CVE-2025-49554

HIGH

Adobe Commerce < 2.4.4 - Improper Input Validation

Title source: rule

Description

Adobe Commerce versions 2.4.9-alpha1, 2.4.8-p1, 2.4.7-p6, 2.4.6-p11, 2.4.5-p13, 2.4.4-p14 and earlier are affected by an Improper Input Validation vulnerability that could lead to application denial-of-service. An attacker could exploit this vulnerability by providing specially crafted input, causing the application to crash or become unresponsive. Exploitation of this issue does not require user interaction.

Scores

CVSS v3 7.5
EPSS 0.0019
EPSS Percentile 41.0%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Classification

CWE
CWE-20
Status published

Affected Products (50)

adobe/commerce < 2.4.4
adobe/commerce
adobe/commerce
adobe/commerce
adobe/commerce
adobe/commerce
adobe/commerce
adobe/commerce
adobe/commerce
adobe/commerce
adobe/commerce
adobe/commerce
adobe/commerce
adobe/commerce
adobe/commerce
... and 35 more

Timeline

Published Aug 12, 2025
Tracked Since Feb 18, 2026