CVE-2022-35698
high-risk
Published 2022-10-14
Adobe Commerce versions 2.4.4-p1 (and earlier) and 2.4.5 (and earlier) are affected by a Stored Cross-site Scripting vulnerability. Exploitation of this issue does not require user interaction and could result in a post-authentication arbitrary code execution.
Do I need to act?
~
2.8% chance of exploitation in next 30 days
EPSS score — moderate exploit probability
-
Not on CISA KEV list
No confirmed active exploitation reported to CISA
+
Fix available
Upgrade to: 0f9a056c8d83c4f319626b3e56ec52a533999f25, 0f9a056c8d83c4f319626b3e56ec52a533999f25
10
CVSS 10.0/10
Critical
NETWORK
/ LOW complexity
Affected Products (8)
Affected Vendors
53
/ 100
high-risk
Severity
33/34 · Critical
Exploitability
6/34 · Minimal
Exposure
14/34 · Moderate