base/kb/announcements/commerce-apsb26-146"
}
],
"reference": "CERTFR-2026-AVI-1130",
"revisions": [
{
"description": "Version initiale",
"revision_date": "2026-09-08T00:00:00.000000"
}
],
"risks": [
{
"description": "Ex\u00e9cution de code arbitraire \u00e0 distance"
}
],
"summary": "Une vuln\u00e9rabilit\u00e9 a \u00e9t\u00e9 d\u00e9couverte dans les produits Adobe. Elle permet \u00e0 un attaquant de provoquer une ex\u00e9cution de code arbitraire \u00e0 distance.\n\nAdobe indique que la vuln\u00e9rabilit\u00e9 CVE-2026-75650 est activement exploit\u00e9e.",
"title": "Vuln\u00e9rabilit\u00e9 dans les produits Adobe",
"vendor_advisories": [
{
"published_at": "2026-09-07",
"title": "Bulletin de s\u00e9curit\u00e9 Adobe APSB26-146",
"url": "https://helpx.adobe.com/security/products/magento/apsb26-146.html"
}
]
}
CERTFR-2026-AVI-1017
Vulnerability from certfr_avis - Published: 2026-08-13 - Updated: 2026-08-13
De multiples vulnérabilités ont été découvertes dans les produits Adobe. Certaines d'entre elles permettent à un attaquant de provoquer une exécution de code arbitraire à distance, une élévation de privilèges et un déni de service à distance.
Solutions
Se référer au bulletin de sécurité de l'éditeur pour l'obtention des correctifs (cf. section Documentation).
Impacted products
| Vendor | Product | Description | ||
|---|---|---|---|---|
| Adobe | ColdFusion | ColdFusion 2025 versions antérieures à 2025.0.12 | ||
| Adobe | Magento | Magento Open Source sans le correctif d'août 2026 | ||
| Adobe | ColdFusion | ColdFusion 2023 versions antérieures à 2023.0.23 | ||
| Adobe | Commerce | Adobe Commerce B2B sans le correctif d'août 2026 | ||
| Adobe | Commerce | Adobe Commerce sans le correctif d'août 2026 |
References
| Title | Publication Time | Tags | ||||||
|---|---|---|---|---|---|---|---|---|
|
||||||||
{
"$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
"affected_systems": [
{
"description": "ColdFusion 2025 versions ant\u00e9rieures \u00e0 2025.0.12",
"product": {
"name": "ColdFusion",
"vendor": {
"name": "Adobe",
"scada": false
}
}
},
{
"description": "Magento Open Source sans le correctif d\u0027ao\u00fbt 2026",
"product": {
"name": "Magento",
"vendor": {
"name": "Adobe",
"scada": false
}
}
},
{
"description": "ColdFusion 2023 versions ant\u00e9rieures \u00e0 2023.0.23",
"product": {
"name": "ColdFusion",
"vendor": {
"name": "Adobe",
"scada": false
}
}
},
{
"description": "Adobe Commerce B2B sans le correctif d\u0027ao\u00fbt 2026",
"product": {
"name": "Commerce",
"vendor": {
"name": "Adobe",
"scada": false
}
}
},
{
"description": "Adobe Commerce sans le correctif d\u0027ao\u00fbt 2026",
"product": {
"name": "Commerce",
"vendor": {
"name": "Adobe",
"scada": false
}
}
}
],
"affected_systems_content": "",
"content": "## Solutions\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des correctifs (cf. section Documentation).",
"cves": [
{
"name": "CVE-2026-48411",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-48411"
},
{
"name": "CVE-2026-71385",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-71385"
},
{
"name": "CVE-2026-48440",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-48440"
},
{
"name": "CVE-2026-21279",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-21279"
},
{
"name": "CVE-2026-48375",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-48375"
},
{
"name": "CVE-2026-48415",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-48415"
},
{
"name": "CVE-2026-25652",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-25652"
},
{
"name": "CVE-2026-71386",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-71386"
},
{
"name": "CVE-2026-48412",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-48412"
},
{
"name": "CVE-2026-71384",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-71384"
},
{
"name": "CVE-2026-71362",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-71362"
},
{
"name": "CVE-2026-48416",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-48416"
},
{
"name": "CVE-2026-48384",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-48384"
},
{
"name": "CVE-2026-21273",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-21273"
},
{
"name": "CVE-2026-48273",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-48273"
},
{
"name": "CVE-2026-48414",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-48414"
},
{
"name": "CVE-2026-48386",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-48386"
},
{
"name": "CVE-2026-48362",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-48362"
},
{
"name": "CVE-2026-48413",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-48413"
},
{
"name": "CVE-2026-34635",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-34635"
},
{
"name": "CVE-2026-71387",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-71387"
},
{
"name": "CVE-2026-71383",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-71383"
},
{
"name": "CVE-2026-48376",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-48376"
}
],
"initial_release_date": "2026-08-13T00:00:00",
"last_revision_date": "2026-08-13T00:00:00",
"links": [],
"reference": "CERTFR-2026-AVI-1017",
"revisions": [
{
"description": "Version initiale",
"revision_date": "2026-08-13T00:00:00.000000"
}
],
"risks": [
{
"description": "D\u00e9ni de service \u00e0 distance"
},
{
"description": "Injection de code indirecte \u00e0 distance (XSS)"
},
{
"description": "Ex\u00e9cution de code arbitraire \u00e0 distance"
},
{
"description": "Non sp\u00e9cifi\u00e9 par l\u0027\u00e9diteur"
},
{
"description": "Contournement de la politique de s\u00e9curit\u00e9"
},
{
"description": "Atteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es"
},
{
"description": "\u00c9l\u00e9vation de privil\u00e8ges"
}
],
"summary": "De multiples vuln\u00e9rabilit\u00e9s ont \u00e9t\u00e9 d\u00e9couvertes dans les produits Adobe. Certaines d\u0027entre elles permettent \u00e0 un attaquant de provoquer une ex\u00e9cution de code arbitraire \u00e0 distance, une \u00e9l\u00e9vation de privil\u00e8ges et un d\u00e9ni de service \u00e0 distance.",
"title": "Multiples vuln\u00e9rabilit\u00e9s dans les produits Adobe",
"vendor_advisories": [
{
"published_at": "2026-08-11",
"title": "Bulletin de s\u00e9curit\u00e9 Adobe APSB26-92",
"url": "https://helpx.adobe.com/security/products/magento/apsb26-92.html"
},
{
"published_at": "2026-08-11",
"title": "Bulletin de s\u00e9curit\u00e9 Adobe APSB26-90",
"url": "https://helpx.adobe.com/security/products/coldfusion/apsb26-90.html"
}
]
}
CERTFR-2026-AVI-0580
Vulnerability from certfr_avis - Published: 2026-05-13 - Updated: 2026-05-13
De multiples vulnérabilités ont été découvertes dans les produits Adobe. Certaines d'entre elles permettent à un attaquant de provoquer une exécution de code arbitraire à distance, un déni de service à distance et une atteinte à l'intégrité des données.
Solutions
Se référer au bulletin de sécurité de l'éditeur pour l'obtention des correctifs (cf. section Documentation).
Impacted products
| Vendor | Product | Description | ||
|---|---|---|---|---|
| Adobe | Commerce | Adobe Commerce B2B versions 1.5.3 antérieures à 1.5.3 | ||
| Adobe | Commerce | Adobe Commerce versions 2.4.7 antérieures à 2.4.7-p10 | ||
| Adobe | Commerce | Adobe Commerce B2B versions 1.5.2 antérieures à 1.5.2-p5 | ||
| Adobe | Magento | Magento Open Source versions 2.4.7 antérieures à 2.4.7-p10 | ||
| Adobe | Commerce | Adobe Commerce versions 2.4.8 antérieures à 2.4.8-p5 | ||
| Adobe | Commerce | Adobe Commerce versions 2.4.6 antérieures à 2.4.6-p15 | ||
| Adobe | Magento | Magento Open Source versions 2.4.9 antérieures à 2.4.9 | ||
| Adobe | Commerce | Adobe Commerce B2B versions 1.3.4 antérieures à 1.3.4-p17 | ||
| Adobe | Commerce | Adobe Commerce versions 2.4.9 antérieures à 2.4.9 | ||
| Adobe | Commerce | Adobe Commerce versions 2.4.4 antérieures à 2.4.4-p18 | ||
| Adobe | Commerce | Adobe Commerce B2B versions 1.3.3 antérieures à 1.3.3-p18 | ||
| Adobe | Magento | Magento Open Source versions 2.4.8 antérieures à 2.4.8-p5 | ||
| Adobe | Commerce | Adobe Commerce B2B versions 1.4.2 antérieures à 1.4.2-p10 | ||
| Adobe | Magento | Magento Open Source versions 2.4.6 antérieures à 2.4.6-p15 | ||
| Adobe | Commerce | Adobe Commerce versions 2.4.5 antérieures à 2.4.5-p17 |
References
| Title | Publication Time | Tags | |||
|---|---|---|---|---|---|
|
|||||
{
"$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
"affected_systems": [
{
"description": "Adobe Commerce B2B versions 1.5.3 ant\u00e9rieures \u00e0 1.5.3",
"product": {
"name": "Commerce",
"vendor": {
"name": "Adobe",
"scada": false
}
}
},
{
"description": "Adobe Commerce versions 2.4.7 ant\u00e9rieures \u00e0 2.4.7-p10",
"product": {
"name": "Commerce",
"vendor": {
"name": "Adobe",
"scada": false
}
}
},
{
"description": "Adobe Commerce B2B versions 1.5.2 ant\u00e9rieures \u00e0 1.5.2-p5",
"product": {
"name": "Commerce",
"vendor": {
"name": "Adobe",
"scada": false
}
}
},
{
"description": "Magento Open Source versions 2.4.7 ant\u00e9rieures \u00e0 2.4.7-p10",
"product": {
"name": "Magento",
"vendor": {
"name": "Adobe",
"scada": false
}
}
},
{
"description": "Adobe Commerce versions 2.4.8 ant\u00e9rieures \u00e0 2.4.8-p5",
"product": {
"name": "Commerce",
"vendor": {
"name": "Adobe",
"scada": false
}
}
},
{
"description": "Adobe Commerce versions 2.4.6 ant\u00e9rieures \u00e0 2.4.6-p15",
"product": {
"name": "Commerce",
"vendor": {
"name": "Adobe",
"scada": false
}
}
},
{
"description": "Magento Open Source versions 2.4.9 ant\u00e9rieures \u00e0 2.4.9",
"product": {
"name": "Magento",
"vendor": {
"name": "Adobe",
"scada": false
}
}
},
{
"description": "Adobe Commerce B2B versions 1.3.4 ant\u00e9rieures \u00e0 1.3.4-p17",
"product": {
"name": "Commerce",
"vendor": {
"name": "Adobe",
"scada": false
}
}
},
{
"description": "Adobe Commerce versions 2.4.9 ant\u00e9rieures \u00e0 2.4.9",
"product": {
"name": "Commerce",
"vendor": {
"name": "Adobe",
"scada": false
}
}
},
{
"description": "Adobe Commerce versions 2.4.4 ant\u00e9rieures \u00e0 2.4.4-p18",
"product": {
"name": "Commerce",
"vendor": {
"name": "Adobe",
"scada": false
}
}
},
{
"description": "Adobe Commerce B2B versions 1.3.3 ant\u00e9rieures \u00e0 1.3.3-p18",
"product": {
"name": "Commerce",
"vendor": {
"name": "Adobe",
"scada": false
}
}
},
{
"description": "Magento Open Source versions 2.4.8 ant\u00e9rieures \u00e0 2.4.8-p5",
"product": {
"name": "Magento",
"vendor": {
"name": "Adobe",
"scada": false
}
}
},
{
"description": "Adobe Commerce B2B versions 1.4.2 ant\u00e9rieures \u00e0 1.4.2-p10",
"product": {
"name": "Commerce",
"vendor": {
"name": "Adobe",
"scada": false
}
}
},
{
"description": "Magento Open Source versions 2.4.6 ant\u00e9rieures \u00e0 2.4.6-p15",
"product": {
"name": "Magento",
"vendor": {
"name": "Adobe",
"scada": false
}
}
},
{
"description": "Adobe Commerce versions 2.4.5 ant\u00e9rieures \u00e0 2.4.5-p17",
"product": {
"name": "Commerce",
"vendor": {
"name": "Adobe",
"scada": false
}
}
}
],
"affected_systems_content": "",
"content": "## Solutions\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des correctifs (cf. section Documentation).",
"cves": [
{
"name": "CVE-2026-34658",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-34658"
},
{
"name": "CVE-2026-34685",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-34685"
},
{
"name": "CVE-2026-34654",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-34654"
},
{
"name": "CVE-2026-34655",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-34655"
},
{
"name": "CVE-2026-34656",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-34656"
},
{
"name": "CVE-2026-34650",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-34650"
},
{
"name": "CVE-2026-34647",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-34647"
},
{
"name": "CVE-2026-34649",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-34649"
},
{
"name": "CVE-2026-34646",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-34646"
},
{
"name": "CVE-2026-34648",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-34648"
},
{
"name": "CVE-2026-34653",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-34653"
},
{
"name": "CVE-2026-34645",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-34645"
},
{
"name": "CVE-2026-34651",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-34651"
},
{
"name": "CVE-2026-34686",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-34686"
},
{
"name": "CVE-2026-34652",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-34652"
}
],
"initial_release_date": "2026-05-13T00:00:00",
"last_revision_date": "2026-05-13T00:00:00",
"links": [],
"reference": "CERTFR-2026-AVI-0580",
"revisions": [
{
"description": "Version initiale",
"revision_date": "2026-05-13T00:00:00.000000"
}
],
"risks": [
{
"description": "D\u00e9ni de service \u00e0 distance"
},
{
"description": "Injection de code indirecte \u00e0 distance (XSS)"
},
{
"description": "Ex\u00e9cution de code arbitraire \u00e0 distance"
},
{
"description": "Atteinte \u00e0 l\u0027int\u00e9grit\u00e9 des donn\u00e9es"
},
{
"description": "Non sp\u00e9cifi\u00e9 par l\u0027\u00e9diteur"
},
{
"description": "Falsification de requ\u00eates c\u00f4t\u00e9 serveur (SSRF)"
},
{
"description": "Contournement de la politique de s\u00e9curit\u00e9"
}
],
"summary": "De multiples vuln\u00e9rabilit\u00e9s ont \u00e9t\u00e9 d\u00e9couvertes dans les produits Adobe. Certaines d\u0027entre elles permettent \u00e0 un attaquant de provoquer une ex\u00e9cution de code arbitraire \u00e0 distance, un d\u00e9ni de service \u00e0 distance et une atteinte \u00e0 l\u0027int\u00e9grit\u00e9 des donn\u00e9es.",
"title": "Multiples vuln\u00e9rabilit\u00e9s dans les produits Adobe",
"vendor_advisories": [
{
"published_at": "2026-05-12",
"title": "Bulletin de s\u00e9curit\u00e9 Adobe APSB26-49",
"url": "https://helpx.adobe.com/security/products/magento/apsb26-49.html"
}
]
}
CERTFR-2026-AVI-0264
Vulnerability from certfr_avis - Published: 2026-03-11 - Updated: 2026-03-11
De multiples vulnérabilités ont été découvertes dans les produits Adobe. Certaines d'entre elles permettent à un attaquant de provoquer une exécution de code arbitraire à distance, une élévation de privilèges et un déni de service à distance.
Solutions
Se référer au bulletin de sécurité de l'éditeur pour l'obtention des correctifs (cf. section Documentation).
Impacted products
| Vendor | Product | Description | ||
|---|---|---|---|---|
| Adobe | Acrobat | Acrobat 2024 versions antérieures à 24.001.30356 pour Windows et macOS | ||
| Adobe | Commerce | Commerce versions 2.4.8 antérieures à 4.2.8-p4 | ||
| Adobe | Commerce | Commerce versions 2.4.6 antérieures à 4.2.6-p14 | ||
| Adobe | Commerce | Commerce versions 2.4.9 antérieures à 4.2.9-beta1 | ||
| Adobe | Commerce | Commerce versions 2.4.7 antérieures à 4.2.7-p9 | ||
| Adobe | Commerce | Commerce versions 2.4.4 antérieures à 4.2.4-p17 | ||
| Adobe | Magento | Magento Open Source versions 2.4.6 antérieures à 2.4.6-p14 | ||
| Adobe | Magento | Magento Open Source versions 2.4.7 antérieures à 2.4.7-p9 | ||
| Adobe | Magento | Magento Open Source versions 2.4.5 antérieures à 2.4.5-p16 | ||
| Adobe | Commerce | Commerce B2B versions 1.5.3 antérieures à 1.5.3-beta1 | ||
| Adobe | Commerce | Commerce B2B versions 1.3.5 antérieures à 1.3.5-p14 | ||
| Adobe | Acrobat Reader | Acrobat Reader DC versions antérieures à 25.001.21288 pour Windows et macOS | ||
| Adobe | Magento | Magento Open Source versions 2.4.9 antérieures à 2.4.9-beta1 | ||
| Adobe | Commerce | Commerce B2B versions 1.5.2 antérieures à 1.5.2-p4 | ||
| Adobe | Commerce | Commerce B2B versions 1.3.3 antérieures à 1.3.3-p17 | ||
| Adobe | Acrobat | Acrobat DC versions antérieures à 25.001.21288 pour Windows et macOS | ||
| Adobe | Commerce | Commerce versions 2.4.5 antérieures à 4.2.5-p16 | ||
| Adobe | Magento | Magento Open Source versions 2.4.8 antérieures à 2.4.8-p4 | ||
| Adobe | Commerce | Commerce B2B versions 1.4.2 antérieures à 1.4.2-p9 | ||
| Adobe | Commerce | Commerce B2B versions 1.3.4 antérieures à 1.3.4-p16 |
References
| Title | Publication Time | Tags | ||||||
|---|---|---|---|---|---|---|---|---|
|
||||||||
{
"$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
"affected_systems": [
{
"description": "Acrobat 2024 versions ant\u00e9rieures \u00e0 24.001.30356 pour Windows et macOS",
"product": {
"name": "Acrobat",
"vendor": {
"name": "Adobe",
"scada": false
}
}
},
{
"description": " Commerce versions 2.4.8 ant\u00e9rieures \u00e0 4.2.8-p4",
"product": {
"name": "Commerce",
"vendor": {
"name": "Adobe",
"scada": false
}
}
},
{
"description": " Commerce versions 2.4.6 ant\u00e9rieures \u00e0 4.2.6-p14",
"product": {
"name": "Commerce",
"vendor": {
"name": "Adobe",
"scada": false
}
}
},
{
"description": " Commerce versions 2.4.9 ant\u00e9rieures \u00e0 4.2.9-beta1",
"product": {
"name": "Commerce",
"vendor": {
"name": "Adobe",
"scada": false
}
}
},
{
"description": " Commerce versions 2.4.7 ant\u00e9rieures \u00e0 4.2.7-p9",
"product": {
"name": "Commerce",
"vendor": {
"name": "Adobe",
"scada": false
}
}
},
{
"description": " Commerce versions 2.4.4 ant\u00e9rieures \u00e0 4.2.4-p17",
"product": {
"name": "Commerce",
"vendor": {
"name": "Adobe",
"scada": false
}
}
},
{
"description": "Magento Open Source versions 2.4.6 ant\u00e9rieures \u00e0 2.4.6-p14",
"product": {
"name": "Magento",
"vendor": {
"name": "Adobe",
"scada": false
}
}
},
{
"description": "Magento Open Source versions 2.4.7 ant\u00e9rieures \u00e0 2.4.7-p9",
"product": {
"name": "Magento",
"vendor": {
"name": "Adobe",
"scada": false
}
}
},
{
"description": "Magento Open Source versions 2.4.5 ant\u00e9rieures \u00e0 2.4.5-p16",
"product": {
"name": "Magento",
"vendor": {
"name": "Adobe",
"scada": false
}
}
},
{
"description": "Commerce B2B versions 1.5.3 ant\u00e9rieures \u00e0 1.5.3-beta1",
"product": {
"name": "Commerce",
"vendor": {
"name": "Adobe",
"scada": false
}
}
},
{
"description": "Commerce B2B versions 1.3.5 ant\u00e9rieures \u00e0 1.3.5-p14",
"product": {
"name": "Commerce",
"vendor": {
"name": "Adobe",
"scada": false
}
}
},
{
"description": "Acrobat Reader DC versions ant\u00e9rieures \u00e0 25.001.21288 pour Windows et macOS",
"product": {
"name": "Acrobat Reader",
"vendor": {
"name": "Adobe",
"scada": false
}
}
},
{
"description": "Magento Open Source versions 2.4.9 ant\u00e9rieures \u00e0 2.4.9-beta1",
"product": {
"name": "Magento",
"vendor": {
"name": "Adobe",
"scada": false
}
}
},
{
"description": "Commerce B2B versions 1.5.2 ant\u00e9rieures \u00e0 1.5.2-p4",
"product": {
"name": "Commerce",
"vendor": {
"name": "Adobe",
"scada": false
}
}
},
{
"description": "Commerce B2B versions 1.3.3 ant\u00e9rieures \u00e0 1.3.3-p17",
"product": {
"name": "Commerce",
"vendor": {
"name": "Adobe",
"scada": false
}
}
},
{
"description": "Acrobat DC versions ant\u00e9rieures \u00e0 25.001.21288 pour Windows et macOS",
"product": {
"name": "Acrobat",
"vendor": {
"name": "Adobe",
"scada": false
}
}
},
{
"description": " Commerce versions 2.4.5 ant\u00e9rieures \u00e0 4.2.5-p16",
"product": {
"name": "Commerce",
"vendor": {
"name": "Adobe",
"scada": false
}
}
},
{
"description": "Magento Open Source versions 2.4.8 ant\u00e9rieures \u00e0 2.4.8-p4",
"product": {
"name": "Magento",
"vendor": {
"name": "Adobe",
"scada": false
}
}
},
{
"description": "Commerce B2B versions 1.4.2 ant\u00e9rieures \u00e0 1.4.2-p9",
"product": {
"name": "Commerce",
"vendor": {
"name": "Adobe",
"scada": false
}
}
},
{
"description": "Commerce B2B versions 1.3.4 ant\u00e9rieures \u00e0 1.3.4-p16",
"product": {
"name": "Commerce",
"vendor": {
"name": "Adobe",
"scada": false
}
}
}
],
"affected_systems_content": "",
"content": "## Solutions\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des correctifs (cf. section Documentation).",
"cves": [
{
"name": "CVE-2026-27220",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-27220"
},
{
"name": "CVE-2026-27221",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-27221"
},
{
"name": "CVE-2026-21295",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-21295"
},
{
"name": "CVE-2026-21360",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-21360"
},
{
"name": "CVE-2026-27278",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-27278"
},
{
"name": "CVE-2026-21291",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-21291"
},
{
"name": "CVE-2026-21311",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-21311"
},
{
"name": "CVE-2026-21293",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-21293"
},
{
"name": "CVE-2026-21292",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-21292"
},
{
"name": "CVE-2026-21359",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-21359"
},
{
"name": "CVE-2026-21361",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-21361"
},
{
"name": "CVE-2026-21285",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-21285"
},
{
"name": "CVE-2026-21310",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-21310"
},
{
"name": "CVE-2026-21294",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-21294"
},
{
"name": "CVE-2026-21286",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-21286"
},
{
"name": "CVE-2026-21284",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-21284"
},
{
"name": "CVE-2026-21289",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-21289"
},
{
"name": "CVE-2026-21282",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-21282"
},
{
"name": "CVE-2026-21297",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-21297"
},
{
"name": "CVE-2026-21296",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-21296"
},
{
"name": "CVE-2026-21309",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-21309"
},
{
"name": "CVE-2026-21290",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-21290"
}
],
"initial_release_date": "2026-03-11T00:00:00",
"last_revision_date": "2026-03-11T00:00:00",
"links": [],
"reference": "CERTFR-2026-AVI-0264",
"revisions": [
{
"description": "Version initiale",
"revision_date": "2026-03-11T00:00:00.000000"
}
],
"risks": [
{
"description": "D\u00e9ni de service \u00e0 distance"
},
{
"description": "Injection de code indirecte \u00e0 distance (XSS)"
},
{
"description": "Ex\u00e9cution de code arbitraire \u00e0 distance"
},
{
"description": "Falsification de requ\u00eates c\u00f4t\u00e9 serveur (SSRF)"
},
{
"description": "Contournement de la politique de s\u00e9curit\u00e9"
},
{
"description": "Atteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es"
},
{
"description": "\u00c9l\u00e9vation de privil\u00e8ges"
}
],
"summary": "De multiples vuln\u00e9rabilit\u00e9s ont \u00e9t\u00e9 d\u00e9couvertes dans les produits Adobe. Certaines d\u0027entre elles permettent \u00e0 un attaquant de provoquer une ex\u00e9cution de code arbitraire \u00e0 distance, une \u00e9l\u00e9vation de privil\u00e8ges et un d\u00e9ni de service \u00e0 distance.",
"title": "Multiples vuln\u00e9rabilit\u00e9s dans les produits Adobe",
"vendor_advisories": [
{
"published_at": "2026-03-10",
"title": "Bulletin de s\u00e9curit\u00e9 Adobe APSB26-05",
"url": "https://helpx.adobe.com/security/products/magento/apsb26-05.html"
},
{
"published_at": "2026-03-10",
"title": "Bulletin de s\u00e9curit\u00e9 Adobe APSB26-26",
"url": "https://helpx.adobe.com/security/products/acrobat/apsb26-26.html"
}
]
}
CERTFR-2025-AVI-0876
Vulnerability from certfr_avis - Published: 2025-10-15 - Updated: 2025-10-15
De multiples vulnérabilités ont été découvertes dans les produits Adobe. Certaines d'entre elles permettent à un attaquant de provoquer une élévation de privilèges, une injection de code indirecte à distance (XSS) et un contournement de la politique de sécurité.
Solutions
Se référer au bulletin de sécurité de l'éditeur pour l'obtention des correctifs (cf. section Documentation).
Impacted products
| Vendor | Product | Description | ||
|---|---|---|---|---|
| Adobe | Magento | Adobe Commerce versions 2.4.9-x antérieures à 2.4.9-alpha3 | ||
| Adobe | Magento | Magento Open Source versions 2.4.8-x antérieures à 2.4.8-p3 | ||
| Adobe | Magento | Magento Open Source versions 2.4.6-x antérieures à 2.4.6-p13 | ||
| Adobe | Commerce | Adobe Commerce versions 2.4.7-x antérieures à 2.4.7-p8 | ||
| Adobe | Commerce | Adobe Commerce versions 2.4.5-x antérieures à 2.4.5-p15 | ||
| Adobe | Commerce | Adobe Commerce B2B versions 1.5.2-x antérieures à 1.5.2-p3 | ||
| Adobe | Commerce | Adobe Commerce versions 2.4.6-x antérieures à 2.4.6-p13 | ||
| Adobe | Commerce | Adobe Commerce B2B versions 1.5.3-x antérieures à 1.5.3-alpha3 | ||
| Adobe | Commerce | Adobe Commerce B2B versions 1.3.3-x antérieures à 1.3.3-p16 | ||
| Adobe | Commerce | Adobe Commerce versions 2.4.9-x antérieures à 2.4.9-alpha3 | ||
| Adobe | Commerce | Adobe Commerce versions antérieures à 2.4.4-p16 | ||
| Adobe | Commerce | Adobe Commerce versions 2.4.8-x antérieures à 2.4.8-p3 | ||
| Adobe | Magento | Magento Open Source versions 2.4.7-x antérieures à 2.4.7-p8 | ||
| Adobe | Commerce | Adobe Commerce B2B versions 1.4.2-x antérieures à 1.4.2-p8 | ||
| Adobe | Commerce | Adobe Commerce B2B versions 1.3.4-x antérieures à 1.3.4-p13 | ||
| Adobe | Magento | Adobe Commerce versions antérieures à 2.4.5-p15 |
References
| Title | Publication Time | Tags | |||
|---|---|---|---|---|---|
|
|||||
{
"$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
"affected_systems": [
{
"description": "Adobe Commerce versions 2.4.9-x ant\u00e9rieures \u00e0 2.4.9-alpha3",
"product": {
"name": "Magento",
"vendor": {
"name": "Adobe",
"scada": false
}
}
},
{
"description": "Magento Open Source versions 2.4.8-x ant\u00e9rieures \u00e0 2.4.8-p3",
"product": {
"name": "Magento",
"vendor": {
"name": "Adobe",
"scada": false
}
}
},
{
"description": "Magento Open Source versions 2.4.6-x ant\u00e9rieures \u00e0 2.4.6-p13",
"product": {
"name": "Magento",
"vendor": {
"name": "Adobe",
"scada": false
}
}
},
{
"description": "Adobe Commerce versions 2.4.7-x ant\u00e9rieures \u00e0 2.4.7-p8",
"product": {
"name": "Commerce",
"vendor": {
"name": "Adobe",
"scada": false
}
}
},
{
"description": "Adobe Commerce versions 2.4.5-x ant\u00e9rieures \u00e0 2.4.5-p15",
"product": {
"name": "Commerce",
"vendor": {
"name": "Adobe",
"scada": false
}
}
},
{
"description": "Adobe Commerce B2B versions 1.5.2-x ant\u00e9rieures \u00e0 1.5.2-p3",
"product": {
"name": "Commerce",
"vendor": {
"name": "Adobe",
"scada": false
}
}
},
{
"description": "Adobe Commerce versions 2.4.6-x ant\u00e9rieures \u00e0 2.4.6-p13",
"product": {
"name": "Commerce",
"vendor": {
"name": "Adobe",
"scada": false
}
}
},
{
"description": "Adobe Commerce B2B versions 1.5.3-x ant\u00e9rieures \u00e0 1.5.3-alpha3",
"product": {
"name": "Commerce",
"vendor": {
"name": "Adobe",
"scada": false
}
}
},
{
"description": "Adobe Commerce B2B versions 1.3.3-x ant\u00e9rieures \u00e0 1.3.3-p16",
"product": {
"name": "Commerce",
"vendor": {
"name": "Adobe",
"scada": false
}
}
},
{
"description": "Adobe Commerce versions 2.4.9-x ant\u00e9rieures \u00e0 2.4.9-alpha3",
"product": {
"name": "Commerce",
"vendor": {
"name": "Adobe",
"scada": false
}
}
},
{
"description": "Adobe Commerce versions ant\u00e9rieures \u00e0 2.4.4-p16",
"product": {
"name": "Commerce",
"vendor": {
"name": "Adobe",
"scada": false
}
}
},
{
"description": "Adobe Commerce versions 2.4.8-x ant\u00e9rieures \u00e0 2.4.8-p3",
"product": {
"name": "Commerce",
"vendor": {
"name": "Adobe",
"scada": false
}
}
},
{
"description": "Magento Open Source versions 2.4.7-x ant\u00e9rieures \u00e0 2.4.7-p8",
"product": {
"name": "Magento",
"vendor": {
"name": "Adobe",
"scada": false
}
}
},
{
"description": "Adobe Commerce B2B versions 1.4.2-x ant\u00e9rieures \u00e0 1.4.2-p8",
"product": {
"name": "Commerce",
"vendor": {
"name": "Adobe",
"scada": false
}
}
},
{
"description": "Adobe Commerce B2B versions 1.3.4-x ant\u00e9rieures \u00e0 1.3.4-p13",
"product": {
"name": "Commerce",
"vendor": {
"name": "Adobe",
"scada": false
}
}
},
{
"description": "Adobe Commerce versions ant\u00e9rieures \u00e0 2.4.5-p15",
"product": {
"name": "Magento",
"vendor": {
"name": "Adobe",
"scada": false
}
}
}
],
"affected_systems_content": "",
"content": "## Solutions\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des correctifs (cf. section Documentation).",
"cves": [
{
"name": "CVE-2025-54267",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-54267"
},
{
"name": "CVE-2025-54266",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-54266"
},
{
"name": "CVE-2025-54265",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-54265"
},
{
"name": "CVE-2025-54263",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-54263"
},
{
"name": "CVE-2025-54264",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-54264"
}
],
"initial_release_date": "2025-10-15T00:00:00",
"last_revision_date": "2025-10-15T00:00:00",
"links": [],
"reference": "CERTFR-2025-AVI-0876",
"revisions": [
{
"description": "Version initiale",
"revision_date": "2025-10-15T00:00:00.000000"
}
],
"risks": [
{
"description": "Injection de code indirecte \u00e0 distance (XSS)"
},
{
"description": "Contournement de la politique de s\u00e9curit\u00e9"
},
{
"description": "\u00c9l\u00e9vation de privil\u00e8ges"
}
],
"summary": "De multiples vuln\u00e9rabilit\u00e9s ont \u00e9t\u00e9 d\u00e9couvertes dans les produits Adobe. Certaines d\u0027entre elles permettent \u00e0 un attaquant de provoquer une \u00e9l\u00e9vation de privil\u00e8ges, une injection de code indirecte \u00e0 distance (XSS) et un contournement de la politique de s\u00e9curit\u00e9.",
"title": "Multiples vuln\u00e9rabilit\u00e9s dans les produits Adobe",
"vendor_advisories": [
{
"published_at": "2025-10-14",
"title": "Bulletin de s\u00e9curit\u00e9 Adobe APSB25-94",
"url": "https://helpx.adobe.com/security/products/magento/apsb25-94.html"
}
]
}
CERTFR-2025-AVI-0767
Vulnerability from certfr_avis - Published: 2025-09-09 - Updated: 2025-09-09
Une vulnérabilité a été découverte dans les produits Adobe. Elle permet à un attaquant de provoquer un contournement de la politique de sécurité.
Solutions
Se référer au bulletin de sécurité de l'éditeur pour l'obtention des correctifs (cf. section Documentation).
Impacted products
| Vendor | Product | Description | ||
|---|---|---|---|---|
| Adobe | Commerce | Commerce B2B versions 1.3.x à 1.5.x sans le correctif de sécurité VULN-32437-2-4-X-patch | ||
| Adobe | Commerce | Commerce versions 2.4.x sans le correctif de sécurité VULN-32437-2-4-X-patch | ||
| Adobe | Magento | Magento Open Source versions 2.4.5.x à 2.4.9.x sans le correctif de sécurité VULN-32437-2-4-X-patch |
References
| Title | Publication Time | Tags | |||
|---|---|---|---|---|---|
|
|||||
{
"$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
"affected_systems": [
{
"description": "Commerce B2B versions 1.3.x \u00e0 1.5.x sans le correctif de s\u00e9curit\u00e9 VULN-32437-2-4-X-patch",
"product": {
"name": "Commerce",
"vendor": {
"name": "Adobe",
"scada": false
}
}
},
{
"description": "Commerce versions 2.4.x sans le correctif de s\u00e9curit\u00e9 VULN-32437-2-4-X-patch",
"product": {
"name": "Commerce",
"vendor": {
"name": "Adobe",
"scada": false
}
}
},
{
"description": "Magento Open Source versions 2.4.5.x \u00e0 2.4.9.x sans le correctif de s\u00e9curit\u00e9 VULN-32437-2-4-X-patch",
"product": {
"name": "Magento",
"vendor": {
"name": "Adobe",
"scada": false
}
}
}
],
"affected_systems_content": "",
"content": "## Solutions\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des correctifs (cf. section Documentation).",
"cves": [
{
"name": "CVE-2025-54236",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-54236"
}
],
"initial_release_date": "2025-09-09T00:00:00",
"last_revision_date": "2025-09-09T00:00:00",
"links": [],
"reference": "CERTFR-2025-AVI-0767",
"revisions": [
{
"description": "Version initiale",
"revision_date": "2025-09-09T00:00:00.000000"
}
],
"risks": [
{
"description": "Contournement de la politique de s\u00e9curit\u00e9"
}
],
"summary": "Une vuln\u00e9rabilit\u00e9 a \u00e9t\u00e9 d\u00e9couverte dans les produits Adobe. Elle permet \u00e0 un attaquant de provoquer un contournement de la politique de s\u00e9curit\u00e9.",
"title": "Vuln\u00e9rabilit\u00e9 dans les produits Adobe",
"vendor_advisories": [
{
"published_at": "2025-09-09",
"title": "Bulletin de s\u00e9curit\u00e9 Adobe APSB25-88",
"url": "https://helpx.adobe.com/security/products/magento/apsb25-88.html"
}
]
}
CERTFR-2025-AVI-0678
Vulnerability from certfr_avis - Published: 2025-08-13 - Updated: 2025-08-13
De multiples vulnérabilités ont été découvertes dans les produits Adobe. Certaines d'entre elles permettent à un attaquant de provoquer une élévation de privilèges, un déni de service à distance et une atteinte à la confidentialité des données.
Solutions
Se référer au bulletin de sécurité de l'éditeur pour l'obtention des correctifs (cf. section Documentation).
Impacted products
| Vendor | Product | Description | ||
|---|---|---|---|---|
| Adobe | Magento | Magento Open Source versions antérieures à 2.4.9-alpha2, 2.4.8-p2, 2.4.7-p7, 2.4.6-p12 et 2.4.5-p14 | ||
| Adobe | Commerce | Adobe Commerce B2B versions antérieures à 1.5.3-alpha2, 1.5.2-p2, 1.4.2-p7, 1.3.4-p14 et 1.3.3-p15 | ||
| Adobe | Commerce | Adobe Commerce versions antérieures à 2.4.9-alpha2, 2.4.8-p2, 2.4.7-p7, 2.4.6-p12, 2.4.5-p14 et 2.4.4-p15 |
References
| Title | Publication Time | Tags | |||
|---|---|---|---|---|---|
|
|||||
{
"$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
"affected_systems": [
{
"description": "Magento Open Source versions ant\u00e9rieures \u00e0 2.4.9-alpha2, 2.4.8-p2, 2.4.7-p7, 2.4.6-p12 et 2.4.5-p14",
"product": {
"name": "Magento",
"vendor": {
"name": "Adobe",
"scada": false
}
}
},
{
"description": "Adobe Commerce B2B versions ant\u00e9rieures \u00e0 1.5.3-alpha2, 1.5.2-p2, 1.4.2-p7, 1.3.4-p14 et 1.3.3-p15",
"product": {
"name": "Commerce",
"vendor": {
"name": "Adobe",
"scada": false
}
}
},
{
"description": "Adobe Commerce versions ant\u00e9rieures \u00e0 2.4.9-alpha2, 2.4.8-p2, 2.4.7-p7, 2.4.6-p12, 2.4.5-p14 et 2.4.4-p15",
"product": {
"name": "Commerce",
"vendor": {
"name": "Adobe",
"scada": false
}
}
}
],
"affected_systems_content": "",
"content": "## Solutions\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des correctifs (cf. section Documentation).",
"cves": [
{
"name": "CVE-2025-49554",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-49554"
},
{
"name": "CVE-2025-49555",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-49555"
},
{
"name": "CVE-2025-49557",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-49557"
},
{
"name": "CVE-2025-49556",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-49556"
},
{
"name": "CVE-2025-49559",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-49559"
},
{
"name": "CVE-2025-49558",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-49558"
}
],
"initial_release_date": "2025-08-13T00:00:00",
"last_revision_date": "2025-08-13T00:00:00",
"links": [],
"reference": "CERTFR-2025-AVI-0678",
"revisions": [
{
"description": "Version initiale",
"revision_date": "2025-08-13T00:00:00.000000"
}
],
"risks": [
{
"description": "D\u00e9ni de service \u00e0 distance"
},
{
"description": "Injection de code indirecte \u00e0 distance (XSS)"
},
{
"description": "Injection de requ\u00eates ill\u00e9gitimes par rebond (CSRF)"
},
{
"description": "Contournement de la politique de s\u00e9curit\u00e9"
},
{
"description": "Atteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es"
},
{
"description": "\u00c9l\u00e9vation de privil\u00e8ges"
}
],
"summary": "De multiples vuln\u00e9rabilit\u00e9s ont \u00e9t\u00e9 d\u00e9couvertes dans les produits Adobe. Certaines d\u0027entre elles permettent \u00e0 un attaquant de provoquer une \u00e9l\u00e9vation de privil\u00e8ges, un d\u00e9ni de service \u00e0 distance et une atteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es.",
"title": "Multiples vuln\u00e9rabilit\u00e9s dans les produits Adobe",
"vendor_advisories": [
{
"published_at": "2025-08-12",
"title": "Bulletin de s\u00e9curit\u00e9 Adobe APSB25-71",
"url": "https://helpx.adobe.com/security/products/magento/apsb25-71.html"
}
]
}
CERTFR-2025-AVI-0495
Vulnerability from certfr_avis - Published: 2025-06-11 - Updated: 2025-06-11
De multiples vulnérabilités ont été découvertes dans les produits Adobe. Certaines d'entre elles permettent à un attaquant de provoquer une exécution de code arbitraire, une élévation de privilèges et un déni de service à distance.
Solutions
Se référer au bulletin de sécurité de l'éditeur pour l'obtention des correctifs (cf. section Documentation).
Impacted products
| Vendor | Product | Description | ||
|---|---|---|---|---|
| Adobe | Acrobat | Acrobat 2024 versions antérieures à 24.001.30254 pour Windows et macOS | ||
| Adobe | Magento | Magento Open Source sans le dernier correctif de sécurité pour la vulnérabilité CVE-2025-47110 | ||
| Adobe | Magento | Magento Open Source versions antérieures à 2.4.9-alpha1 | ||
| Adobe | Acrobat | Acrobat DC versions antérieures à 25.001.20531 pour Windows | ||
| Adobe | Commerce | Commerce versions 2.4.5-x antérieures à 2.4.5-p13 | ||
| Adobe | Magento | Magento Open Source versions 2.4.5-x antérieures à 2.4.5-p13 | ||
| Adobe | Commerce | Commerce B2B versions 1.4.2-x antérieures à 1.4.2-p6 | ||
| Adobe | Commerce | Commerce B2B versions 1.5.2-x antérieures à 1.5.2-p1 | ||
| Adobe | Commerce | Commerce versions 2.4.8-x antérieures à 2.4.8-p1 | ||
| Adobe | Commerce | Commerce B2B versions antérieures à 1.5.3-alpha1 | ||
| Adobe | Acrobat Reader | Acrobat Reader DC versions antérieures à 25.001.20531 pour Windows | ||
| Adobe | Magento | Magento Open Source versions 2.4.6-x antérieures à 2.4.6-p11 | ||
| Adobe | Commerce | Commerce B2B versions 1.3.4-x antérieures à 1.3.4-p13 | ||
| Adobe | Acrobat | Acrobat DC versions antérieures à 25.001.20529 macOS | ||
| Adobe | Commerce | Commerce versions antérieures à 2.4.9-alpha1 | ||
| Adobe | Commerce | Commerce versions 2.4.7-x antérieures à 2.4.7-p6 | ||
| Adobe | Acrobat | Acrobat 2020 versions antérieures à 20.005.30774 pour Windows et macOS | ||
| Adobe | Acrobat Reader | Acrobat Reader DC versions antérieures à 25.001.20529 macOS | ||
| Adobe | Magento | Magento Open Source versions 2.4.8-x antérieures à 2.4.8-p1 | ||
| Adobe | Commerce | Commerce sans le dernier correctif de sécurité pour la vulnérabilité CVE-2025-47110 | ||
| Adobe | Commerce | Commerce versions 2.4.6-x antérieures à 2.4.6-p11 | ||
| Adobe | Acrobat Reader | Acrobat Reader 2020 versions antérieures à 20.005.30774 pour Windows et macOS | ||
| Adobe | Commerce | Commerce B2B versions 1.3.3-x antérieures à 1.3.3-p14 | ||
| Adobe | Magento | Magento Open Source versions 2.4.7-x antérieures à 2.4.7-p6 | ||
| Adobe | Commerce | Commerce versions 2.4.4-x antérieures à 2.4.4-p14 |
References
| Title | Publication Time | Tags | ||||||
|---|---|---|---|---|---|---|---|---|
|
||||||||
{
"$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
"affected_systems": [
{
"description": "Acrobat 2024 versions ant\u00e9rieures \u00e0 24.001.30254 pour Windows et macOS",
"product": {
"name": "Acrobat",
"vendor": {
"name": "Adobe",
"scada": false
}
}
},
{
"description": "Magento Open Source sans le dernier correctif de s\u00e9curit\u00e9 pour la vuln\u00e9rabilit\u00e9 CVE-2025-47110",
"product": {
"name": "Magento",
"vendor": {
"name": "Adobe",
"scada": false
}
}
},
{
"description": "Magento Open Source versions ant\u00e9rieures \u00e0 2.4.9-alpha1",
"product": {
"name": "Magento",
"vendor": {
"name": "Adobe",
"scada": false
}
}
},
{
"description": "Acrobat DC versions ant\u00e9rieures \u00e0 25.001.20531 pour Windows",
"product": {
"name": "Acrobat",
"vendor": {
"name": "Adobe",
"scada": false
}
}
},
{
"description": "Commerce versions 2.4.5-x ant\u00e9rieures \u00e0 2.4.5-p13",
"product": {
"name": "Commerce",
"vendor": {
"name": "Adobe",
"scada": false
}
}
},
{
"description": "Magento Open Source versions 2.4.5-x ant\u00e9rieures \u00e0 2.4.5-p13",
"product": {
"name": "Magento",
"vendor": {
"name": "Adobe",
"scada": false
}
}
},
{
"description": "Commerce B2B versions 1.4.2-x ant\u00e9rieures \u00e0 1.4.2-p6",
"product": {
"name": "Commerce",
"vendor": {
"name": "Adobe",
"scada": false
}
}
},
{
"description": "Commerce B2B versions 1.5.2-x ant\u00e9rieures \u00e0 1.5.2-p1",
"product": {
"name": "Commerce",
"vendor": {
"name": "Adobe",
"scada": false
}
}
},
{
"description": "Commerce versions 2.4.8-x ant\u00e9rieures \u00e0 2.4.8-p1",
"product": {
"name": "Commerce",
"vendor": {
"name": "Adobe",
"scada": false
}
}
},
{
"description": "Commerce B2B versions ant\u00e9rieures \u00e0 1.5.3-alpha1",
"product": {
"name": "Commerce",
"vendor": {
"name": "Adobe",
"scada": false
}
}
},
{
"description": "Acrobat Reader DC versions ant\u00e9rieures \u00e0 25.001.20531 pour Windows",
"product": {
"name": "Acrobat Reader",
"vendor": {
"name": "Adobe",
"scada": false
}
}
},
{
"description": "Magento Open Source versions 2.4.6-x ant\u00e9rieures \u00e0 2.4.6-p11",
"product": {
"name": "Magento",
"vendor": {
"name": "Adobe",
"scada": false
}
}
},
{
"description": "Commerce B2B versions 1.3.4-x ant\u00e9rieures \u00e0 1.3.4-p13",
"product": {
"name": "Commerce",
"vendor": {
"name": "Adobe",
"scada": false
}
}
},
{
"description": "Acrobat DC versions ant\u00e9rieures \u00e0 25.001.20529 macOS",
"product": {
"name": "Acrobat",
"vendor": {
"name": "Adobe",
"scada": false
}
}
},
{
"description": "Commerce versions ant\u00e9rieures \u00e0 2.4.9-alpha1",
"product": {
"name": "Commerce",
"vendor": {
"name": "Adobe",
"scada": false
}
}
},
{
"description": "Commerce versions 2.4.7-x ant\u00e9rieures \u00e0 2.4.7-p6",
"product": {
"name": "Commerce",
"vendor": {
"name": "Adobe",
"scada": false
}
}
},
{
"description": "Acrobat 2020 versions ant\u00e9rieures \u00e0 20.005.30774 pour Windows et macOS",
"product": {
"name": "Acrobat",
"vendor": {
"name": "Adobe",
"scada": false
}
}
},
{
"description": "Acrobat Reader DC versions ant\u00e9rieures \u00e0 25.001.20529 macOS",
"product": {
"name": "Acrobat Reader",
"vendor": {
"name": "Adobe",
"scada": false
}
}
},
{
"description": "Magento Open Source versions 2.4.8-x ant\u00e9rieures \u00e0 2.4.8-p1",
"product": {
"name": "Magento",
"vendor": {
"name": "Adobe",
"scada": false
}
}
},
{
"description": "Commerce sans le dernier correctif de s\u00e9curit\u00e9 pour la vuln\u00e9rabilit\u00e9 CVE-2025-47110",
"product": {
"name": "Commerce",
"vendor": {
"name": "Adobe",
"scada": false
}
}
},
{
"description": "Commerce versions 2.4.6-x ant\u00e9rieures \u00e0 2.4.6-p11",
"product": {
"name": "Commerce",
"vendor": {
"name": "Adobe",
"scada": false
}
}
},
{
"description": "Acrobat Reader 2020 versions ant\u00e9rieures \u00e0 20.005.30774 pour Windows et macOS",
"product": {
"name": "Acrobat Reader",
"vendor": {
"name": "Adobe",
"scada": false
}
}
},
{
"description": "Commerce B2B versions 1.3.3-x ant\u00e9rieures \u00e0 1.3.3-p14",
"product": {
"name": "Commerce",
"vendor": {
"name": "Adobe",
"scada": false
}
}
},
{
"description": "Magento Open Source versions 2.4.7-x ant\u00e9rieures \u00e0 2.4.7-p6",
"product": {
"name": "Magento",
"vendor": {
"name": "Adobe",
"scada": false
}
}
},
{
"description": "Commerce versions 2.4.4-x ant\u00e9rieures \u00e0 2.4.4-p14",
"product": {
"name": "Commerce",
"vendor": {
"name": "Adobe",
"scada": false
}
}
}
],
"affected_systems_content": "",
"content": "## Solutions\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des correctifs (cf. section Documentation).",
"cves": [
{
"name": "CVE-2025-43577",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-43577"
},
{
"name": "CVE-2025-43573",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-43573"
},
{
"name": "CVE-2025-43585",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-43585"
},
{
"name": "CVE-2025-43578",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-43578"
},
{
"name": "CVE-2025-43586",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-43586"
},
{
"name": "CVE-2025-27206",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-27206"
},
{
"name": "CVE-2025-43550",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-43550"
},
{
"name": "CVE-2025-27207",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-27207"
},
{
"name": "CVE-2025-43574",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-43574"
},
{
"name": "CVE-2025-43575",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-43575"
},
{
"name": "CVE-2025-47111",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-47111"
},
{
"name": "CVE-2025-43576",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-43576"
},
{
"name": "CVE-2025-43579",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-43579"
},
{
"name": "CVE-2025-47110",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-47110"
},
{
"name": "CVE-2025-47112",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-47112"
}
],
"initial_release_date": "2025-06-11T00:00:00",
"last_revision_date": "2025-06-11T00:00:00",
"links": [],
"reference": "CERTFR-2025-AVI-0495",
"revisions": [
{
"description": "Version initiale",
"revision_date": "2025-06-11T00:00:00.000000"
}
],
"risks": [
{
"description": "D\u00e9ni de service \u00e0 distance"
},
{
"description": "Injection de code indirecte \u00e0 distance (XSS)"
},
{
"description": "Atteinte \u00e0 l\u0027int\u00e9grit\u00e9 des donn\u00e9es"
},
{
"description": "Ex\u00e9cution de code arbitraire"
},
{
"description": "Contournement de la politique de s\u00e9curit\u00e9"
},
{
"description": "Atteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es"
},
{
"description": "\u00c9l\u00e9vation de privil\u00e8ges"
}
],
"summary": "De multiples vuln\u00e9rabilit\u00e9s ont \u00e9t\u00e9 d\u00e9couvertes dans les produits Adobe. Certaines d\u0027entre elles permettent \u00e0 un attaquant de provoquer une ex\u00e9cution de code arbitraire, une \u00e9l\u00e9vation de privil\u00e8ges et un d\u00e9ni de service \u00e0 distance.",
"title": "Multiples vuln\u00e9rabilit\u00e9s dans les produits Adobe",
"vendor_advisories": [
{
"published_at": "2025-06-10",
"title": "Bulletin de s\u00e9curit\u00e9 Adobe APSB25-50",
"url": "https://helpx.adobe.com/security/products/magento/apsb25-50.html"
},
{
"published_at": "2025-06-10",
"title": "Bulletin de s\u00e9curit\u00e9 Adobe APSB25-57",
"url": "https://helpx.adobe.com/security/products/acrobat/apsb25-57.html"
}
]
}
CERTFR-2025-AVI-0292
Vulnerability from certfr_avis - Published: 2025-04-09 - Updated: 2025-04-09
De multiples vulnérabilités ont été découvertes dans les produits Adobe. Certaines d'entre elles permettent à un attaquant de provoquer une exécution de code arbitraire à distance, une élévation de privilèges et un déni de service à distance.
Solutions
Se référer au bulletin de sécurité de l'éditeur pour l'obtention des correctifs (cf. section Documentation).
Impacted products
| Vendor | Product | Description | ||
|---|---|---|---|---|
| Adobe | Commerce | Commerce B2B versions 1.5.x antérieures à 1.5.2 | ||
| Adobe | Magento | Magento Open Source versions 2.4.7.x antérieures à 2.4.7-p5 | ||
| Adobe | Magento | Magento Open Source versions 2.4.6.x antérieures à 2.4.6-p10 | ||
| Adobe | Commerce | Commerce B2B versions 1.3.5.x antérieures à 1.3.5-p10 | ||
| Adobe | Magento | Magento Open Source versions 2.4.5.x antérieures à 2.4.5-p12 | ||
| Adobe | Commerce | Commerce versions 2.4.7.x antérieures à 2.4.7-p5 | ||
| Adobe | ColdFusion | ColdFusion 2021 versions antérieures à Update 19 | ||
| Adobe | Commerce | Commerce B2B versions 1.3.4.x antérieures à 1.3.4-p12 | ||
| Adobe | Magento | Magento Open Source versions 2.4.4.x antérieures à 2.4.4-p13 | ||
| Adobe | Commerce | Commerce B2B versions 1.3.3.x antérieures à 1.3.3-p13 | ||
| Adobe | ColdFusion | ColdFusion 2023 versions antérieures à Update 13 | ||
| Adobe | Magento | Magento Open Source versions 2.4.8.x antérieures à 2.4.8 | ||
| Adobe | Commerce | Commerce versions 2.4.5.x antérieures à 2.4.5-p12 | ||
| Adobe | Commerce | Commerce versions 2.4.8.x antérieures à 2.4.8 | ||
| Adobe | Commerce | Commerce B2B versions 1.4.x antérieures à 1.4.2-p5 | ||
| Adobe | Commerce | Commerce versions 2.4.6.x antérieures à 2.4.6-p10 | ||
| Adobe | Commerce | Commerce versions 2.4.4.x antérieures à 2.4.4-p13 | ||
| Adobe | ColdFusion | ColdFusion 2025 versions antérieures à Update 1 |
References
| Title | Publication Time | Tags | ||||||
|---|---|---|---|---|---|---|---|---|
|
||||||||
{
"$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
"affected_systems": [
{
"description": "Commerce B2B versions 1.5.x ant\u00e9rieures \u00e0 1.5.2",
"product": {
"name": "Commerce",
"vendor": {
"name": "Adobe",
"scada": false
}
}
},
{
"description": "Magento Open Source versions 2.4.7.x ant\u00e9rieures \u00e0 2.4.7-p5",
"product": {
"name": "Magento",
"vendor": {
"name": "Adobe",
"scada": false
}
}
},
{
"description": "Magento Open Source versions 2.4.6.x ant\u00e9rieures \u00e0 2.4.6-p10",
"product": {
"name": "Magento",
"vendor": {
"name": "Adobe",
"scada": false
}
}
},
{
"description": "Commerce B2B versions 1.3.5.x ant\u00e9rieures \u00e0 1.3.5-p10",
"product": {
"name": "Commerce",
"vendor": {
"name": "Adobe",
"scada": false
}
}
},
{
"description": "Magento Open Source versions 2.4.5.x ant\u00e9rieures \u00e0 2.4.5-p12",
"product": {
"name": "Magento",
"vendor": {
"name": "Adobe",
"scada": false
}
}
},
{
"description": "Commerce versions 2.4.7.x ant\u00e9rieures \u00e0 2.4.7-p5",
"product": {
"name": "Commerce",
"vendor": {
"name": "Adobe",
"scada": false
}
}
},
{
"description": "ColdFusion 2021 versions ant\u00e9rieures \u00e0 Update 19",
"product": {
"name": "ColdFusion",
"vendor": {
"name": "Adobe",
"scada": false
}
}
},
{
"description": "Commerce B2B versions 1.3.4.x ant\u00e9rieures \u00e0 1.3.4-p12",
"product": {
"name": "Commerce",
"vendor": {
"name": "Adobe",
"scada": false
}
}
},
{
"description": "Magento Open Source versions 2.4.4.x ant\u00e9rieures \u00e0 2.4.4-p13",
"product": {
"name": "Magento",
"vendor": {
"name": "Adobe",
"scada": false
}
}
},
{
"description": "Commerce B2B versions 1.3.3.x ant\u00e9rieures \u00e0 1.3.3-p13",
"product": {
"name": "Commerce",
"vendor": {
"name": "Adobe",
"scada": false
}
}
},
{
"description": "ColdFusion 2023 versions ant\u00e9rieures \u00e0 Update 13",
"product": {
"name": "ColdFusion",
"vendor": {
"name": "Adobe",
"scada": false
}
}
},
{
"description": "Magento Open Source versions 2.4.8.x ant\u00e9rieures \u00e0 2.4.8",
"product": {
"name": "Magento",
"vendor": {
"name": "Adobe",
"scada": false
}
}
},
{
"description": "Commerce versions 2.4.5.x ant\u00e9rieures \u00e0 2.4.5-p12",
"product": {
"name": "Commerce",
"vendor": {
"name": "Adobe",
"scada": false
}
}
},
{
"description": "Commerce versions 2.4.8.x ant\u00e9rieures \u00e0 2.4.8",
"product": {
"name": "Commerce",
"vendor": {
"name": "Adobe",
"scada": false
}
}
},
{
"description": "Commerce B2B versions 1.4.x ant\u00e9rieures \u00e0 1.4.2-p5",
"product": {
"name": "Commerce",
"vendor": {
"name": "Adobe",
"scada": false
}
}
},
{
"description": "Commerce versions 2.4.6.x ant\u00e9rieures \u00e0 2.4.6-p10",
"product": {
"name": "Commerce",
"vendor": {
"name": "Adobe",
"scada": false
}
}
},
{
"description": "Commerce versions 2.4.4.x ant\u00e9rieures \u00e0 2.4.4-p13",
"product": {
"name": "Commerce",
"vendor": {
"name": "Adobe",
"scada": false
}
}
},
{
"description": "ColdFusion 2025 versions ant\u00e9rieures \u00e0 Update 1",
"product": {
"name": "ColdFusion",
"vendor": {
"name": "Adobe",
"scada": false
}
}
}
],
"affected_systems_content": "",
"content": "## Solutions\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des correctifs (cf. section Documentation).",
"cves": [
{
"name": "CVE-2025-30285",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-30285"
},
{
"name": "CVE-2025-30292",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-30292"
},
{
"name": "CVE-2025-24446",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-24446"
},
{
"name": "CVE-2025-30289",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-30289"
},
{
"name": "CVE-2025-30282",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-30282"
},
{
"name": "CVE-2025-24447",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-24447"
},
{
"name": "CVE-2025-30284",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-30284"
},
{
"name": "CVE-2025-30288",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-30288"
},
{
"name": "CVE-2025-30287",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-30287"
},
{
"name": "CVE-2025-27192",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-27192"
},
{
"name": "CVE-2025-30294",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-30294"
},
{
"name": "CVE-2025-30290",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-30290"
},
{
"name": "CVE-2025-30293",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-30293"
},
{
"name": "CVE-2025-27190",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-27190"
},
{
"name": "CVE-2025-27189",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-27189"
},
{
"name": "CVE-2025-30286",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-30286"
},
{
"name": "CVE-2025-30291",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-30291"
},
{
"name": "CVE-2025-27188",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-27188"
},
{
"name": "CVE-2025-27191",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-27191"
},
{
"name": "CVE-2025-30281",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-30281"
}
],
"initial_release_date": "2025-04-09T00:00:00",
"last_revision_date": "2025-04-09T00:00:00",
"links": [],
"reference": "CERTFR-2025-AVI-0292",
"revisions": [
{
"description": "Version initiale",
"revision_date": "2025-04-09T00:00:00.000000"
}
],
"risks": [
{
"description": "D\u00e9ni de service \u00e0 distance"
},
{
"description": "Injection de code indirecte \u00e0 distance (XSS)"
},
{
"description": "Injection de requ\u00eates ill\u00e9gitimes par rebond (CSRF)"
},
{
"description": "Ex\u00e9cution de code arbitraire \u00e0 distance"
},
{
"description": "Contournement de la politique de s\u00e9curit\u00e9"
},
{
"description": "Atteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es"
},
{
"description": "\u00c9l\u00e9vation de privil\u00e8ges"
}
],
"summary": "De multiples vuln\u00e9rabilit\u00e9s ont \u00e9t\u00e9 d\u00e9couvertes dans les produits Adobe. Certaines d\u0027entre elles permettent \u00e0 un attaquant de provoquer une ex\u00e9cution de code arbitraire \u00e0 distance, une \u00e9l\u00e9vation de privil\u00e8ges et un d\u00e9ni de service \u00e0 distance.",
"title": "Multiples vuln\u00e9rabilit\u00e9s dans les produits Adobe",
"vendor_advisories": [
{
"published_at": "2025-04-08",
"title": "Bulletin de s\u00e9curit\u00e9 Adobe APSB25-26",
"url": "https://helpx.adobe.com/security/products/magento/apsb25-26.html"
},
{
"published_at": "2025-04-08",
"title": "Bulletin de s\u00e9curit\u00e9 Adobe APSB25-15",
"url": "https://helpx.adobe.com/security/products/coldfusion/apsb25-15.html"
}
]
}
CERTFR-2025-AVI-0122
Vulnerability from certfr_avis - Published: 2025-02-12 - Updated: 2025-02-12
De multiples vulnérabilités ont été découvertes dans les produits Adobe. Certaines d'entre elles permettent à un attaquant de provoquer une élévation de privilèges, une injection de code indirecte à distance (XSS) et un contournement de la politique de sécurité.
Solutions
Se référer au bulletin de sécurité de l'éditeur pour l'obtention des correctifs (cf. section Documentation).
L'éditeur indique que la vulnérabilité CVE-2025-24434 fait l'objet d'un correctif spécifique pour Commerce et Magento.
Impacted products
| Vendor | Product | Description | ||
|---|---|---|---|---|
| Adobe | Commerce | Commerce B2B versions 1.5.x antérieures à 1.5.1 | ||
| Adobe | Magento | Magento versions 2.4.6-px antérieures à 2.4.6-p9 | ||
| Adobe | Commerce | Commerce versions 2.4.5-px antérieures à 2.4.5-p11 | ||
| Adobe | Commerce | Commerce B2B versions 1.4.2-px antérieures à 1.4.2-p4 | ||
| Adobe | Commerce | Commerce B2B versions 1.3.5-px antérieures à 1.3.5-p9 | ||
| Adobe | Magento | Magento versions 2.4.5-px antérieures à 2.4.5-p11 | ||
| Adobe | Magento | Magento versions 2.4.4-px antérieures à 2.4.4-p12 | ||
| Adobe | Commerce | Commerce versions 2.4.4-px antérieures à 2.4.7-p4 | ||
| Adobe | Commerce | Commerce versions 2.4.8-x antérieures à 2.4.8-beta2 | ||
| Adobe | Commerce | Commerce versions 2.4.4-px antérieures à 2.4.4-p12 | ||
| Adobe | Commerce | Commerce B2B versions 1.3.3-px antérieures à 1.3.3-p12 | ||
| Adobe | Magento | Magento versions 2.4.8-x antérieures à 2.4.8-beta2 | ||
| Adobe | Magento | Magento versions 2.4.4-px antérieures à 2.4.7-p4 | ||
| Adobe | Commerce | Commerce B2B versions 1.3.4-px antérieures à 1.3.4-p11 | ||
| Adobe | Commerce | Commerce versions 2.4.6-px antérieures à 2.4.6-p9 |
References
| Title | Publication Time | Tags | |||
|---|---|---|---|---|---|
|
|||||
{
"$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
"affected_systems": [
{
"description": "Commerce B2B versions 1.5.x ant\u00e9rieures \u00e0 1.5.1",
"product": {
"name": "Commerce",
"vendor": {
"name": "Adobe",
"scada": false
}
}
},
{
"description": "Magento versions 2.4.6-px ant\u00e9rieures \u00e0 2.4.6-p9",
"product": {
"name": "Magento",
"vendor": {
"name": "Adobe",
"scada": false
}
}
},
{
"description": "Commerce versions 2.4.5-px ant\u00e9rieures \u00e0 2.4.5-p11",
"product": {
"name": "Commerce",
"vendor": {
"name": "Adobe",
"scada": false
}
}
},
{
"description": "Commerce B2B versions 1.4.2-px ant\u00e9rieures \u00e0 1.4.2-p4",
"product": {
"name": "Commerce",
"vendor": {
"name": "Adobe",
"scada": false
}
}
},
{
"description": "Commerce B2B versions 1.3.5-px ant\u00e9rieures \u00e0 1.3.5-p9",
"product": {
"name": "Commerce",
"vendor": {
"name": "Adobe",
"scada": false
}
}
},
{
"description": "Magento versions 2.4.5-px ant\u00e9rieures \u00e0 2.4.5-p11",
"product": {
"name": "Magento",
"vendor": {
"name": "Adobe",
"scada": false
}
}
},
{
"description": "Magento versions 2.4.4-px ant\u00e9rieures \u00e0 2.4.4-p12",
"product": {
"name": "Magento",
"vendor": {
"name": "Adobe",
"scada": false
}
}
},
{
"description": "Commerce versions 2.4.4-px ant\u00e9rieures \u00e0 2.4.7-p4",
"product": {
"name": "Commerce",
"vendor": {
"name": "Adobe",
"scada": false
}
}
},
{
"description": "Commerce versions 2.4.8-x ant\u00e9rieures \u00e0 2.4.8-beta2",
"product": {
"name": "Commerce",
"vendor": {
"name": "Adobe",
"scada": false
}
}
},
{
"description": "Commerce versions 2.4.4-px ant\u00e9rieures \u00e0 2.4.4-p12",
"product": {
"name": "Commerce",
"vendor": {
"name": "Adobe",
"scada": false
}
}
},
{
"description": "Commerce B2B versions 1.3.3-px ant\u00e9rieures \u00e0 1.3.3-p12",
"product": {
"name": "Commerce",
"vendor": {
"name": "Adobe",
"scada": false
}
}
},
{
"description": "Magento versions 2.4.8-x ant\u00e9rieures \u00e0 2.4.8-beta2",
"product": {
"name": "Magento",
"vendor": {
"name": "Adobe",
"scada": false
}
}
},
{
"description": "Magento versions 2.4.4-px ant\u00e9rieures \u00e0 2.4.7-p4",
"product": {
"name": "Magento",
"vendor": {
"name": "Adobe",
"scada": false
}
}
},
{
"description": "Commerce B2B versions 1.3.4-px ant\u00e9rieures \u00e0 1.3.4-p11",
"product": {
"name": "Commerce",
"vendor": {
"name": "Adobe",
"scada": false
}
}
},
{
"description": "Commerce versions 2.4.6-px ant\u00e9rieures \u00e0 2.4.6-p9",
"product": {
"name": "Commerce",
"vendor": {
"name": "Adobe",
"scada": false
}
}
}
],
"affected_systems_content": "L\u0027\u00e9diteur indique que la vuln\u00e9rabilit\u00e9 CVE-2025-24434 fait l\u0027objet d\u0027un correctif sp\u00e9cifique pour Commerce et Magento.",
"content": "## Solutions\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des correctifs (cf. section Documentation).",
"cves": [
{
"name": "CVE-2025-24416",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-24416"
},
{
"name": "CVE-2025-24425",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-24425"
},
{
"name": "CVE-2025-24410",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-24410"
},
{
"name": "CVE-2025-24413",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-24413"
},
{
"name": "CVE-2025-24409",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-24409"
},
{
"name": "CVE-2025-24427",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-24427"
},
{
"name": "CVE-2025-24435",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-24435"
},
{
"name": "CVE-2025-24419",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-24419"
},
{
"name": "CVE-2025-24415",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-24415"
},
{
"name": "CVE-2025-24438",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-24438"
},
{
"name": "CVE-2025-24432",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-24432"
},
{
"name": "CVE-2025-24412",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-24412"
},
{
"name": "CVE-2025-24417",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-24417"
},
{
"name": "CVE-2025-24430",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-24430"
},
{
"name": "CVE-2025-24423",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-24423"
},
{
"name": "CVE-2025-24426",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-24426"
},
{
"name": "CVE-2025-24407",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-24407"
},
{
"name": "CVE-2025-24424",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-24424"
},
{
"name": "CVE-2025-24414",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-24414"
},
{
"name": "CVE-2025-24428",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-24428"
},
{
"name": "CVE-2025-24420",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-24420"
},
{
"name": "CVE-2025-24429",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-24429"
},
{
"name": "CVE-2025-24434",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-24434"
},
{
"name": "CVE-2025-24437",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-24437"
},
{
"name": "CVE-2025-24422",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-24422"
},
{
"name": "CVE-2025-24408",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-24408"
},
{
"name": "CVE-2025-24411",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-24411"
},
{
"name": "CVE-2025-24421",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-24421"
},
{
"name": "CVE-2025-24406",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-24406"
},
{
"name": "CVE-2025-24418",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-24418"
},
{
"name": "CVE-2025-24436",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-24436"
}
],
"initial_release_date": "2025-02-12T00:00:00",
"last_revision_date": "2025-02-12T00:00:00",
"links": [],
"reference": "CERTFR-2025-AVI-0122",
"revisions": [
{
"description": "Version initiale",
"revision_date": "2025-02-12T00:00:00.000000"
}
],
"risks": [
{
"description": "Injection de code indirecte \u00e0 distance (XSS)"
},
{
"description": "Contournement de la politique de s\u00e9curit\u00e9"
},
{
"description": "\u00c9l\u00e9vation de privil\u00e8ges"
}
],
"summary": "De multiples vuln\u00e9rabilit\u00e9s ont \u00e9t\u00e9 d\u00e9couvertes dans les produits Adobe. Certaines d\u0027entre elles permettent \u00e0 un attaquant de provoquer une \u00e9l\u00e9vation de privil\u00e8ges, une injection de code indirecte \u00e0 distance (XSS) et un contournement de la politique de s\u00e9curit\u00e9.",
"title": "Multiples vuln\u00e9rabilit\u00e9s dans les produits Adobe",
"vendor_advisories": [
{
"published_at": "2025-02-10",
"title": "Bulletin de s\u00e9curit\u00e9 Adobe apsb25-08",
"url": "https://helpx.adobe.com/security/products/magento/apsb25-08.html"
}
]
}
CERTFR-2024-AVI-0972
Vulnerability from certfr_avis - Published: 2024-11-13 - Updated: 2024-11-13
Une vulnérabilité a été découverte dans les produits Adobe. Elle permet à un attaquant de provoquer une exécution de code arbitraire à distance.
Solutions
Se référer au bulletin de sécurité de l'éditeur pour l'obtention des correctifs (cf. section Documentation).
Impacted products
References
| Title | Publication Time | Tags | |||
|---|---|---|---|---|---|
|
|||||
{
"$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
"affected_systems": [
{
"description": "Magento versions ant\u00e9rieures \u00e0 3.2.6",
"product": {
"name": "Magento",
"vendor": {
"name": "Adobe",
"scada": false
}
}
},
{
"description": "Commerce versions ant\u00e9rieures \u00e0 3.2.6",
"product": {
"name": "Commerce",
"vendor": {
"name": "Adobe",
"scada": false
}
}
}
],
"affected_systems_content": "",
"content": "## Solutions\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des correctifs (cf. section Documentation).",
"cves": [
{
"name": "CVE-2024-49521",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-49521"
}
],
"initial_release_date": "2024-11-13T00:00:00",
"last_revision_date": "2024-11-13T00:00:00",
"links": [],
"reference": "CERTFR-2024-AVI-0972",
"revisions": [
{
"description": "Version initiale",
"revision_date": "2024-11-13T00:00:00.000000"
}
],
"risks": [
{
"description": "Ex\u00e9cution de code arbitraire \u00e0 distance"
}
],
"summary": "Une vuln\u00e9rabilit\u00e9 a \u00e9t\u00e9 d\u00e9couverte dans les produits Adobe. Elle permet \u00e0 un attaquant de provoquer une ex\u00e9cution de code arbitraire \u00e0 distance.",
"title": "Vuln\u00e9rabilit\u00e9 dans les produits Adobe",
"vendor_advisories": [
{
"published_at": "2024-11-12",
"title": "Bulletin de s\u00e9curit\u00e9 Adobe apsb24-90",
"url": "https://helpx.adobe.com/security/products/magento/apsb24-90.html"
}
]
}
CERTFR-2024-AVI-0848
Vulnerability from certfr_avis - Published: 2024-10-09 - Updated: 2024-10-09
De multiples vulnérabilités ont été découvertes dans les produits Adobe. Certaines d'entre elles permettent à un attaquant de provoquer une exécution de code arbitraire à distance, une élévation de privilèges et une atteinte à la confidentialité des données.
Solutions
Se référer au bulletin de sécurité de l'éditeur pour l'obtention des correctifs (cf. section Documentation).
Impacted products
| Vendor | Product | Description | ||
|---|---|---|---|---|
| Adobe | Commerce | Adobe Commerce versions 2.4.6-x antérieures à 2.4.6-p8 | ||
| Adobe | Commerce | Adobe Commerce B2B versions antérieures à 1.3.3-p11 | ||
| Adobe | Magento | Magento Open Source versions antérieures à 2.4.4-p11 | ||
| Adobe | Commerce | Adobe Commerce versions 2.4.5-x antérieures à 2.4.5-p10 | ||
| Adobe | Commerce | Adobe Commerce versions 2.4.7-x antérieures à 2.4.7-p3 | ||
| Adobe | Magento | Magento Open Source versions 2.4.5-x antérieures à 2.4.5-p10 | ||
| Adobe | Commerce | Adobe Commerce B2B versions 1.3.5-x antérieures à 1.3.5-p8 | ||
| Adobe | Commerce | Adobe Commerce versions antérieures à 2.4.4-p11 | ||
| Adobe | Commerce | Adobe Commerce B2B versions 1.4.2-x antérieures à 1.4.2-p3 | ||
| Adobe | Magento | Magento Open Source versions 2.4.7-x antérieures à 2.4.7-p3 | ||
| Adobe | Commerce | Adobe Commerce B2B versions 1.3.4-x antérieures à 1.3.4-p10 | ||
| Adobe | Magento | Magento Open Source versions 2.4.6-x antérieures à 2.4.6-p8 |
References
| Title | Publication Time | Tags | |||
|---|---|---|---|---|---|
|
|||||
{
"$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
"affected_systems": [
{
"description": "Adobe Commerce versions 2.4.6-x ant\u00e9rieures \u00e0 2.4.6-p8",
"product": {
"name": "Commerce",
"vendor": {
"name": "Adobe",
"scada": false
}
}
},
{
"description": "Adobe Commerce B2B versions ant\u00e9rieures \u00e0 1.3.3-p11",
"product": {
"name": "Commerce",
"vendor": {
"name": "Adobe",
"scada": false
}
}
},
{
"description": "Magento Open Source versions ant\u00e9rieures \u00e0 2.4.4-p11",
"product": {
"name": "Magento",
"vendor": {
"name": "Adobe",
"scada": false
}
}
},
{
"description": "Adobe Commerce versions 2.4.5-x ant\u00e9rieures \u00e0 2.4.5-p10",
"product": {
"name": "Commerce",
"vendor": {
"name": "Adobe",
"scada": false
}
}
},
{
"description": "Adobe Commerce versions 2.4.7-x ant\u00e9rieures \u00e0 2.4.7-p3",
"product": {
"name": "Commerce",
"vendor": {
"name": "Adobe",
"scada": false
}
}
},
{
"description": "Magento Open Source versions 2.4.5-x ant\u00e9rieures \u00e0 2.4.5-p10",
"product": {
"name": "Magento",
"vendor": {
"name": "Adobe",
"scada": false
}
}
},
{
"description": "Adobe Commerce B2B versions 1.3.5-x ant\u00e9rieures \u00e0 1.3.5-p8",
"product": {
"name": "Commerce",
"vendor": {
"name": "Adobe",
"scada": false
}
}
},
{
"description": "Adobe Commerce versions ant\u00e9rieures \u00e0 2.4.4-p11",
"product": {
"name": "Commerce",
"vendor": {
"name": "Adobe",
"scada": false
}
}
},
{
"description": "Adobe Commerce B2B versions 1.4.2-x ant\u00e9rieures \u00e0 1.4.2-p3",
"product": {
"name": "Commerce",
"vendor": {
"name": "Adobe",
"scada": false
}
}
},
{
"description": "Magento Open Source versions 2.4.7-x ant\u00e9rieures \u00e0 2.4.7-p3",
"product": {
"name": "Magento",
"vendor": {
"name": "Adobe",
"scada": false
}
}
},
{
"description": "Adobe Commerce B2B versions 1.3.4-x ant\u00e9rieures \u00e0 1.3.4-p10",
"product": {
"name": "Commerce",
"vendor": {
"name": "Adobe",
"scada": false
}
}
},
{
"description": "Magento Open Source versions 2.4.6-x ant\u00e9rieures \u00e0 2.4.6-p8",
"product": {
"name": "Magento",
"vendor": {
"name": "Adobe",
"scada": false
}
}
}
],
"affected_systems_content": "",
"content": "## Solutions\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des correctifs (cf. section Documentation).",
"cves": [
{
"name": "CVE-2024-45116",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-45116"
},
{
"name": "CVE-2024-45131",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-45131"
},
{
"name": "CVE-2024-45149",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-45149"
},
{
"name": "CVE-2024-45118",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-45118"
},
{
"name": "CVE-2024-45119",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-45119"
},
{
"name": "CVE-2024-45123",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-45123"
},
{
"name": "CVE-2024-45125",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-45125"
},
{
"name": "CVE-2024-45122",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-45122"
},
{
"name": "CVE-2024-45132",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-45132"
},
{
"name": "CVE-2024-45121",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-45121"
},
{
"name": "CVE-2024-45115",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-45115"
},
{
"name": "CVE-2024-45127",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-45127"
},
{
"name": "CVE-2024-45128",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-45128"
},
{
"name": "CVE-2024-45129",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-45129"
},
{
"name": "CVE-2024-45124",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-45124"
},
{
"name": "CVE-2024-45130",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-45130"
},
{
"name": "CVE-2024-45135",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-45135"
},
{
"name": "CVE-2024-45117",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-45117"
},
{
"name": "CVE-2024-45120",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-45120"
},
{
"name": "CVE-2024-45148",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-45148"
},
{
"name": "CVE-2024-45133",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-45133"
},
{
"name": "CVE-2024-45134",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-45134"
}
],
"initial_release_date": "2024-10-09T00:00:00",
"last_revision_date": "2024-10-09T00:00:00",
"links": [],
"reference": "CERTFR-2024-AVI-0848",
"revisions": [
{
"description": "Version initiale",
"revision_date": "2024-10-09T00:00:00.000000"
}
],
"risks": [
{
"description": "Ex\u00e9cution de code arbitraire \u00e0 distance"
},
{
"description": "Contournement de la politique de s\u00e9curit\u00e9"
},
{
"description": "Atteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es"
},
{
"description": "\u00c9l\u00e9vation de privil\u00e8ges"
}
],
"summary": "De multiples vuln\u00e9rabilit\u00e9s ont \u00e9t\u00e9 d\u00e9couvertes dans les produits Adobe. Certaines d\u0027entre elles permettent \u00e0 un attaquant de provoquer une ex\u00e9cution de code arbitraire \u00e0 distance, une \u00e9l\u00e9vation de privil\u00e8ges et une atteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es.",
"title": "Multiples vuln\u00e9rabilit\u00e9s dans Adobe Commerce et Magento",
"vendor_advisories": [
{
"published_at": "2024-10-08",
"title": "Bulletin de s\u00e9curit\u00e9 Adobe apsb24-73",
"url": "https://helpx.adobe.com/security/products/magento/apsb24-73.html"
}
]
}
CERTFR-2024-AVI-0678
Vulnerability from certfr_avis - Published: 2024-08-14 - Updated: 2024-08-14
De multiples vulnérabilités ont été découvertes dans les produits Adobe. Certaines d'entre elles permettent à un attaquant de provoquer une exécution de code arbitraire, une élévation de privilèges et une atteinte à la confidentialité des données.
Solutions
Se référer au bulletin de sécurité de l'éditeur pour l'obtention des correctifs (cf. section Documentation).
Impacted products
| Vendor | Product | Description | ||
|---|---|---|---|---|
| Adobe | Acrobat | Acrobat 2020 versions antérieures à 20.005.30655 | ||
| Adobe | Magento | Magento Open Source versions 2.4.5.x antérieures à 2.4.5-p9 | ||
| Adobe | Acrobat | Acrobat DC versions antérieures à 24.002.21005 | ||
| Adobe | Commerce | Commerce versions antérieures à 2.4.4-p10 | ||
| Adobe | Commerce | Commerce versions 2.4.7.x antérieures à 2.4.7-p2 | ||
| Adobe | Commerce | Commerce versions 2.4.6.x antérieures à 2.4.6-p7 | ||
| Adobe | Commerce | Commerce versions 2.4.5.x antérieures à 2.4.5-p9 | ||
| Adobe | Magento | Magento Open Source versions 2.4.6.x antérieures à 2.4.6-p7 | ||
| Adobe | Acrobat | Acrobat 2024 versions antérieures à 24.001.30159 | ||
| Adobe | Magento | Magento Open Source versions 2.4.7.x antérieures à 2.4.7-p2 | ||
| Adobe | Magento | Magento Open Source versions antérieures à 2.4.4-p10 | ||
| Adobe | Acrobat Reader | Acrobat Reader DC versions antérieures à 24.002.21005 | ||
| Adobe | Acrobat Reader | Acrobat Reader 2020 versions antérieures à 20.005.30655 |
References
| Title | Publication Time | Tags | ||||||
|---|---|---|---|---|---|---|---|---|
|
||||||||
{
"$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
"affected_systems": [
{
"description": "Acrobat 2020 versions ant\u00e9rieures \u00e0 20.005.30655",
"product": {
"name": "Acrobat",
"vendor": {
"name": "Adobe",
"scada": false
}
}
},
{
"description": "Magento Open Source versions 2.4.5.x ant\u00e9rieures \u00e0 2.4.5-p9",
"product": {
"name": "Magento",
"vendor": {
"name": "Adobe",
"scada": false
}
}
},
{
"description": "Acrobat DC versions ant\u00e9rieures \u00e0 24.002.21005",
"product": {
"name": "Acrobat",
"vendor": {
"name": "Adobe",
"scada": false
}
}
},
{
"description": "Commerce versions ant\u00e9rieures \u00e0 2.4.4-p10",
"product": {
"name": "Commerce",
"vendor": {
"name": "Adobe",
"scada": false
}
}
},
{
"description": "Commerce versions 2.4.7.x ant\u00e9rieures \u00e0 2.4.7-p2",
"product": {
"name": "Commerce",
"vendor": {
"name": "Adobe",
"scada": false
}
}
},
{
"description": "Commerce versions 2.4.6.x ant\u00e9rieures \u00e0 2.4.6-p7",
"product": {
"name": "Commerce",
"vendor": {
"name": "Adobe",
"scada": false
}
}
},
{
"description": "Commerce versions 2.4.5.x ant\u00e9rieures \u00e0 2.4.5-p9",
"product": {
"name": "Commerce",
"vendor": {
"name": "Adobe",
"scada": false
}
}
},
{
"description": "Magento Open Source versions 2.4.6.x ant\u00e9rieures \u00e0 2.4.6-p7",
"product": {
"name": "Magento",
"vendor": {
"name": "Adobe",
"scada": false
}
}
},
{
"description": "Acrobat 2024 versions ant\u00e9rieures \u00e0 24.001.30159",
"product": {
"name": "Acrobat",
"vendor": {
"name": "Adobe",
"scada": false
}
}
},
{
"description": "Magento Open Source versions 2.4.7.x ant\u00e9rieures \u00e0 2.4.7-p2",
"product": {
"name": "Magento",
"vendor": {
"name": "Adobe",
"scada": false
}
}
},
{
"description": "Magento Open Source versions ant\u00e9rieures \u00e0 2.4.4-p10",
"product": {
"name": "Magento",
"vendor": {
"name": "Adobe",
"scada": false
}
}
},
{
"description": "Acrobat Reader DC versions ant\u00e9rieures \u00e0 24.002.21005",
"product": {
"name": "Acrobat Reader",
"vendor": {
"name": "Adobe",
"scada": false
}
}
},
{
"description": "Acrobat Reader 2020 versions ant\u00e9rieures \u00e0 20.005.30655",
"product": {
"name": "Acrobat Reader",
"vendor": {
"name": "Adobe",
"scada": false
}
}
}
],
"affected_systems_content": "",
"content": "## Solutions\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des correctifs (cf. section Documentation).",
"cves": [
{
"name": "CVE-2024-41831",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-41831"
},
{
"name": "CVE-2024-41832",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-41832"
},
{
"name": "CVE-2024-39411",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-39411"
},
{
"name": "CVE-2024-39413",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-39413"
},
{
"name": "CVE-2024-39398",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-39398"
},
{
"name": "CVE-2024-39412",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-39412"
},
{
"name": "CVE-2024-39425",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-39425"
},
{
"name": "CVE-2024-39424",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-39424"
},
{
"name": "CVE-2024-39418",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-39418"
},
{
"name": "CVE-2024-39403",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-39403"
},
{
"name": "CVE-2024-39408",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-39408"
},
{
"name": "CVE-2024-41835",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-41835"
},
{
"name": "CVE-2024-39401",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-39401"
},
{
"name": "CVE-2024-39415",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-39415"
},
{
"name": "CVE-2024-39426",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-39426"
},
{
"name": "CVE-2024-39416",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-39416"
},
{
"name": "CVE-2024-39402",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-39402"
},
{
"name": "CVE-2024-39383",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-39383"
},
{
"name": "CVE-2024-41833",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-41833"
},
{
"name": "CVE-2024-39404",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-39404"
},
{
"name": "CVE-2024-39406",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-39406"
},
{
"name": "CVE-2024-39423",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-39423"
},
{
"name": "CVE-2024-39419",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-39419"
},
{
"name": "CVE-2024-41830",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-41830"
},
{
"name": "CVE-2024-39400",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-39400"
},
{
"name": "CVE-2024-39410",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-39410"
},
{
"name": "CVE-2024-39422",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-39422"
},
{
"name": "CVE-2024-39414",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-39414"
},
{
"name": "CVE-2024-39417",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-39417"
},
{
"name": "CVE-2024-39405",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-39405"
},
{
"name": "CVE-2024-39409",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-39409"
},
{
"name": "CVE-2024-41834",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-41834"
},
{
"name": "CVE-2024-39407",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-39407"
},
{
"name": "CVE-2024-39397",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-39397"
},
{
"name": "CVE-2024-39399",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-39399"
}
],
"initial_release_date": "2024-08-14T00:00:00",
"last_revision_date": "2024-08-14T00:00:00",
"links": [],
"reference": "CERTFR-2024-AVI-0678",
"revisions": [
{
"description": "Version initiale",
"revision_date": "2024-08-14T00:00:00.000000"
}
],
"risks": [
{
"description": "Injection de code indirecte \u00e0 distance (XSS)"
},
{
"description": "Injection de requ\u00eates ill\u00e9gitimes par rebond (CSRF)"
},
{
"description": "Ex\u00e9cution de code arbitraire \u00e0 distance"
},
{
"description": "Atteinte \u00e0 l\u0027int\u00e9grit\u00e9 des donn\u00e9es"
},
{
"description": "Contournement de la politique de s\u00e9curit\u00e9"
},
{
"description": "Atteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es"
},
{
"description": "\u00c9l\u00e9vation de privil\u00e8ges"
}
],
"summary": "De multiples vuln\u00e9rabilit\u00e9s ont \u00e9t\u00e9 d\u00e9couvertes dans les produits Adobe. Certaines d\u0027entre elles permettent \u00e0 un attaquant de provoquer une ex\u00e9cution de code arbitraire, une \u00e9l\u00e9vation de privil\u00e8ges et une atteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es.",
"title": "Multiples vuln\u00e9rabilit\u00e9s dans les produits Adobe",
"vendor_advisories": [
{
"published_at": "2024-08-13",
"title": "Bulletin de s\u00e9curit\u00e9 Adobe apsb24-61",
"url": "https://helpx.adobe.com/security/products/magento/apsb24-61.html"
},
{
"published_at": "2024-08-13",
"title": "Bulletin de s\u00e9curit\u00e9 Adobe apsb24-57",
"url": "https://helpx.adobe.com/security/products/acrobat/apsb24-57.html"
}
]
}
CERTFR-2024-AVI-0483
Vulnerability from certfr_avis - Published: 2024-06-12 - Updated: 2024-06-12
De multiples vulnérabilités ont été découvertes dans les produits Adobe. Certaines d'entre elles permettent à un attaquant de provoquer une exécution de code arbitraire à distance, une élévation de privilèges et une injection de code indirecte à distance (XSS).
Solutions
Se référer au bulletin de sécurité de l'éditeur pour l'obtention des correctifs (cf. section Documentation).
Impacted products
| Vendor | Product | Description | ||
|---|---|---|---|---|
| Adobe | Magento | Magento Open Source versions 2.4.5-px antérieures à 2.4.5-p8 | ||
| Adobe | Commerce | Commerce versions 2.3.7-px-ext-x antérieures à 2.3.7-p4-ext-8 | ||
| Adobe | Commerce | Commerce versions 2.4.5-px antérieures à 2.4.5-p8 | ||
| Adobe | ColdFusion | ColdFusion 2023 sans le correctif de sécurité Update 8 | ||
| Adobe | Commerce | Commerce versions 2.4.0-ext-x antérieures à 2.4.0-ext-8 | ||
| Adobe | Magento | Magento Open Source versions 2.4.7-px antérieures à 2.4.7-p1 | ||
| Adobe | Magento | Magento Open Source versions 2.4.6-px antérieures à 2.4.6-p6 | ||
| Adobe | Commerce | Commerce Webhooks Plugin versions 1.2.0 à 1.4.0 antérieures à 1.5.0 | ||
| Adobe | ColdFusion | ColdFusion 2021 sans le correctif de sécurité Update 14 | ||
| Adobe | Commerce | Commerce versions 2.4.2-ext-x antérieures à 2.4.2-ext-8 | ||
| Adobe | Commerce | Commerce versions 2.4.3-ext-x antérieures à 2.4.3-ext-8 | ||
| Adobe | Magento | Magento Open Source versions 2.4.4-px antérieures à 2.4.4-p9 | ||
| Adobe | Commerce | Commerce versions 2.4.7-px antérieures à 2.4.7-p1 | ||
| Adobe | Commerce | Commerce versions 2.4.1-ext-x antérieures à 2.4.1-ext-8 | ||
| Adobe | Commerce | Commerce versions 2.4.4-px antérieures à 2.4.4-p9 | ||
| Adobe | Commerce | Commerce versions 2.4.6-px antérieures à 2.4.6-p6 | ||
| Adobe | Acrobat | Acrobat Android versions antérieures à 24.5.0.33694 |
References
| Title | Publication Time | Tags | |||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|
|
|||||||||||
{
"$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
"affected_systems": [
{
"description": "Magento Open Source versions 2.4.5-px ant\u00e9rieures \u00e0 2.4.5-p8",
"product": {
"name": "Magento",
"vendor": {
"name": "Adobe",
"scada": false
}
}
},
{
"description": "Commerce versions 2.3.7-px-ext-x ant\u00e9rieures \u00e0 2.3.7-p4-ext-8",
"product": {
"name": "Commerce",
"vendor": {
"name": "Adobe",
"scada": false
}
}
},
{
"description": "Commerce versions 2.4.5-px ant\u00e9rieures \u00e0 2.4.5-p8",
"product": {
"name": "Commerce",
"vendor": {
"name": "Adobe",
"scada": false
}
}
},
{
"description": "ColdFusion 2023 sans le correctif de s\u00e9curit\u00e9 Update 8",
"product": {
"name": "ColdFusion",
"vendor": {
"name": "Adobe",
"scada": false
}
}
},
{
"description": "Commerce versions 2.4.0-ext-x ant\u00e9rieures \u00e0 2.4.0-ext-8",
"product": {
"name": "Commerce",
"vendor": {
"name": "Adobe",
"scada": false
}
}
},
{
"description": "Magento Open Source versions 2.4.7-px ant\u00e9rieures \u00e0 2.4.7-p1",
"product": {
"name": "Magento",
"vendor": {
"name": "Adobe",
"scada": false
}
}
},
{
"description": "Magento Open Source versions 2.4.6-px ant\u00e9rieures \u00e0 2.4.6-p6",
"product": {
"name": "Magento",
"vendor": {
"name": "Adobe",
"scada": false
}
}
},
{
"description": "Commerce Webhooks Plugin versions 1.2.0 \u00e0 1.4.0 ant\u00e9rieures \u00e0 1.5.0",
"product": {
"name": "Commerce",
"vendor": {
"name": "Adobe",
"scada": false
}
}
},
{
"description": "ColdFusion 2021 sans le correctif de s\u00e9curit\u00e9 Update 14",
"product": {
"name": "ColdFusion",
"vendor": {
"name": "Adobe",
"scada": false
}
}
},
{
"description": "Commerce versions 2.4.2-ext-x ant\u00e9rieures \u00e0 2.4.2-ext-8",
"product": {
"name": "Commerce",
"vendor": {
"name": "Adobe",
"scada": false
}
}
},
{
"description": "Commerce versions 2.4.3-ext-x ant\u00e9rieures \u00e0 2.4.3-ext-8",
"product": {
"name": "Commerce",
"vendor": {
"name": "Adobe",
"scada": false
}
}
},
{
"description": "Magento Open Source versions 2.4.4-px ant\u00e9rieures \u00e0 2.4.4-p9",
"product": {
"name": "Magento",
"vendor": {
"name": "Adobe",
"scada": false
}
}
},
{
"description": "Commerce versions 2.4.7-px ant\u00e9rieures \u00e0 2.4.7-p1",
"product": {
"name": "Commerce",
"vendor": {
"name": "Adobe",
"scada": false
}
}
},
{
"description": "Commerce versions 2.4.1-ext-x ant\u00e9rieures \u00e0 2.4.1-ext-8",
"product": {
"name": "Commerce",
"vendor": {
"name": "Adobe",
"scada": false
}
}
},
{
"description": "Commerce versions 2.4.4-px ant\u00e9rieures \u00e0 2.4.4-p9",
"product": {
"name": "Commerce",
"vendor": {
"name": "Adobe",
"scada": false
}
}
},
{
"description": "Commerce versions 2.4.6-px ant\u00e9rieures \u00e0 2.4.6-p6",
"product": {
"name": "Commerce",
"vendor": {
"name": "Adobe",
"scada": false
}
}
},
{
"description": "Acrobat Android versions ant\u00e9rieures \u00e0 24.5.0.33694",
"product": {
"name": "Acrobat",
"vendor": {
"name": "Adobe",
"scada": false
}
}
}
],
"affected_systems_content": "",
"content": "## Solutions\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des correctifs (cf. section Documentation).",
"cves": [
{
"name": "CVE-2024-34106",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-34106"
},
{
"name": "CVE-2024-34105",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-34105"
},
{
"name": "CVE-2024-34103",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-34103"
},
{
"name": "CVE-2024-34107",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-34107"
},
{
"name": "CVE-2024-34109",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-34109"
},
{
"name": "CVE-2024-34111",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-34111"
},
{
"name": "CVE-2024-34112",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-34112"
},
{
"name": "CVE-2024-34130",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-34130"
},
{
"name": "CVE-2024-34110",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-34110"
},
{
"name": "CVE-2024-34108",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-34108"
},
{
"name": "CVE-2024-34129",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-34129"
},
{
"name": "CVE-2024-34102",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-34102"
},
{
"name": "CVE-2024-34113",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-34113"
},
{
"name": "CVE-2024-34104",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-34104"
}
],
"initial_release_date": "2024-06-12T00:00:00",
"last_revision_date": "2024-06-12T00:00:00",
"links": [],
"reference": "CERTFR-2024-AVI-0483",
"revisions": [
{
"description": "Version initiale",
"revision_date": "2024-06-12T00:00:00.000000"
}
],
"risks": [
{
"description": "Injection de code indirecte \u00e0 distance (XSS)"
},
{
"description": "Ex\u00e9cution de code arbitraire \u00e0 distance"
},
{
"description": "Contournement de la politique de s\u00e9curit\u00e9"
},
{
"description": "Atteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es"
},
{
"description": "\u00c9l\u00e9vation de privil\u00e8ges"
}
],
"summary": "De multiples vuln\u00e9rabilit\u00e9s ont \u00e9t\u00e9 d\u00e9couvertes dans les produits Adobe. Certaines d\u0027entre elles permettent \u00e0 un attaquant de provoquer une ex\u00e9cution de code arbitraire \u00e0 distance, une \u00e9l\u00e9vation de privil\u00e8ges et une injection de code indirecte \u00e0 distance (XSS).",
"title": "Multiples vuln\u00e9rabilit\u00e9s dans les produits Adobe",
"vendor_advisories": [
{
"published_at": "2024-06-11",
"title": "Bulletin de s\u00e9curit\u00e9 Adobe apsb24-50",
"url": "https://helpx.adobe.com/security/products/acrobat-android/apsb24-50.html"
},
{
"published_at": "2024-06-11",
"title": "Bulletin de s\u00e9curit\u00e9 Adobe apsb24-41",
"url": "https://helpx.adobe.com/security/products/coldfusion/apsb24-41.html"
},
{
"published_at": "2024-06-11",
"title": "Bulletin de s\u00e9curit\u00e9 Adobe apsb24-40",
"url": "https://helpx.adobe.com/security/products/magento/apsb24-40.html"
}
]
}
CERTFR-2024-AVI-0284
Vulnerability from certfr_avis - Published: 2024-04-10 - Updated: 2024-04-10
De multiples vulnérabilités ont été découvertes dans les produits Adobe. Elles permettent à un attaquant de provoquer une injection de code indirecte à distance (XSS) et une exécution de code arbitraire.
Solution
Se référer au bulletin de sécurité de l'éditeur pour l'obtention des correctifs (cf. section Documentation).
NoneImpacted products
| Vendor | Product | Description | ||
|---|---|---|---|---|
| Adobe | Magento | Magento Open Source versions 2.4.6-x antérieures à 2.4.6-p5 | ||
| Adobe | Magento | Magento Open Source versions 2.4.7-x antérieures à 2.4.7 | ||
| Adobe | Commerce | Adobe Commerce version 2.4.4-x antérieures à 2.4.4-p8 | ||
| Adobe | Commerce | Adobe Commerce version 2.4.6-x antérieures à 2.4.6-p5 | ||
| Adobe | Magento | Magento Open Source versions 2.4.5-x antérieures à 2.4.5-p7 | ||
| Adobe | Commerce | Adobe Commerce version 2.3.7-p4-ext-x antérieures à 2.3.7-p4-ext-7 | ||
| Adobe | Commerce | Adobe Commerce version 2.4.1-ext-x antérieures à 2.4.1-ext-7 | ||
| Adobe | Commerce | Adobe Commerce version 2.4.3-ext-x antérieures à 2.4.3-ext-7 | ||
| Adobe | Magento | Magento Open Source versions 2.4.4-x antérieures à 2.4.4-p8 | ||
| Adobe | Commerce | Adobe Commerce version 2.4.2-ext-x antérieures à 2.4.2-ext-7 | ||
| Adobe | Commerce | Adobe Commerce version 2.4.7-x antérieures à 2.4.7 | ||
| Adobe | Commerce | Adobe Commerce version 2.4.0-ext-x antérieures à 2.4.0-ext-7 | ||
| Adobe | Commerce | Adobe Commerce version 2.4.5-x antérieures à 2.4.5-p7 |
References
| Title | Publication Time | Tags | ||||||
|---|---|---|---|---|---|---|---|---|
|
||||||||
{
"$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
"affected_systems": [
{
"description": "Magento Open Source versions 2.4.6-x ant\u00e9rieures \u00e0 2.4.6-p5",
"product": {
"name": "Magento",
"vendor": {
"name": "Adobe",
"scada": false
}
}
},
{
"description": "Magento Open Source versions 2.4.7-x ant\u00e9rieures \u00e0 2.4.7",
"product": {
"name": "Magento",
"vendor": {
"name": "Adobe",
"scada": false
}
}
},
{
"description": "Adobe Commerce version 2.4.4-x ant\u00e9rieures \u00e0 2.4.4-p8",
"product": {
"name": "Commerce",
"vendor": {
"name": "Adobe",
"scada": false
}
}
},
{
"description": "Adobe Commerce version 2.4.6-x ant\u00e9rieures \u00e0 2.4.6-p5",
"product": {
"name": "Commerce",
"vendor": {
"name": "Adobe",
"scada": false
}
}
},
{
"description": "Magento Open Source versions 2.4.5-x ant\u00e9rieures \u00e0 2.4.5-p7",
"product": {
"name": "Magento",
"vendor": {
"name": "Adobe",
"scada": false
}
}
},
{
"description": "Adobe Commerce version 2.3.7-p4-ext-x ant\u00e9rieures \u00e0 2.3.7-p4-ext-7",
"product": {
"name": "Commerce",
"vendor": {
"name": "Adobe",
"scada": false
}
}
},
{
"description": "Adobe Commerce version 2.4.1-ext-x ant\u00e9rieures \u00e0 2.4.1-ext-7",
"product": {
"name": "Commerce",
"vendor": {
"name": "Adobe",
"scada": false
}
}
},
{
"description": "Adobe Commerce version 2.4.3-ext-x ant\u00e9rieures \u00e0 2.4.3-ext-7",
"product": {
"name": "Commerce",
"vendor": {
"name": "Adobe",
"scada": false
}
}
},
{
"description": "Magento Open Source versions 2.4.4-x ant\u00e9rieures \u00e0 2.4.4-p8",
"product": {
"name": "Magento",
"vendor": {
"name": "Adobe",
"scada": false
}
}
},
{
"description": "Adobe Commerce version 2.4.2-ext-x ant\u00e9rieures \u00e0 2.4.2-ext-7",
"product": {
"name": "Commerce",
"vendor": {
"name": "Adobe",
"scada": false
}
}
},
{
"description": "Adobe Commerce version 2.4.7-x ant\u00e9rieures \u00e0 2.4.7",
"product": {
"name": "Commerce",
"vendor": {
"name": "Adobe",
"scada": false
}
}
},
{
"description": "Adobe Commerce version 2.4.0-ext-x ant\u00e9rieures \u00e0 2.4.0-ext-7",
"product": {
"name": "Commerce",
"vendor": {
"name": "Adobe",
"scada": false
}
}
},
{
"description": "Adobe Commerce version 2.4.5-x ant\u00e9rieures \u00e0 2.4.5-p7",
"product": {
"name": "Commerce",
"vendor": {
"name": "Adobe",
"scada": false
}
}
}
],
"affected_systems_content": null,
"content": "## Solution\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des\ncorrectifs (cf. section Documentation).\n",
"cves": [
{
"name": "CVE-2024-20758",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-20758"
},
{
"name": "CVE-2024-20759",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-20759"
}
],
"initial_release_date": "2024-04-10T00:00:00",
"last_revision_date": "2024-04-10T00:00:00",
"links": [
{
"title": "Bulletin de s\u00e9curit\u00e9 Adobe\u00a0APSB24-18 du 09 avril 2024",
"url": "https://helpx.adobe.com/security/products/magento/apsb24-18.html"
}
],
"reference": "CERTFR-2024-AVI-0284",
"revisions": [
{
"description": "Version initiale",
"revision_date": "2024-04-10T00:00:00.000000"
}
],
"risks": [
{
"description": "Injection de code indirecte \u00e0 distance (XSS)"
},
{
"description": "Ex\u00e9cution de code arbitraire"
}
],
"summary": "De multiples vuln\u00e9rabilit\u00e9s ont \u00e9t\u00e9 d\u00e9couvertes dans \u003cspan\nclass=\"textit\"\u003eles produits Adobe\u003c/span\u003e. Elles permettent \u00e0 un\nattaquant de provoquer une injection de code indirecte \u00e0 distance (XSS)\net une ex\u00e9cution de code arbitraire.\n",
"title": "Multiples vuln\u00e9rabilit\u00e9s dans les produits Adobe",
"vendor_advisories": [
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Adobe APSB24-18 du 09 avril 2024",
"url": null
}
]
}
CERTFR-2024-AVI-0123
Vulnerability from certfr_avis - Published: 2024-02-14 - Updated: 2024-02-14
De multiples vulnérabilités ont été découvertes dans les produits Adobe. Certaines d'entre elles permettent à un attaquant de provoquer une exécution de code arbitraire à distance, un déni de service à distance et injection de code indirecte à distance.
Solution
Se référer au bulletin de sécurité de l'éditeur pour l'obtention des correctifs (cf. section Documentation).
NoneImpacted products
| Vendor | Product | Description | ||
|---|---|---|---|---|
| Adobe | Commerce | Adobe Commerce version 2.4.4-x antérieures à 2.4.4-p7 | ||
| Adobe | Magento | Magento Open Source versions 2.4.6-x antérieures à 2.4.6-p4 | ||
| Adobe | Commerce | Adobe Commerce version 2.4.3-x antérieures à 2.4.3-ext-6 | ||
| Adobe | Acrobat | Acrobat 2020 versions antérieures à 20.005.30574 sur Windows et macOS | ||
| Adobe | Acrobat Reader | Acrobat Reader 2020 versions antérieures à 20.005.30574 sur Windows et macOS | ||
| Adobe | Acrobat Reader DC | Acrobat Reader DC versions antérieures à 23.008.20533 sur Windows et macOS | ||
| Adobe | Acrobat DC | Acrobat DC versions antérieures à 23.008.20533 sur Windows et macOS | ||
| Adobe | Commerce | Adobe Commerce version 2.4.1-x antérieures à 2.4.1-ext-6 | ||
| Adobe | Commerce | Adobe Commerce version 2.4.0-x antérieures à 2.4.0-ext-6 | ||
| Adobe | Commerce | Adobe Commerce version 2.4.5-x antérieures à 2.4.5-p6 | ||
| Adobe | Magento | Magento Open Source versions 2.4.5-x antérieures à 2.4.5-p6 | ||
| Adobe | Commerce | Adobe Commerce version 2.3.7-x antérieures à 2.3.7-p4-ext-6 | ||
| Adobe | Magento | Magento Open Source versions 2.4.4-x antérieures à 2.4.4-p7 | ||
| Adobe | Commerce | Adobe Commerce version 2.4.6-x antérieures à 2.4.6-p4 | ||
| Adobe | Commerce | Adobe Commerce version 2.4.2-x antérieures à 2.4.2-ext-6 |
References
| Title | Publication Time | Tags | ||||||
|---|---|---|---|---|---|---|---|---|
|
||||||||
{
"$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
"affected_systems": [
{
"description": "Adobe Commerce version 2.4.4-x ant\u00e9rieures \u00e0 2.4.4-p7",
"product": {
"name": "Commerce",
"vendor": {
"name": "Adobe",
"scada": false
}
}
},
{
"description": "Magento Open Source versions 2.4.6-x ant\u00e9rieures \u00e0 2.4.6-p4",
"product": {
"name": "Magento",
"vendor": {
"name": "Adobe",
"scada": false
}
}
},
{
"description": "Adobe Commerce version 2.4.3-x ant\u00e9rieures \u00e0 2.4.3-ext-6",
"product": {
"name": "Commerce",
"vendor": {
"name": "Adobe",
"scada": false
}
}
},
{
"description": "Acrobat 2020 versions ant\u00e9rieures \u00e0 20.005.30574 sur Windows et macOS",
"product": {
"name": "Acrobat",
"vendor": {
"name": "Adobe",
"scada": false
}
}
},
{
"description": "Acrobat Reader 2020 versions ant\u00e9rieures \u00e0 20.005.30574 sur Windows et macOS",
"product": {
"name": "Acrobat Reader",
"vendor": {
"name": "Adobe",
"scada": false
}
}
},
{
"description": "Acrobat Reader DC versions ant\u00e9rieures \u00e0 23.008.20533 sur Windows et macOS",
"product": {
"name": "Acrobat Reader DC",
"vendor": {
"name": "Adobe",
"scada": false
}
}
},
{
"description": "Acrobat DC versions ant\u00e9rieures \u00e0 23.008.20533 sur Windows et macOS",
"product": {
"name": "Acrobat DC",
"vendor": {
"name": "Adobe",
"scada": false
}
}
},
{
"description": "Adobe Commerce version 2.4.1-x ant\u00e9rieures \u00e0 2.4.1-ext-6",
"product": {
"name": "Commerce",
"vendor": {
"name": "Adobe",
"scada": false
}
}
},
{
"description": "Adobe Commerce version 2.4.0-x ant\u00e9rieures \u00e0 2.4.0-ext-6",
"product": {
"name": "Commerce",
"vendor": {
"name": "Adobe",
"scada": false
}
}
},
{
"description": "Adobe Commerce version 2.4.5-x ant\u00e9rieures \u00e0 2.4.5-p6",
"product": {
"name": "Commerce",
"vendor": {
"name": "Adobe",
"scada": false
}
}
},
{
"description": "Magento Open Source versions 2.4.5-x ant\u00e9rieures \u00e0 2.4.5-p6",
"product": {
"name": "Magento",
"vendor": {
"name": "Adobe",
"scada": false
}
}
},
{
"description": "Adobe Commerce version 2.3.7-x ant\u00e9rieures \u00e0 2.3.7-p4-ext-6",
"product": {
"name": "Commerce",
"vendor": {
"name": "Adobe",
"scada": false
}
}
},
{
"description": "Magento Open Source versions 2.4.4-x ant\u00e9rieures \u00e0 2.4.4-p7",
"product": {
"name": "Magento",
"vendor": {
"name": "Adobe",
"scada": false
}
}
},
{
"description": "Adobe Commerce version 2.4.6-x ant\u00e9rieures \u00e0 2.4.6-p4",
"product": {
"name": "Commerce",
"vendor": {
"name": "Adobe",
"scada": false
}
}
},
{
"description": "Adobe Commerce version 2.4.2-x ant\u00e9rieures \u00e0 2.4.2-ext-6",
"product": {
"name": "Commerce",
"vendor": {
"name": "Adobe",
"scada": false
}
}
}
],
"affected_systems_content": null,
"content": "## Solution\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des\ncorrectifs (cf. section Documentation).\n",
"cves": [
{
"name": "CVE-2024-20726",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-20726"
},
{
"name": "CVE-2024-20730",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-20730"
},
{
"name": "CVE-2024-20718",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-20718"
},
{
"name": "CVE-2024-20719",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-20719"
},
{
"name": "CVE-2024-20717",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-20717"
},
{
"name": "CVE-2024-20736",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-20736"
},
{
"name": "CVE-2024-20747",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-20747"
},
{
"name": "CVE-2024-20734",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-20734"
},
{
"name": "CVE-2024-20720",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-20720"
},
{
"name": "CVE-2024-20748",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-20748"
},
{
"name": "CVE-2024-20716",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-20716"
},
{
"name": "CVE-2024-20735",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-20735"
},
{
"name": "CVE-2024-20749",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-20749"
},
{
"name": "CVE-2024-20728",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-20728"
},
{
"name": "CVE-2024-20727",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-20727"
},
{
"name": "CVE-2024-20733",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-20733"
},
{
"name": "CVE-2024-20729",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-20729"
},
{
"name": "CVE-2024-20731",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-20731"
}
],
"initial_release_date": "2024-02-14T00:00:00",
"last_revision_date": "2024-02-14T00:00:00",
"links": [],
"reference": "CERTFR-2024-AVI-0123",
"revisions": [
{
"description": "Version initiale",
"revision_date": "2024-02-14T00:00:00.000000"
}
],
"risks": [
{
"description": "D\u00e9ni de service \u00e0 distance"
},
{
"description": "Injection de code indirecte \u00e0 distance (XSS)"
},
{
"description": "Injection de requ\u00eates ill\u00e9gitimes par rebond (CSRF)"
},
{
"description": "Ex\u00e9cution de code arbitraire \u00e0 distance"
}
],
"summary": "De multiples vuln\u00e9rabilit\u00e9s ont \u00e9t\u00e9 d\u00e9couvertes dans \u003cspan\nclass=\"textit\"\u003eles produits Adobe\u003c/span\u003e. Certaines d\u0027entre elles\npermettent \u00e0 un attaquant de provoquer une ex\u00e9cution de code arbitraire\n\u00e0 distance, un d\u00e9ni de service \u00e0 distance et injection de code indirecte\n\u00e0 distance.\n",
"title": "Multiples vuln\u00e9rabilit\u00e9s dans les produits Adobe",
"vendor_advisories": [
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Adobe apsb24-07 du 13 f\u00e9vrier 2024",
"url": "https://helpx.adobe.com/security/products/acrobat/apsb24-07.html"
},
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Adobe apsb24-03 du 13 f\u00e9vrier 2024",
"url": "https://helpx.adobe.com/security/products/magento/apsb24-03.html"
}
]
}
CERTFR-2023-AVI-0833
Vulnerability from certfr_avis - Published: 2023-10-12 - Updated: 2023-10-12
De multiples vulnérabilités ont été découvertes dans les produits Adobe. Certaines d'entre elles permettent à un attaquant de provoquer une injection de code indirecte à distance (XSS), une élévation de privilèges et une exécution de code arbitraire à distance.
Solution
Se référer au bulletin de sécurité de l'éditeur pour l'obtention des correctifs (cf. section Documentation).
NoneImpacted products
| Vendor | Product | Description | ||
|---|---|---|---|---|
| Adobe | Commerce | Adobe Commerce version 2.4.6-p2 antérieures à 2.4.6-p3 | ||
| Adobe | Commerce | Adobe Commerce version 2.4.7-beta1 antérieures à 2.4.7-beta2 | ||
| Adobe | Commerce | Adobe Commerce version 2.4.4-p5 antérieures à 2.4.4-p6 | ||
| Adobe | Commerce | Adobe Commerce version 2.4.3-ext-4 antérieures à 2.4.3-ext-5 | ||
| Adobe | Commerce | Adobe Commerce version 2.4.0-ext-4 antérieures à 2.4.0-ext-5 | ||
| Adobe | Magento | Magento Open Source versions 2.4.5-p4 antérieures à 2.4.5-p5 | ||
| Adobe | Commerce | Adobe Commerce version 2.3.7-p4-ext-4 antérieures à 2.3.7-p4-ext-5 | ||
| Adobe | Magento | Magento Open Source versions 2.4.7-beta1 antérieures à 2.4.7-beta2 | ||
| Adobe | Magento | Magento Open Source versions 2.4.4-p5 antérieures à 2.4.4-p6 | ||
| Adobe | Commerce | Adobe Commerce version 2.4.1-ext-4 antérieures à 2.4.1-ext-5 | ||
| Adobe | Commerce | Adobe Commerce version 2.4.2-ext-4 antérieures à 2.4.2-ext-5 | ||
| Adobe | Commerce | Adobe Commerce version 2.4.5-p4 antérieures à 2.4.5-p5 | ||
| Adobe | Magento | Magento Open Source versions 2.4.6-p2 antérieures à 2.4.6-p3 |
References
| Title | Publication Time | Tags | ||||||
|---|---|---|---|---|---|---|---|---|
|
||||||||
{
"$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
"affected_systems": [
{
"description": "Adobe Commerce version 2.4.6-p2 ant\u00e9rieures \u00e0 2.4.6-p3",
"product": {
"name": "Commerce",
"vendor": {
"name": "Adobe",
"scada": false
}
}
},
{
"description": "Adobe Commerce version 2.4.7-beta1 ant\u00e9rieures \u00e0 2.4.7-beta2",
"product": {
"name": "Commerce",
"vendor": {
"name": "Adobe",
"scada": false
}
}
},
{
"description": "Adobe Commerce version 2.4.4-p5 ant\u00e9rieures \u00e0 2.4.4-p6",
"product": {
"name": "Commerce",
"vendor": {
"name": "Adobe",
"scada": false
}
}
},
{
"description": "Adobe Commerce version 2.4.3-ext-4 ant\u00e9rieures \u00e0 2.4.3-ext-5",
"product": {
"name": "Commerce",
"vendor": {
"name": "Adobe",
"scada": false
}
}
},
{
"description": "Adobe Commerce version 2.4.0-ext-4 ant\u00e9rieures \u00e0 2.4.0-ext-5",
"product": {
"name": "Commerce",
"vendor": {
"name": "Adobe",
"scada": false
}
}
},
{
"description": "Magento Open Source versions 2.4.5-p4 ant\u00e9rieures \u00e0 2.4.5-p5",
"product": {
"name": "Magento",
"vendor": {
"name": "Adobe",
"scada": false
}
}
},
{
"description": "Adobe Commerce version 2.3.7-p4-ext-4 ant\u00e9rieures \u00e0 2.3.7-p4-ext-5",
"product": {
"name": "Commerce",
"vendor": {
"name": "Adobe",
"scada": false
}
}
},
{
"description": "Magento Open Source versions 2.4.7-beta1 ant\u00e9rieures \u00e0 2.4.7-beta2",
"product": {
"name": "Magento",
"vendor": {
"name": "Adobe",
"scada": false
}
}
},
{
"description": "Magento Open Source versions 2.4.4-p5 ant\u00e9rieures \u00e0 2.4.4-p6",
"product": {
"name": "Magento",
"vendor": {
"name": "Adobe",
"scada": false
}
}
},
{
"description": "Adobe Commerce version 2.4.1-ext-4 ant\u00e9rieures \u00e0 2.4.1-ext-5",
"product": {
"name": "Commerce",
"vendor": {
"name": "Adobe",
"scada": false
}
}
},
{
"description": "Adobe Commerce version 2.4.2-ext-4 ant\u00e9rieures \u00e0 2.4.2-ext-5",
"product": {
"name": "Commerce",
"vendor": {
"name": "Adobe",
"scada": false
}
}
},
{
"description": "Adobe Commerce version 2.4.5-p4 ant\u00e9rieures \u00e0 2.4.5-p5",
"product": {
"name": "Commerce",
"vendor": {
"name": "Adobe",
"scada": false
}
}
},
{
"description": "Magento Open Source versions 2.4.6-p2 ant\u00e9rieures \u00e0 2.4.6-p3",
"product": {
"name": "Magento",
"vendor": {
"name": "Adobe",
"scada": false
}
}
}
],
"affected_systems_content": null,
"content": "## Solution\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des\ncorrectifs (cf. section Documentation).\n",
"cves": [
{
"name": "CVE-2023-38249",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-38249"
},
{
"name": "CVE-2023-26367",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-26367"
},
{
"name": "CVE-2023-38251",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-38251"
},
{
"name": "CVE-2023-26366",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-26366"
},
{
"name": "CVE-2023-38221",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-38221"
},
{
"name": "CVE-2023-38219",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-38219"
},
{
"name": "CVE-2023-26368",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-26368"
},
{
"name": "CVE-2023-38220",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-38220"
},
{
"name": "CVE-2023-38218",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-38218"
},
{
"name": "CVE-2023-38250",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-38250"
}
],
"initial_release_date": "2023-10-12T00:00:00",
"last_revision_date": "2023-10-12T00:00:00",
"links": [
{
"title": "Bulletin de s\u00e9curit\u00e9 Adobe\u00a0apsb23-50 du 10 octobre 2023",
"url": "https://helpx.adobe.com/security/products/magento/apsb23-50.html"
}
],
"reference": "CERTFR-2023-AVI-0833",
"revisions": [
{
"description": "Version initiale",
"revision_date": "2023-10-12T00:00:00.000000"
}
],
"risks": [
{
"description": "D\u00e9ni de service \u00e0 distance"
},
{
"description": "Injection de code indirecte \u00e0 distance (XSS)"
},
{
"description": "Ex\u00e9cution de code arbitraire \u00e0 distance"
},
{
"description": "Contournement de la politique de s\u00e9curit\u00e9"
},
{
"description": "Atteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es"
},
{
"description": "\u00c9l\u00e9vation de privil\u00e8ges"
}
],
"summary": "De multiples vuln\u00e9rabilit\u00e9s ont \u00e9t\u00e9 d\u00e9couvertes dans \u003cspan\nclass=\"textit\"\u003eles produits Adobe\u003c/span\u003e. Certaines d\u0027entre elles\npermettent \u00e0 un attaquant de provoquer une injection de code indirecte \u00e0\ndistance (XSS), une \u00e9l\u00e9vation de privil\u00e8ges et une ex\u00e9cution de code\narbitraire \u00e0 distance.\n",
"title": "Multiples vuln\u00e9rabilit\u00e9s dans les produits Adobe",
"vendor_advisories": [
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Adobe apsb23-50 du 10 octobre 2023",
"url": null
}
]
}
CERTFR-2023-AVI-0636
Vulnerability from certfr_avis - Published: 2023-08-09 - Updated: 2023-08-09
De multiples vulnérabilités ont été découvertes dans les produits Adobe. Certaines d'entre elles permettent à un attaquant de provoquer une exécution de code arbitraire à distance, un déni de service et un contournement de la politique de sécurité.
Solution
Se référer au bulletin de sécurité de l'éditeur pour l'obtention des correctifs (cf. section Documentation).
NoneImpacted products
| Vendor | Product | Description | ||
|---|---|---|---|---|
| Adobe | Acrobat Reader | Acrobat Reader 2020 versions antérieures à 20.005.30516.10516 sur macOS | ||
| Adobe | Magento | Magento Open Source versions 2.4.4-x antérieures à 2.4.4-p5 | ||
| Adobe | Commerce | Adobe Commerce versions 2.4.6-x antérieures à 2.4.6-p2 | ||
| Adobe | Acrobat Reader | Acrobat Reader 2020 versions antérieures à 20.005.30514.10514 sur Windows | ||
| Adobe | Commerce | Adobe Commerce versions 2.4.2-x antérieures à 2.4.2-ext-4 | ||
| Adobe | Commerce | Adobe Commerce versions 2.4.1-x antérieures à 2.4.1-ext-4 | ||
| Adobe | Commerce | Adobe Commerce versions 2.4.4-x antérieures à 2.4.4-p5 | ||
| Adobe | Magento | Magento Open Source versions 2.4.5-x antérieures à 2.4.5-p4 | ||
| Adobe | Commerce | Adobe Commerce versions 2.4.3-x antérieures à 2.4.3-ext-4 | ||
| Adobe | Acrobat | Acrobat 2020 versions antérieures à 20.005.30516.10516 sur macOS | ||
| Adobe | Magento | Magento Open Source versions 2.4.6-x antérieures à 2.4.6-p2 | ||
| Adobe | Commerce | Adobe Commerce versions 2.3.7-x antérieures à 2.3.7-p4-ext-4 | ||
| Adobe | Commerce | Adobe Commerce versions 2.4.5-x antérieures à 2.4.5-p4 | ||
| Adobe | Commerce | Adobe Commerce versions 2.4.0-x antérieures à 2.4.0-ext-4 | ||
| Adobe | Acrobat | Acrobat 2020 versions antérieures à 20.005.30514.10514 sur Windows | ||
| Adobe | Acrobat Reader DC | Acrobat Reader DC versions antérieures à 23.003.20269 sur Windows et macOS | ||
| Adobe | Acrobat DC | Acrobat DC versions antérieures à 23.003.20269 sur Windows et macOS |
References
| Title | Publication Time | Tags | ||||||
|---|---|---|---|---|---|---|---|---|
|
||||||||
{
"$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
"affected_systems": [
{
"description": "Acrobat Reader 2020 versions ant\u00e9rieures \u00e0 20.005.30516.10516 sur macOS",
"product": {
"name": "Acrobat Reader",
"vendor": {
"name": "Adobe",
"scada": false
}
}
},
{
"description": "Magento Open Source versions 2.4.4-x ant\u00e9rieures \u00e0 2.4.4-p5",
"product": {
"name": "Magento",
"vendor": {
"name": "Adobe",
"scada": false
}
}
},
{
"description": "Adobe Commerce versions 2.4.6-x ant\u00e9rieures \u00e0 2.4.6-p2",
"product": {
"name": "Commerce",
"vendor": {
"name": "Adobe",
"scada": false
}
}
},
{
"description": "Acrobat Reader 2020 versions ant\u00e9rieures \u00e0 20.005.30514.10514 sur Windows",
"product": {
"name": "Acrobat Reader",
"vendor": {
"name": "Adobe",
"scada": false
}
}
},
{
"description": "Adobe Commerce versions 2.4.2-x ant\u00e9rieures \u00e0 2.4.2-ext-4",
"product": {
"name": "Commerce",
"vendor": {
"name": "Adobe",
"scada": false
}
}
},
{
"description": "Adobe Commerce versions 2.4.1-x ant\u00e9rieures \u00e0 2.4.1-ext-4",
"product": {
"name": "Commerce",
"vendor": {
"name": "Adobe",
"scada": false
}
}
},
{
"description": "Adobe Commerce versions 2.4.4-x ant\u00e9rieures \u00e0 2.4.4-p5",
"product": {
"name": "Commerce",
"vendor": {
"name": "Adobe",
"scada": false
}
}
},
{
"description": "Magento Open Source versions 2.4.5-x ant\u00e9rieures \u00e0 2.4.5-p4",
"product": {
"name": "Magento",
"vendor": {
"name": "Adobe",
"scada": false
}
}
},
{
"description": "Adobe Commerce versions 2.4.3-x ant\u00e9rieures \u00e0 2.4.3-ext-4",
"product": {
"name": "Commerce",
"vendor": {
"name": "Adobe",
"scada": false
}
}
},
{
"description": "Acrobat 2020 versions ant\u00e9rieures \u00e0 20.005.30516.10516 sur macOS",
"product": {
"name": "Acrobat",
"vendor": {
"name": "Adobe",
"scada": false
}
}
},
{
"description": "Magento Open Source versions 2.4.6-x ant\u00e9rieures \u00e0 2.4.6-p2",
"product": {
"name": "Magento",
"vendor": {
"name": "Adobe",
"scada": false
}
}
},
{
"description": "Adobe Commerce versions 2.3.7-x ant\u00e9rieures \u00e0 2.3.7-p4-ext-4",
"product": {
"name": "Commerce",
"vendor": {
"name": "Adobe",
"scada": false
}
}
},
{
"description": "Adobe Commerce versions 2.4.5-x ant\u00e9rieures \u00e0 2.4.5-p4",
"product": {
"name": "Commerce",
"vendor": {
"name": "Adobe",
"scada": false
}
}
},
{
"description": "Adobe Commerce versions 2.4.0-x ant\u00e9rieures \u00e0 2.4.0-ext-4",
"product": {
"name": "Commerce",
"vendor": {
"name": "Adobe",
"scada": false
}
}
},
{
"description": "Acrobat 2020 versions ant\u00e9rieures \u00e0 20.005.30514.10514 sur Windows",
"product": {
"name": "Acrobat",
"vendor": {
"name": "Adobe",
"scada": false
}
}
},
{
"description": "Acrobat Reader DC versions ant\u00e9rieures \u00e0 23.003.20269 sur Windows et macOS",
"product": {
"name": "Acrobat Reader DC",
"vendor": {
"name": "Adobe",
"scada": false
}
}
},
{
"description": "Acrobat DC versions ant\u00e9rieures \u00e0 23.003.20269 sur Windows et macOS",
"product": {
"name": "Acrobat DC",
"vendor": {
"name": "Adobe",
"scada": false
}
}
}
],
"affected_systems_content": null,
"content": "## Solution\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des\ncorrectifs (cf. section Documentation).\n",
"cves": [
{
"name": "CVE-2023-38243",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-38243"
},
{
"name": "CVE-2023-38207",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-38207"
},
{
"name": "CVE-2023-38241",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-38241"
},
{
"name": "CVE-2023-38235",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-38235"
},
{
"name": "CVE-2023-38227",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-38227"
},
{
"name": "CVE-2023-38239",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-38239"
},
{
"name": "CVE-2023-29303",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-29303"
},
{
"name": "CVE-2023-38245",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-38245"
},
{
"name": "CVE-2023-38228",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-38228"
},
{
"name": "CVE-2023-38222",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-38222"
},
{
"name": "CVE-2023-29320",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-29320"
},
{
"name": "CVE-2023-38234",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-38234"
},
{
"name": "CVE-2023-38225",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-38225"
},
{
"name": "CVE-2023-38232",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-38232"
},
{
"name": "CVE-2023-38240",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-38240"
},
{
"name": "CVE-2023-38224",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-38224"
},
{
"name": "CVE-2023-38230",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-38230"
},
{
"name": "CVE-2023-38247",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-38247"
},
{
"name": "CVE-2023-38223",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-38223"
},
{
"name": "CVE-2023-38237",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-38237"
},
{
"name": "CVE-2023-29299",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-29299"
},
{
"name": "CVE-2023-38226",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-38226"
},
{
"name": "CVE-2023-38238",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-38238"
},
{
"name": "CVE-2023-38242",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-38242"
},
{
"name": "CVE-2023-38236",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-38236"
},
{
"name": "CVE-2023-38246",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-38246"
},
{
"name": "CVE-2023-38208",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-38208"
},
{
"name": "CVE-2023-38229",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-38229"
},
{
"name": "CVE-2023-38209",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-38209"
},
{
"name": "CVE-2023-38244",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-38244"
},
{
"name": "CVE-2023-38248",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-38248"
},
{
"name": "CVE-2023-38231",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-38231"
},
{
"name": "CVE-2023-38233",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-38233"
}
],
"initial_release_date": "2023-08-09T00:00:00",
"last_revision_date": "2023-08-09T00:00:00",
"links": [],
"reference": "CERTFR-2023-AVI-0636",
"revisions": [
{
"description": "Version initiale",
"revision_date": "2023-08-09T00:00:00.000000"
}
],
"risks": [
{
"description": "Ex\u00e9cution de code arbitraire \u00e0 distance"
},
{
"description": "D\u00e9ni de service"
},
{
"description": "Contournement de la politique de s\u00e9curit\u00e9"
},
{
"description": "Atteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es"
},
{
"description": "\u00c9l\u00e9vation de privil\u00e8ges"
}
],
"summary": "De multiples vuln\u00e9rabilit\u00e9s ont \u00e9t\u00e9 d\u00e9couvertes dans les produits Adobe.\nCertaines d\u0027entre elles permettent \u00e0 un attaquant de provoquer une\nex\u00e9cution de code arbitraire \u00e0 distance, un d\u00e9ni de service et un\ncontournement de la politique de s\u00e9curit\u00e9.\n",
"title": "Multiples vuln\u00e9rabilit\u00e9s dans les produits Adobe",
"vendor_advisories": [
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Adobe apsb23-42 du 08 ao\u00fbt 2023",
"url": "https://helpx.adobe.com/security/products/magento/apsb23-42.html"
},
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Adobe apsb23-30 du 08 ao\u00fbt 2023",
"url": "https://helpx.adobe.com/security/products/acrobat/apsb23-30.html"
}
]
}
CERTFR-2023-AVI-0455
Vulnerability from certfr_avis - Published: 2023-06-14 - Updated: 2023-06-14
De multiples vulnérabilités ont été découvertes dans Adobe Commerce et Magento. Elles permettent à un attaquant de provoquer une exécution de code arbitraire à distance, un contournement de la politique de sécurité et une atteinte à la confidentialité des données.
Solution
Se référer au bulletin de sécurité de l'éditeur pour l'obtention des correctifs (cf. section Documentation).
NoneImpacted products
| Vendor | Product | Description | ||
|---|---|---|---|---|
| Adobe | Commerce | Adobe Commerce versions 2.4.2-x antérieures à 2.4.2-ext-3 | ||
| Adobe | Magento | Magento Open Source versions 2.4.6-x antérieures à 2.4.6-p1 | ||
| Adobe | Commerce | Adobe Commerce versions 2.4.3-x antérieures à 2.4.3-ext-3 | ||
| Adobe | Magento | Magento Open Source versions antérieures à 2.4.4-p4 | ||
| Adobe | Commerce | Adobe Commerce versions 2.4.6-x antérieures à 2.4.6-p1 | ||
| Adobe | Magento | Magento Open Source versions 2.4.5-x antérieures à 2.4.5-p3 | ||
| Adobe | Commerce | Adobe Commerce versions 2.4.5-x antérieures à 2.4.5-p3 | ||
| Adobe | Commerce | Adobe Commerce versions 2.4.1-x antérieures à 2.4.1-ext-3 | ||
| Adobe | Commerce | Adobe Commerce versions 2.4.4-x antérieures à 2.4.4-p4 | ||
| Adobe | Commerce | Adobe Commerce versions 2.4.0-x antérieures à 2.4.0-ext-3 | ||
| Adobe | Commerce | Adobe Commerce versions antérieures à 2.3.7-p4-ext-3 |
References
| Title | Publication Time | Tags | |||
|---|---|---|---|---|---|
|
|||||
{
"$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
"affected_systems": [
{
"description": "Adobe Commerce versions 2.4.2-x ant\u00e9rieures \u00e0 2.4.2-ext-3",
"product": {
"name": "Commerce",
"vendor": {
"name": "Adobe",
"scada": false
}
}
},
{
"description": "Magento Open Source versions 2.4.6-x ant\u00e9rieures \u00e0 2.4.6-p1",
"product": {
"name": "Magento",
"vendor": {
"name": "Adobe",
"scada": false
}
}
},
{
"description": "Adobe Commerce versions 2.4.3-x ant\u00e9rieures \u00e0 2.4.3-ext-3",
"product": {
"name": "Commerce",
"vendor": {
"name": "Adobe",
"scada": false
}
}
},
{
"description": "Magento Open Source versions ant\u00e9rieures \u00e0 2.4.4-p4",
"product": {
"name": "Magento",
"vendor": {
"name": "Adobe",
"scada": false
}
}
},
{
"description": "Adobe Commerce versions 2.4.6-x ant\u00e9rieures \u00e0 2.4.6-p1",
"product": {
"name": "Commerce",
"vendor": {
"name": "Adobe",
"scada": false
}
}
},
{
"description": "Magento Open Source versions 2.4.5-x ant\u00e9rieures \u00e0 2.4.5-p3",
"product": {
"name": "Magento",
"vendor": {
"name": "Adobe",
"scada": false
}
}
},
{
"description": "Adobe Commerce versions 2.4.5-x ant\u00e9rieures \u00e0 2.4.5-p3",
"product": {
"name": "Commerce",
"vendor": {
"name": "Adobe",
"scada": false
}
}
},
{
"description": "Adobe Commerce versions 2.4.1-x ant\u00e9rieures \u00e0 2.4.1-ext-3",
"product": {
"name": "Commerce",
"vendor": {
"name": "Adobe",
"scada": false
}
}
},
{
"description": "Adobe Commerce versions 2.4.4-x ant\u00e9rieures \u00e0 2.4.4-p4",
"product": {
"name": "Commerce",
"vendor": {
"name": "Adobe",
"scada": false
}
}
},
{
"description": "Adobe Commerce versions 2.4.0-x ant\u00e9rieures \u00e0 2.4.0-ext-3",
"product": {
"name": "Commerce",
"vendor": {
"name": "Adobe",
"scada": false
}
}
},
{
"description": "Adobe Commerce versions ant\u00e9rieures \u00e0 2.3.7-p4-ext-3",
"product": {
"name": "Commerce",
"vendor": {
"name": "Adobe",
"scada": false
}
}
}
],
"affected_systems_content": null,
"content": "## Solution\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des\ncorrectifs (cf. section Documentation).\n",
"cves": [
{
"name": "CVE-2023-29294",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-29294"
},
{
"name": "CVE-2023-29291",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-29291"
},
{
"name": "CVE-2023-29293",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-29293"
},
{
"name": "CVE-2023-29289",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-29289"
},
{
"name": "CVE-2023-29297",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-29297"
},
{
"name": "CVE-2023-29295",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-29295"
},
{
"name": "CVE-2023-29287",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-29287"
},
{
"name": "CVE-2023-29296",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-29296"
},
{
"name": "CVE-2023-29288",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-29288"
},
{
"name": "CVE-2023-29290",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-29290"
},
{
"name": "CVE-2023-29292",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-29292"
},
{
"name": "CVE-2023-22248",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-22248"
}
],
"initial_release_date": "2023-06-14T00:00:00",
"last_revision_date": "2023-06-14T00:00:00",
"links": [],
"reference": "CERTFR-2023-AVI-0455",
"revisions": [
{
"description": "Version initiale",
"revision_date": "2023-06-14T00:00:00.000000"
}
],
"risks": [
{
"description": "Ex\u00e9cution de code arbitraire \u00e0 distance"
},
{
"description": "Contournement de la politique de s\u00e9curit\u00e9"
},
{
"description": "Atteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es"
}
],
"summary": "De multiples vuln\u00e9rabilit\u00e9s ont \u00e9t\u00e9 d\u00e9couvertes dans Adobe Commerce et\nMagento. Elles permettent \u00e0 un attaquant de provoquer une ex\u00e9cution de\ncode arbitraire \u00e0 distance, un contournement de la politique de s\u00e9curit\u00e9\net une atteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es.\n",
"title": "Multiples vuln\u00e9rabilit\u00e9s dans Adobe Commerce et Magento",
"vendor_advisories": [
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Adobe apsb23-35 du 13 juin 2023",
"url": "https://helpx.adobe.com/security/products/magento/apsb23-35.html"
}
]
}
CERTFR-2023-AVI-0227
Vulnerability from certfr_avis - Published: 2023-03-15 - Updated: 2023-03-15
De multiples vulnérabilités ont été découvertes dans les produits Adobe. Elles permettent à un attaquant de provoquer une injection de code indirecte à distance (XSS), un contournement de la politique de sécurité, une exécution de code arbitraire à distance et une atteinte à la confidentialité des données.
L'éditeur indique que la vulnérabilité CVE-2023-26360 est exploitée dans le cadre d'attaques ciblées.
Solution
Se référer au bulletin de sécurité de l'éditeur pour l'obtention des correctifs (cf. section Documentation).
NoneImpacted products
| Vendor | Product | Description | ||
|---|---|---|---|---|
| Adobe | ColdFusion | ColdFusion 2021 versions antérieures à Update 6 | ||
| Adobe | ColdFusion | ColdFusion 2018 versions antérieures à Update 16 | ||
| Adobe | Magento | Magento Open Source 2.4.4.x versions antérieures à 2.4.4-p3 | ||
| Adobe | Commerce | Adobe Commerce 2.4.4.x versions antérieures à 2.4.4-p3 | ||
| Adobe | Commerce | Adobe Commerce 2.4.5.x versions antérieures à 2.4.5-p2 | ||
| Adobe | Magento | Magento Open Source 2.4.5.x versions antérieures à 2.4.5-p2 |
References
| Title | Publication Time | Tags | |||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|
|
|||||||||||
{
"$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
"affected_systems": [
{
"description": "ColdFusion 2021 versions ant\u00e9rieures \u00e0 Update 6",
"product": {
"name": "ColdFusion",
"vendor": {
"name": "Adobe",
"scada": false
}
}
},
{
"description": "ColdFusion 2018 versions ant\u00e9rieures \u00e0 Update 16",
"product": {
"name": "ColdFusion",
"vendor": {
"name": "Adobe",
"scada": false
}
}
},
{
"description": "Magento Open Source 2.4.4.x versions ant\u00e9rieures \u00e0 2.4.4-p3",
"product": {
"name": "Magento",
"vendor": {
"name": "Adobe",
"scada": false
}
}
},
{
"description": "Adobe Commerce 2.4.4.x versions ant\u00e9rieures \u00e0 2.4.4-p3",
"product": {
"name": "Commerce",
"vendor": {
"name": "Adobe",
"scada": false
}
}
},
{
"description": "Adobe Commerce 2.4.5.x versions ant\u00e9rieures \u00e0 2.4.5-p2",
"product": {
"name": "Commerce",
"vendor": {
"name": "Adobe",
"scada": false
}
}
},
{
"description": "Magento Open Source 2.4.5.x versions ant\u00e9rieures \u00e0 2.4.5-p2",
"product": {
"name": "Magento",
"vendor": {
"name": "Adobe",
"scada": false
}
}
}
],
"affected_systems_content": null,
"content": "## Solution\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des\ncorrectifs (cf. section Documentation).\n",
"cves": [
{
"name": "CVE-2023-22247",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-22247"
},
{
"name": "CVE-2023-22250",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-22250"
},
{
"name": "CVE-2023-26359",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-26359"
},
{
"name": "CVE-2023-26360",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-26360"
},
{
"name": "CVE-2023-26361",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-26361"
},
{
"name": "CVE-2023-22249",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-22249"
},
{
"name": "CVE-2023-22251",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-22251"
}
],
"initial_release_date": "2023-03-15T00:00:00",
"last_revision_date": "2023-03-15T00:00:00",
"links": [
{
"title": "Bulletin de s\u00e9curit\u00e9 Adobe\u00a0APSB23-25 du 14 mars 2023",
"url": "https://helpx.adobe.com/security/products/coldfusion/apsb23-25.html"
}
],
"reference": "CERTFR-2023-AVI-0227",
"revisions": [
{
"description": "Version initiale",
"revision_date": "2023-03-15T00:00:00.000000"
}
],
"risks": [
{
"description": "Injection de code indirecte \u00e0 distance (XSS)"
},
{
"description": "Ex\u00e9cution de code arbitraire \u00e0 distance"
},
{
"description": "Contournement de la politique de s\u00e9curit\u00e9"
},
{
"description": "Atteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es"
}
],
"summary": "De multiples vuln\u00e9rabilit\u00e9s ont \u00e9t\u00e9 d\u00e9couvertes dans les produits \u003cspan\nclass=\"textit\"\u003eAdobe\u003c/span\u003e. Elles permettent \u00e0 un attaquant de\nprovoquer une injection de code indirecte \u00e0 distance (XSS), un\ncontournement de la politique de s\u00e9curit\u00e9, une ex\u00e9cution de code\narbitraire \u00e0 distance et une atteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es.\n\nL\u0027\u00e9diteur indique que la vuln\u00e9rabilit\u00e9 CVE-2023-26360 est exploit\u00e9e dans\nle cadre d\u0027attaques cibl\u00e9es.\n",
"title": "Multiples vuln\u00e9rabilit\u00e9s dans les produits Adobe",
"vendor_advisories": [
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Adobe APSB23-17 du 14 mars 2023",
"url": "https://helpx.adobe.com/security/products/magento/apsb23-17.html"
},
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Adobe APSB23-25 du 14 mars 2023",
"url": null
}
]
}
CERTFR-2022-AVI-920
Vulnerability from certfr_avis - Published: 2022-10-17 - Updated: 2022-10-17
De multiples vulnérabilités ont été découvertes dans les produits Adobe. Certaines d'entre elles permettent à un attaquant de provoquer une exécution de code arbitraire à distance, un déni de service et un contournement de la politique de sécurité.
Solution
Se référer au bulletin de sécurité de l'éditeur pour l'obtention des correctifs (cf. section Documentation).
NoneImpacted products
| Vendor | Product | Description | ||
|---|---|---|---|---|
| Adobe | ColdFusion | ColdFusion 2021 versions antérieures à Update 5 | ||
| Adobe | Commerce | Adobe Commerce versions 2.4.4x antérieures à 2.4.4-p2 | ||
| Adobe | Magento | Magento Open Source versions 2.4.5x antérieures à 2.4.5-p1 | ||
| Adobe | Magento | Magento Open Source versions 2.4.4x antérieures à 2.4.4-p2 | ||
| Adobe | Acrobat Reader DC | Acrobat Reader DC versions antérieures à 22.003.20258 | ||
| Adobe | Acrobat DC | Acrobat DC versions antérieures à 22.003.20258 | ||
| Adobe | Acrobat | Acrobat 2020 versions antérieures à 20.005.30407 | ||
| Adobe | ColdFusion | ColdFusion 2018 versions antérieures à Update 15 | ||
| Adobe | Commerce | Adobe Commerce versions 2.4.5x antérieures à 2.4.5-p1 | ||
| Adobe | Acrobat Reader | Acrobat Reader 2020 versions antérieures à 20.005.30407 |
References
| Title | Publication Time | Tags | |||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|
|
|||||||||||
{
"$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
"affected_systems": [
{
"description": "ColdFusion 2021 versions ant\u00e9rieures \u00e0 Update 5",
"product": {
"name": "ColdFusion",
"vendor": {
"name": "Adobe",
"scada": false
}
}
},
{
"description": "Adobe Commerce versions 2.4.4x ant\u00e9rieures \u00e0 2.4.4-p2",
"product": {
"name": "Commerce",
"vendor": {
"name": "Adobe",
"scada": false
}
}
},
{
"description": "Magento Open Source versions 2.4.5x ant\u00e9rieures \u00e0 2.4.5-p1",
"product": {
"name": "Magento",
"vendor": {
"name": "Adobe",
"scada": false
}
}
},
{
"description": "Magento Open Source versions 2.4.4x ant\u00e9rieures \u00e0 2.4.4-p2",
"product": {
"name": "Magento",
"vendor": {
"name": "Adobe",
"scada": false
}
}
},
{
"description": "Acrobat Reader DC versions ant\u00e9rieures \u00e0 22.003.20258",
"product": {
"name": "Acrobat Reader DC",
"vendor": {
"name": "Adobe",
"scada": false
}
}
},
{
"description": "Acrobat DC versions ant\u00e9rieures \u00e0 22.003.20258",
"product": {
"name": "Acrobat DC",
"vendor": {
"name": "Adobe",
"scada": false
}
}
},
{
"description": "Acrobat 2020 versions ant\u00e9rieures \u00e0 20.005.30407",
"product": {
"name": "Acrobat",
"vendor": {
"name": "Adobe",
"scada": false
}
}
},
{
"description": "ColdFusion 2018 versions ant\u00e9rieures \u00e0 Update 15",
"product": {
"name": "ColdFusion",
"vendor": {
"name": "Adobe",
"scada": false
}
}
},
{
"description": "Adobe Commerce versions 2.4.5x ant\u00e9rieures \u00e0 2.4.5-p1",
"product": {
"name": "Commerce",
"vendor": {
"name": "Adobe",
"scada": false
}
}
},
{
"description": "Acrobat Reader 2020 versions ant\u00e9rieures \u00e0 20.005.30407",
"product": {
"name": "Acrobat Reader",
"vendor": {
"name": "Adobe",
"scada": false
}
}
}
],
"affected_systems_content": null,
"content": "## Solution\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des\ncorrectifs (cf. section Documentation).\n",
"cves": [
{
"name": "CVE-2022-42342",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-42342"
},
{
"name": "CVE-2022-42339",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-42339"
},
{
"name": "CVE-2022-35712",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-35712"
},
{
"name": "CVE-2022-35711",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-35711"
},
{
"name": "CVE-2022-35690",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-35690"
},
{
"name": "CVE-2022-35689",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-35689"
},
{
"name": "CVE-2022-35710",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-35710"
},
{
"name": "CVE-2022-38422",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-38422"
},
{
"name": "CVE-2022-42340",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-42340"
},
{
"name": "CVE-2022-38420",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-38420"
},
{
"name": "CVE-2022-35691",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-35691"
},
{
"name": "CVE-2022-38424",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-38424"
},
{
"name": "CVE-2022-38423",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-38423"
},
{
"name": "CVE-2022-38421",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-38421"
},
{
"name": "CVE-2022-38449",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-38449"
},
{
"name": "CVE-2022-38419",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-38419"
},
{
"name": "CVE-2022-38437",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-38437"
},
{
"name": "CVE-2022-35698",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-35698"
},
{
"name": "CVE-2022-38450",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-38450"
},
{
"name": "CVE-2022-38418",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-38418"
},
{
"name": "CVE-2022-42341",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-42341"
}
],
"initial_release_date": "2022-10-17T00:00:00",
"last_revision_date": "2022-10-17T00:00:00",
"links": [],
"reference": "CERTFR-2022-AVI-920",
"revisions": [
{
"description": "Version initiale",
"revision_date": "2022-10-17T00:00:00.000000"
}
],
"risks": [
{
"description": "Ex\u00e9cution de code arbitraire \u00e0 distance"
},
{
"description": "Atteinte \u00e0 l\u0027int\u00e9grit\u00e9 des donn\u00e9es"
},
{
"description": "D\u00e9ni de service"
},
{
"description": "Contournement de la politique de s\u00e9curit\u00e9"
},
{
"description": "Atteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es"
},
{
"description": "\u00c9l\u00e9vation de privil\u00e8ges"
}
],
"summary": "De multiples vuln\u00e9rabilit\u00e9s ont \u00e9t\u00e9 d\u00e9couvertes dans les produits Adobe.\nCertaines d\u0027entre elles permettent \u00e0 un attaquant de provoquer une\nex\u00e9cution de code arbitraire \u00e0 distance, un d\u00e9ni de service et un\ncontournement de la politique de s\u00e9curit\u00e9.\n",
"title": "Multiples vuln\u00e9rabilit\u00e9s dans les produits Adobe",
"vendor_advisories": [
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Adobe apsb22-44 du 11 octobre 2022",
"url": "https://helpx.adobe.com/security/products/coldfusion/apsb22-44.html"
},
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Adobe apsb22-48 du 12 octobre 2022",
"url": "https://helpx.adobe.com/security/products/magento/apsb22-48.html"
},
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Adobe apsb22-46 du 11 octobre 2022",
"url": "https://helpx.adobe.com/security/products/acrobat/apsb22-46.html"
}
]
}
CERTFR-2022-AVI-726
Vulnerability from certfr_avis - Published: 2022-08-10 - Updated: 2022-08-10
De multiples vulnérabilités ont été découvertes dans les produits Adobe. Certaines d'entre elles permettent à un attaquant de provoquer une exécution de code arbitraire à distance, un contournement de la politique de sécurité et une atteinte à l'intégrité des données.
Solution
Se référer au bulletin de sécurité de l'éditeur pour l'obtention des correctifs (cf. section Documentation).
NoneImpacted products
| Vendor | Product | Description | ||
|---|---|---|---|---|
| Adobe | Acrobat Reader | Acrobat Reader 2017 versions antérieures à 17.012.30262 | ||
| Adobe | Commerce | Adobe Commerce versions 2.3.x antérieures à 2.3.7-p4 | ||
| Adobe | Acrobat DC | Acrobat DC versions antérieures à 22.002.20191 | ||
| Adobe | Magento | Magento Open Source versions 2.3.x antérieures à 2.3.7-p4 | ||
| Adobe | Acrobat Reader DC | Acrobat Reader DC versions antérieures à 22.002.20191 | ||
| Adobe | Magento | Magento Open Source versions 2.3.x antérieures à 2.4.3-p3, 2.4.4-p1 ou 2.4.5 | ||
| Adobe | Commerce | Adobe Commerce versions 2.4.x antérieures à 2.4.3-p3, 2.4.4-p1 ou 2.4.5 | ||
| Adobe | Acrobat | Acrobat 2017 versions antérieures à 17.012.30262 | ||
| Adobe | Acrobat Reader | Acrobat Reader versions antérieures à 2020 20.005.30381 | ||
| Adobe | Acrobat | Acrobat 2020 versions antérieures à 20.005.30381 |
References
| Title | Publication Time | Tags | ||||||
|---|---|---|---|---|---|---|---|---|
|
||||||||
{
"$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
"affected_systems": [
{
"description": "Acrobat Reader 2017 versions ant\u00e9rieures \u00e0 17.012.30262",
"product": {
"name": "Acrobat Reader",
"vendor": {
"name": "Adobe",
"scada": false
}
}
},
{
"description": "Adobe Commerce versions 2.3.x ant\u00e9rieures \u00e0 2.3.7-p4",
"product": {
"name": "Commerce",
"vendor": {
"name": "Adobe",
"scada": false
}
}
},
{
"description": "Acrobat DC versions ant\u00e9rieures \u00e0 22.002.20191",
"product": {
"name": "Acrobat DC",
"vendor": {
"name": "Adobe",
"scada": false
}
}
},
{
"description": "Magento Open Source versions 2.3.x ant\u00e9rieures \u00e0 2.3.7-p4",
"product": {
"name": "Magento",
"vendor": {
"name": "Adobe",
"scada": false
}
}
},
{
"description": "Acrobat Reader DC versions ant\u00e9rieures \u00e0 22.002.20191",
"product": {
"name": "Acrobat Reader DC",
"vendor": {
"name": "Adobe",
"scada": false
}
}
},
{
"description": "Magento Open Source versions 2.3.x ant\u00e9rieures \u00e0 2.4.3-p3, 2.4.4-p1 ou 2.4.5",
"product": {
"name": "Magento",
"vendor": {
"name": "Adobe",
"scada": false
}
}
},
{
"description": "Adobe Commerce versions 2.4.x ant\u00e9rieures \u00e0 2.4.3-p3, 2.4.4-p1 ou 2.4.5",
"product": {
"name": "Commerce",
"vendor": {
"name": "Adobe",
"scada": false
}
}
},
{
"description": "Acrobat 2017 versions ant\u00e9rieures \u00e0 17.012.30262",
"product": {
"name": "Acrobat",
"vendor": {
"name": "Adobe",
"scada": false
}
}
},
{
"description": "Acrobat Reader versions ant\u00e9rieures \u00e0 2020 20.005.30381",
"product": {
"name": "Acrobat Reader",
"vendor": {
"name": "Adobe",
"scada": false
}
}
},
{
"description": "Acrobat 2020 versions ant\u00e9rieures \u00e0 20.005.30381",
"product": {
"name": "Acrobat",
"vendor": {
"name": "Adobe",
"scada": false
}
}
}
],
"affected_systems_content": null,
"content": "## Solution\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des\ncorrectifs (cf. section Documentation).\n",
"cves": [
{
"name": "CVE-2022-35667",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-35667"
},
{
"name": "CVE-2022-34258",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-34258"
},
{
"name": "CVE-2022-34253",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-34253"
},
{
"name": "CVE-2022-34256",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-34256"
},
{
"name": "CVE-2022-34257",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-34257"
},
{
"name": "CVE-2022-35670",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-35670"
},
{
"name": "CVE-2022-35678",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-35678"
},
{
"name": "CVE-2022-35666",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-35666"
},
{
"name": "CVE-2022-35671",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-35671"
},
{
"name": "CVE-2022-34254",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-34254"
},
{
"name": "CVE-2022-35665",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-35665"
},
{
"name": "CVE-2022-34259",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-34259"
},
{
"name": "CVE-2022-34255",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-34255"
},
{
"name": "CVE-2022-35668",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-35668"
}
],
"initial_release_date": "2022-08-10T00:00:00",
"last_revision_date": "2022-08-10T00:00:00",
"links": [],
"reference": "CERTFR-2022-AVI-726",
"revisions": [
{
"description": "Version initiale",
"revision_date": "2022-08-10T00:00:00.000000"
}
],
"risks": [
{
"description": "Ex\u00e9cution de code arbitraire \u00e0 distance"
},
{
"description": "Atteinte \u00e0 l\u0027int\u00e9grit\u00e9 des donn\u00e9es"
},
{
"description": "Contournement de la politique de s\u00e9curit\u00e9"
},
{
"description": "Atteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es"
},
{
"description": "\u00c9l\u00e9vation de privil\u00e8ges"
}
],
"summary": "De multiples vuln\u00e9rabilit\u00e9s ont \u00e9t\u00e9 d\u00e9couvertes dans les produits Adobe.\nCertaines d\u0027entre elles permettent \u00e0 un attaquant de provoquer une\nex\u00e9cution de code arbitraire \u00e0 distance, un contournement de la\npolitique de s\u00e9curit\u00e9 et une atteinte \u00e0 l\u0027int\u00e9grit\u00e9 des donn\u00e9es.\n",
"title": "Multiples vuln\u00e9rabilit\u00e9s dans les produits Adobe",
"vendor_advisories": [
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Adobe apsb22-39 du 09 ao\u00fbt 2022",
"url": "https://helpx.adobe.com/security/products/acrobat/apsb22-39.html"
},
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Adobe apsb22-38 du 09 ao\u00fbt 2022",
"url": "https://helpx.adobe.com/security/products/magento/apsb22-38.html"
}
]
}
CERTFR-2022-AVI-333
Vulnerability from certfr_avis - Published: 2022-04-13 - Updated: 2022-04-13
De multiples vulnérabilités ont été découvertes dans les produits Adobe. Elles permettent à un attaquant de provoquer une exécution de code arbitraire, une atteinte à la confidentialité des données et une élévation de privilèges.
Solution
Se référer au bulletin de sécurité de l'éditeur pour l'obtention des correctifs (cf. section Documentation).
NoneImpacted products
| Vendor | Product | Description | ||
|---|---|---|---|---|
| Adobe | Acrobat DC | Acrobat DC pour Windows versions antérieures à 22.001.20117 | ||
| Adobe | Acrobat Reader | Acrobat Reader 2020 pour Mac versions antérieures à 20.005.30331 | ||
| Adobe | Acrobat Reader | Acrobat Reader 2020 pour Windows versions antérieures à 20.005.30334 | ||
| Adobe | Acrobat | Acrobat 2017 pour Mac versions antérieures à 17.012.30227 | ||
| Adobe | Commerce | Adobe Commerce versions 2.4.x antérieures à 2.4.3-p2, 2.4.4 | ||
| Adobe | Acrobat Reader DC | Acrobat Reader DC pour Mac versions antérieures à 22.001.20112 | ||
| Adobe | Acrobat Reader | Acrobat Reader 2017 pour Windows versions antérieures à 17.012.30229 | ||
| Adobe | Commerce | Adobe Commerce versions 2.3.x antérieures à 2.3.7-p3 | ||
| Adobe | Magento | Magento Open Source versions 2.4.x antérieures 2.4.3-p2, 2.4.4 | ||
| Adobe | Acrobat Reader DC | Acrobat Reader DC pour Windows versions antérieures à 22.001.20117 | ||
| Adobe | Acrobat | Acrobat 2020 pour Mac versions antérieures à 20.005.30331 | ||
| Adobe | Magento | Magento Open Source versions 2.3.x antérieures à 2.3.7-p3 | ||
| Adobe | Acrobat | Acrobat 2017 pour Windows versions antérieures à 17.012.30229 | ||
| Adobe | Acrobat Reader | Acrobat Reader 2017 pour Mac versions antérieures à 17.012.30227 | ||
| Adobe | Acrobat | Acrobat 2020 pour Windows versions antérieures à 20.005.30334 | ||
| Adobe | Acrobat DC | Acrobat DC pour Mac versions antérieures à 22.001.20112 |
References
| Title | Publication Time | Tags | ||||||
|---|---|---|---|---|---|---|---|---|
|
||||||||
{
"$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
"affected_systems": [
{
"description": "Acrobat DC pour Windows versions ant\u00e9rieures \u00e0 22.001.20117",
"product": {
"name": "Acrobat DC",
"vendor": {
"name": "Adobe",
"scada": false
}
}
},
{
"description": "Acrobat Reader 2020 pour Mac versions ant\u00e9rieures \u00e0 20.005.30331",
"product": {
"name": "Acrobat Reader",
"vendor": {
"name": "Adobe",
"scada": false
}
}
},
{
"description": "Acrobat Reader 2020 pour Windows versions ant\u00e9rieures \u00e0 20.005.30334",
"product": {
"name": "Acrobat Reader",
"vendor": {
"name": "Adobe",
"scada": false
}
}
},
{
"description": "Acrobat 2017 pour Mac versions ant\u00e9rieures \u00e0 17.012.30227",
"product": {
"name": "Acrobat",
"vendor": {
"name": "Adobe",
"scada": false
}
}
},
{
"description": "Adobe Commerce versions 2.4.x ant\u00e9rieures \u00e0 2.4.3-p2, 2.4.4",
"product": {
"name": "Commerce",
"vendor": {
"name": "Adobe",
"scada": false
}
}
},
{
"description": "Acrobat Reader DC pour Mac versions ant\u00e9rieures \u00e0 22.001.20112",
"product": {
"name": "Acrobat Reader DC",
"vendor": {
"name": "Adobe",
"scada": false
}
}
},
{
"description": "Acrobat Reader 2017 pour Windows versions ant\u00e9rieures \u00e0 17.012.30229",
"product": {
"name": "Acrobat Reader",
"vendor": {
"name": "Adobe",
"scada": false
}
}
},
{
"description": "Adobe Commerce versions 2.3.x ant\u00e9rieures \u00e0 2.3.7-p3",
"product": {
"name": "Commerce",
"vendor": {
"name": "Adobe",
"scada": false
}
}
},
{
"description": "Magento Open Source versions 2.4.x ant\u00e9rieures 2.4.3-p2, 2.4.4",
"product": {
"name": "Magento",
"vendor": {
"name": "Adobe",
"scada": false
}
}
},
{
"description": "Acrobat Reader DC pour Windows versions ant\u00e9rieures \u00e0 22.001.20117",
"product": {
"name": "Acrobat Reader DC",
"vendor": {
"name": "Adobe",
"scada": false
}
}
},
{
"description": "Acrobat 2020 pour Mac versions ant\u00e9rieures \u00e0 20.005.30331",
"product": {
"name": "Acrobat",
"vendor": {
"name": "Adobe",
"scada": false
}
}
},
{
"description": "Magento Open Source versions 2.3.x ant\u00e9rieures \u00e0 2.3.7-p3",
"product": {
"name": "Magento",
"vendor": {
"name": "Adobe",
"scada": false
}
}
},
{
"description": "Acrobat 2017 pour Windows versions ant\u00e9rieures \u00e0 17.012.30229",
"product": {
"name": "Acrobat",
"vendor": {
"name": "Adobe",
"scada": false
}
}
},
{
"description": "Acrobat Reader 2017 pour Mac versions ant\u00e9rieures \u00e0 17.012.30227",
"product": {
"name": "Acrobat Reader",
"vendor": {
"name": "Adobe",
"scada": false
}
}
},
{
"description": "Acrobat 2020 pour Windows versions ant\u00e9rieures \u00e0 20.005.30334",
"product": {
"name": "Acrobat",
"vendor": {
"name": "Adobe",
"scada": false
}
}
},
{
"description": "Acrobat DC pour Mac versions ant\u00e9rieures \u00e0 22.001.20112",
"product": {
"name": "Acrobat DC",
"vendor": {
"name": "Adobe",
"scada": false
}
}
}
],
"affected_systems_content": null,
"content": "## Solution\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des\ncorrectifs (cf. section Documentation).\n",
"cves": [
{
"name": "CVE-2022-28242",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-28242"
},
{
"name": "CVE-2022-27798",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-27798"
},
{
"name": "CVE-2022-28236",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-28236"
},
{
"name": "CVE-2022-27791",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-27791"
},
{
"name": "CVE-2022-28263",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-28263"
},
{
"name": "CVE-2022-28269",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-28269"
},
{
"name": "CVE-2022-28259",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-28259"
},
{
"name": "CVE-2022-27790",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-27790"
},
{
"name": "CVE-2022-28235",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-28235"
},
{
"name": "CVE-2022-24101",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-24101"
},
{
"name": "CVE-2022-28241",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-28241"
},
{
"name": "CVE-2022-27787",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-27787"
},
{
"name": "CVE-2022-28257",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-28257"
},
{
"name": "CVE-2022-27786",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-27786"
},
{
"name": "CVE-2022-28248",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-28248"
},
{
"name": "CVE-2022-28264",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-28264"
},
{
"name": "CVE-2022-28237",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-28237"
},
{
"name": "CVE-2022-28249",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-28249"
},
{
"name": "CVE-2022-28254",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-28254"
},
{
"name": "CVE-2022-28262",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-28262"
},
{
"name": "CVE-2022-27800",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-27800"
},
{
"name": "CVE-2022-27797",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-27797"
},
{
"name": "CVE-2022-28230",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-28230"
},
{
"name": "CVE-2022-27789",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-27789"
},
{
"name": "CVE-2022-28245",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-28245"
},
{
"name": "CVE-2022-24104",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-24104"
},
{
"name": "CVE-2022-24103",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-24103"
},
{
"name": "CVE-2022-24093",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-24093"
},
{
"name": "CVE-2022-27795",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-27795"
},
{
"name": "CVE-2022-28238",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-28238"
},
{
"name": "CVE-2022-27793",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-27793"
},
{
"name": "CVE-2022-27799",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-27799"
},
{
"name": "CVE-2022-28260",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-28260"
},
{
"name": "CVE-2022-28244",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-28244"
},
{
"name": "CVE-2022-24102",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-24102"
},
{
"name": "CVE-2022-28250",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-28250"
},
{
"name": "CVE-2022-28253",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-28253"
},
{
"name": "CVE-2022-28265",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-28265"
},
{
"name": "CVE-2022-28239",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-28239"
},
{
"name": "CVE-2022-28243",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-28243"
},
{
"name": "CVE-2022-28255",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-28255"
},
{
"name": "CVE-2022-28246",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-28246"
},
{
"name": "CVE-2022-28252",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-28252"
},
{
"name": "CVE-2022-28267",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-28267"
},
{
"name": "CVE-2022-28261",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-28261"
},
{
"name": "CVE-2022-28231",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-28231"
},
{
"name": "CVE-2022-28232",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-28232"
},
{
"name": "CVE-2022-28266",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-28266"
},
{
"name": "CVE-2022-28247",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-28247"
},
{
"name": "CVE-2022-28251",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-28251"
},
{
"name": "CVE-2022-27802",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-27802"
},
{
"name": "CVE-2022-27801",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-27801"
},
{
"name": "CVE-2022-27785",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-27785"
},
{
"name": "CVE-2022-28240",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-28240"
},
{
"name": "CVE-2022-28256",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-28256"
},
{
"name": "CVE-2022-27796",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-27796"
},
{
"name": "CVE-2022-28268",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-28268"
},
{
"name": "CVE-2022-27792",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-27792"
},
{
"name": "CVE-2022-28258",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-28258"
},
{
"name": "CVE-2022-28233",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-28233"
},
{
"name": "CVE-2022-27788",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-27788"
},
{
"name": "CVE-2022-27794",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-27794"
},
{
"name": "CVE-2022-28234",
"url": "https://www.cve.org/CVERecord?id=CVE-2022-28234"
}
],
"initial_release_date": "2022-04-13T00:00:00",
"last_revision_date": "2022-04-13T00:00:00",
"links": [],
"reference": "CERTFR-2022-AVI-333",
"revisions": [
{
"description": "Version initiale",
"revision_date": "2022-04-13T00:00:00.000000"
}
],
"risks": [
{
"description": "Ex\u00e9cution de code arbitraire"
},
{
"description": "Atteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es"
},
{
"description": "\u00c9l\u00e9vation de privil\u00e8ges"
}
],
"summary": "De multiples vuln\u00e9rabilit\u00e9s ont \u00e9t\u00e9 d\u00e9couvertes dans les produits Adobe.\nElles permettent \u00e0 un attaquant de provoquer une ex\u00e9cution de code\narbitraire, une atteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es et une\n\u00e9l\u00e9vation de privil\u00e8ges.\n",
"title": "Multiples vuln\u00e9rabilit\u00e9s dans les produits Adobe",
"vendor_advisories": [
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Adobe apsb22-16 du 12 avril 2022",
"url": "https://helpx.adobe.com/security/products/acrobat/apsb22-16.html"
},
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Adobe apsb22-13 du 12 avril 2022",
"url": "https://helpx.adobe.com/security/products/magento/apsb22-13.html"
}
]
}
CERTFR-2021-AVI-779
Vulnerability from certfr_avis - Published: 2021-10-13 - Updated: 2021-10-13
Une vulnérabilité a été découverte dans les produits Adobe. Elle permet à un attaquant de provoquer une injection de requêtes illégitimes par rebond (CSRF).
Solution
Se référer au bulletin de sécurité de l'éditeur pour l'obtention des correctifs (cf. section Documentation).
NoneImpacted products
References
| Title | Publication Time | Tags | |||
|---|---|---|---|---|---|
|
|||||
{
"$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
"affected_systems": [
{
"description": "Adobe Commerce versions ant\u00e9rieures \u00e0 2.3.7-p2",
"product": {
"name": "Commerce",
"vendor": {
"name": "Adobe",
"scada": false
}
}
},
{
"description": "Magento Open Source versions ant\u00e9rieures \u00e0 2.4.3-p1",
"product": {
"name": "Magento",
"vendor": {
"name": "Adobe",
"scada": false
}
}
},
{
"description": "Adobe Commerce versions ant\u00e9rieures \u00e0 2.4.3-p1",
"product": {
"name": "Commerce",
"vendor": {
"name": "Adobe",
"scada": false
}
}
},
{
"description": "Magento Open Source versions ant\u00e9rieures \u00e0 2.3.7-p2",
"product": {
"name": "Magento",
"vendor": {
"name": "Adobe",
"scada": false
}
}
}
],
"affected_systems_content": null,
"content": "## Solution\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des\ncorrectifs (cf. section Documentation).\n",
"cves": [],
"initial_release_date": "2021-10-13T00:00:00",
"last_revision_date": "2021-10-13T00:00:00",
"links": [],
"reference": "CERTFR-2021-AVI-779",
"revisions": [
{
"description": "Version initiale",
"revision_date": "2021-10-13T00:00:00.000000"
}
],
"risks": [
{
"description": "Injection de requ\u00eates ill\u00e9gitimes par rebond (CSRF)"
}
],
"summary": "Une vuln\u00e9rabilit\u00e9 a \u00e9t\u00e9 d\u00e9couverte dans les produits Adobe. Elle permet\n\u00e0 un attaquant de provoquer une injection de requ\u00eates ill\u00e9gitimes par\nrebond (CSRF).\n",
"title": "Vuln\u00e9rabilit\u00e9 dans les produits Adobe",
"vendor_advisories": [
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Adobe apsb21-86 du 12 octobre 2021",
"url": "https://helpx.adobe.com/security/products/magento/apsb21-86.html"
}
]
}