Advisories · Technology

Adobe Commerce B2B.

Every CVE that names Adobe Commerce B2B among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-21294 CVE record

CVSS 5.5 Medium

Adobe Commerce | Server-Side Request Forgery (SSRF) (CWE-918)
- Adobe Commerce
- Adobe Commerce B2B
- Server-side request forgery (SSRF)
Not analysed yet 11 Mar 2026
CVE-2026-21284 CVE record

CVSS 8.1 High

Adobe Commerce | Cross-site Scripting (Stored XSS) (CWE-79)
- Adobe Commerce
- Adobe Commerce B2B
- Cross-site scripting (XSS)
Not analysed yet 11 Mar 2026
CVE-2026-21297 CVE record

CVSS 4.3 Medium

Adobe Commerce | Incorrect Authorization (CWE-863)
- Adobe Commerce
- Adobe Commerce B2B
- Broken access control
Not analysed yet 11 Mar 2026
CVE-2026-21359 CVE record

CVSS 4.7 Medium

Adobe Commerce | Incorrect Authorization (CWE-863)
- Adobe Commerce
- Adobe Commerce B2B
- Broken access control
Not analysed yet 11 Mar 2026
CVE-2026-21309 CVE record

CVSS 7.5 High

Adobe Commerce | Incorrect Authorization (CWE-863)
- Adobe Commerce
- Adobe Commerce B2B
- Broken access control
Not analysed yet 11 Mar 2026
CVE-2026-21292 CVE record

CVSS 5.4 Medium

Adobe Commerce | Cross-site Scripting (Stored XSS) (CWE-79)
- Adobe Commerce
- Adobe Commerce B2B
- Cross-site scripting (XSS)
Not analysed yet 11 Mar 2026
CVE-2026-21310 CVE record

CVSS 5.3 Medium

Adobe Commerce | Improper Input Validation (CWE-20)
- Adobe Commerce
- Adobe Commerce B2B
- CWE-20
Not analysed yet 11 Mar 2026
CVE-2026-21285 CVE record

CVSS 4.3 Medium

Adobe Commerce | Incorrect Authorization (CWE-863)
- Adobe Commerce
- Adobe Commerce B2B
- Broken access control
Not analysed yet 11 Mar 2026
CVE-2026-21290 CVE record

CVSS 8.7 High

Adobe Commerce | Cross-site Scripting (Stored XSS) (CWE-79)
- Adobe Commerce
- Adobe Commerce B2B
- Cross-site scripting (XSS)
Not analysed yet 11 Mar 2026
CVE-2026-21289 CVE record

CVSS 7.5 High

Adobe Commerce | Incorrect Authorization (CWE-863)
- Adobe Commerce
- Adobe Commerce B2B
- Broken access control
Not analysed yet 11 Mar 2026
CVE-2026-21361 CVE record

CVSS 8.1 High

Adobe Commerce | Cross-site Scripting (Stored XSS) (CWE-79)
- Adobe Commerce
- Adobe Commerce B2B
- Cross-site scripting (XSS)
Not analysed yet 11 Mar 2026
CVE-2026-21360 CVE record

CVSS 6.8 Medium

Adobe Commerce | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') (CWE-22)
- Adobe Commerce
- Adobe Commerce B2B
- Path traversal
Not analysed yet 11 Mar 2026
CVE-2026-21296 CVE record

CVSS 4.3 Medium

Adobe Commerce | Incorrect Authorization (CWE-863)
- Adobe Commerce
- Adobe Commerce B2B
- Broken access control
Not analysed yet 11 Mar 2026
CVE-2026-21311 CVE record

CVSS 8.0 High

Adobe Commerce | Cross-site Scripting (Stored XSS) (CWE-79)
- Adobe Commerce
- Adobe Commerce B2B
- Cross-site scripting (XSS)
Not analysed yet 11 Mar 2026
CVE-2026-21295 CVE record

CVSS 3.1 Low

Adobe Commerce | URL Redirection to Untrusted Site ('Open Redirect') (CWE-601)
- Adobe Commerce
- Adobe Commerce B2B
- Open redirect
Not analysed yet 11 Mar 2026