CVE-2025-49554
HIGHAdobe Commerce < 2.4.4 - Improper Input Validation
Title source: ruleDescription
Adobe Commerce versions 2.4.9-alpha1, 2.4.8-p1, 2.4.7-p6, 2.4.6-p11, 2.4.5-p13, 2.4.4-p14 and earlier are affected by an Improper Input Validation vulnerability that could lead to application denial-of-service. An attacker could exploit this vulnerability by providing specially crafted input, causing the application to crash or become unresponsive. Exploitation of this issue does not require user interaction.
Scores
CVSS v3
7.5
EPSS
0.0019
EPSS Percentile
41.0%
Attack Vector
NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Classification
CWE
CWE-20
Status
published
Affected Products (50)
adobe/commerce
< 2.4.4
adobe/commerce
adobe/commerce
adobe/commerce
adobe/commerce
adobe/commerce
adobe/commerce
adobe/commerce
adobe/commerce
adobe/commerce
adobe/commerce
adobe/commerce
adobe/commerce
adobe/commerce
adobe/commerce
... and 35 more
Timeline
Published
Aug 12, 2025
Tracked Since
Feb 18, 2026