Total vulnerabilities in the database
Adobe Commerce versions 2.4.6-p1 (and earlier), 2.4.5-p3 (and earlier) and 2.4.4-p4 (and earlier) are affected by an Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability that could lead to arbitrary code execution by an admin-privilege authenticated attacker. Exploitation of this issue does not require user interaction.
| Software | From | Fixed in |
|---|---|---|
| adobe / commerce | 2.4.4 | 2.4.4.x |
| adobe / commerce | 2.4.5 | 2.4.5.x |
| adobe / commerce | 2.4.4-p1 | 2.4.4-p1.x |
| adobe / commerce | - | 2.4.4 |
| adobe / commerce | 2.4.5-p1 | 2.4.5-p1.x |
| adobe / commerce | 2.4.4-p2 | 2.4.4-p2.x |
| adobe / commerce | 2.4.5-p2 | 2.4.5-p2.x |
| adobe / commerce | 2.4.4-p3 | 2.4.4-p3.x |
| adobe / commerce | 2.4.6 | 2.4.6.x |
| adobe / commerce | 2.4.4-p4 | 2.4.4-p4.x |
| adobe / commerce | 2.4.5-p3 | 2.4.5-p3.x |
| adobe / commerce | 2.4.6-p1 | 2.4.6-p1.x |