How to report a vulnerability found by a third-party security agency

This article explains how to report a vulnerability found by a third-party security agency and which security reports Adobe handles.

Affected products and versions

Adobe Commerce (all versions)

Issue

A merchant performs a PEN test through an independent security agency, and the test flags a vulnerability.

Solution

To report a vulnerability, submit it to Intigriti. Adobe Commerce does not have a direct point of contact at Intigriti, so contact Intigriti directly for any queries.

Adobe reviews and handles only reports generated by the Magento Security Scan Tool (MST). Adobe does not support reports from other third-party security scanning tools.