Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2025-30273 State: PUBLISHED Published: 2025-08-29T17:16:27.210Z Last Updated: 2025-08-29T18:22:44.930Z Vendors: QNAP Systems Inc. Products: QTS, QuTS hero Problem Types: CWE-787 Description: An out-of-bounds write vulnerability has been reported to affect several QNAP operating system versions. If a remote attacker gains a user account, they can then exploit the vulnerability to modify or corrupt memory. We have already fixed the vulnerability in the following versions: QTS 5.2.5.3145 build 20250526 and later QuTS hero h5.2.5.3138 build 20250519 and later Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.qnap.com/en/security-advisory/qsa-25-21
CVE ID: CVE-2025-30274 State: PUBLISHED Published: 2025-08-29T17:16:31.717Z Last Updated: 2025-08-29T18:22:37.804Z Vendors: QNAP Systems Inc. Products: QTS, QuTS hero Problem Types: CWE-476 Description: A NULL pointer dereference vulnerability has been reported to affect several QNAP operating system versions. If can then exploit the vulnerability to launch a denial-of-service (DoS) attack. We have already fixed the vulnerability in the following versions: QTS 5.2.5.3145 build 20250526 and later QuTS hero h5.2.5.3138 build 20250519 and later Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.qnap.com/en/security-advisory/qsa-25-21
CVE ID: CVE-2025-30275 State: PUBLISHED Published: 2025-08-29T17:16:36.940Z Last Updated: 2025-08-29T18:22:31.969Z Vendors: QNAP Systems Inc. Products: Qsync Central Problem Types: CWE-476 Description: A NULL pointer dereference vulnerability has been reported to affect Qsync Central. If a remote attacker gains a user account, they can then exploit the vulnerability to launch a denial-of-service (DoS) attack. We have already fixed the vulnerability in the following version: Qsync Central 4.5.0.7 ( 2025/04/23 ) and later Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.qnap.com/en/security-advisory/qsa-25-22
CVE ID: CVE-2025-30277 State: PUBLISHED Published: 2025-08-29T17:16:41.798Z Last Updated: 2025-08-29T18:22:25.665Z Vendors: QNAP Systems Inc. Products: Qsync Central Problem Types: CWE-295 Description: An improper certificate validation vulnerability has been reported to affect Qsync Central. If a remote attacker gains a user account, they can then exploit the vulnerability to compromise the security of the system. We have already fixed the vulnerability in the following version: Qsync Central 4.5.0.7 ( 2025/04/23 ) and later Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.qnap.com/en/security-advisory/qsa-25-22
CVE ID: CVE-2025-30278 State: PUBLISHED Published: 2025-08-29T17:16:46.575Z Last Updated: 2025-08-29T18:22:18.446Z Vendors: QNAP Systems Inc. Products: Qsync Central Problem Types: CWE-295 Description: An improper certificate validation vulnerability has been reported to affect Qsync Central. If a remote attacker gains a user account, they can then exploit the vulnerability to compromise the security of the system. We have already fixed the vulnerability in the following version: Qsync Central 4.5.0.7 ( 2025/04/23 ) and later Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.qnap.com/en/security-advisory/qsa-25-22
CVE ID: CVE-2025-30279 State: PUBLISHED Published: 2025-06-06T15:52:26.501Z Last Updated: 2025-06-06T16:36:39.513Z Vendors: QNAP Systems Inc. Products: File Station 5 Problem Types: CWE-295 Description: An improper certificate validation vulnerability has been reported to affect File Station 5. If a remote attacker gains a user account, they can then exploit the vulnerability to compromise the security of the system. We have already fixed the vulnerability in the following version: File Station 5 5.5.6.4847 and later Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.qnap.com/en/security-advisory/qsa-25-16
CVE ID: CVE-2025-30280 State: PUBLISHED Published: 2025-04-08T08:22:31.167Z Last Updated: 2025-06-10T15:17:23.562Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N) Vendors: Siemens Products: Mendix Runtime V10, Mendix Runtime V10.12, Mendix Runtime V10.18, Mendix Runtime V10.6, Mendix Runtime V8, Mendix Runtime V9 Problem Types: CWE-204 Description: A vulnerability has been identified in Mendix Runtime V10 (All versions < V10.21.0), Mendix Runtime V10.12 (All versions < V10.12.16), Mendix Runtime V10.18 (All versions < V10.18.5), Mendix Runtime V10.6 (All versions < V10.6.22), Mendix Runtime V8 (All versions < V8.18.35), Mendix Runtime V9 (All versions < V9.24.34). Af
(All versions < V10.6.22), Mendix Runtime V8 (All versions < V8.18.35), Mendix Runtime V9 (All versions < V9.24.34). Affected applications allow for entity enumeration due to distinguishable responses in certain client actions. This could allow an unauthenticated remote attacker to list all valid entities and attribute names of a Mendix Runtime-based application. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://cert-portal.siemens.com/productcert/html/ssa-874353.html
CVE ID: CVE-2025-30281 State: PUBLISHED Published: 2025-04-08T20:02:51.732Z Last Updated: 2025-06-24T17:56:30.686Z Severity: CRITICAL (CVSS 9.1 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H) Vendors: Adobe Products: ColdFusion Problem Types: CWE-284 Description: ColdFusion versions 2023.12, 2021.18, 2025.0 and earlier are affected by an Improper Access Control vulnerability that could result in arbitrary code execution. A high-privileged attacker could leverage this vulnerability to access or modify sensitive data without proper authorization. Exploitation of this issue does not require user interaction, and scope is changed. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - ht
not require user interaction, and scope is changed. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://helpx.adobe.com/security/products/coldfusion/apsb25-15.html
CVE ID: CVE-2025-30282 State: PUBLISHED Published: 2025-04-08T20:02:59.068Z Last Updated: 2025-04-22T21:43:25.989Z Severity: CRITICAL (CVSS 9.1 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H) Vendors: Adobe Products: ColdFusion Problem Types: CWE-287 Description: ColdFusion versions 2023.12, 2021.18, 2025.0 and earlier are affected by an Improper Authentication vulnerability that could result in arbitrary code execution in the context of the current user. A high-privileged attacker could leverage this vulnerability to bypass authentication mechanisms and execute code. Exploitation of this issue does not require user interaction and scope is changed. Additional Analyst Notes: - CISA ADP Vulnric
ation of this issue does not require user interaction and scope is changed. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://helpx.adobe.com/security/products/coldfusion/apsb25-15.html
CVE ID: CVE-2025-30284 State: PUBLISHED Published: 2025-04-08T20:02:58.049Z Last Updated: 2025-09-05T03:55:27.958Z Severity: HIGH (CVSS 8.4 CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:H/I:H/A:H) Vendors: Adobe Products: ColdFusion Problem Types: CWE-502 Description: ColdFusion versions 2023.12, 2021.18, 2025.0 and earlier are affected by a Deserialization of Untrusted Data vulnerability that could result in arbitrary code execution in the context of the current user. A high-privileged attacker could leverage this vulnerability to bypass security protections and execute code. Exploitation of this issue requires user interaction and scope is changed. Additional Analyst Notes: - CISA ADP Vulnrichment: R
ation of this issue requires user interaction and scope is changed. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://helpx.adobe.com/security/products/coldfusion/apsb25-15.html
CVE ID: CVE-2025-30285 State: PUBLISHED Published: 2025-04-08T20:02:50.212Z Last Updated: 2025-04-18T17:35:35.238Z Severity: HIGH (CVSS 8.4 CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:H/I:H/A:H) Vendors: Adobe Products: ColdFusion Problem Types: CWE-502 Description: ColdFusion versions 2023.12, 2021.18, 2025.0 and earlier are affected by a Deserialization of Untrusted Data vulnerability that could result in arbitrary code execution in the context of the current user. A high-privileged attacker could leverage this vulnerability to bypass security protections and execute code. Exploitation of this issue requires user interaction and scope is changed. Additional Analyst Notes: - CISA ADP Vulnrichment: R
CVE ID: CVE-2025-30286 State: PUBLISHED Published: 2025-04-08T20:02:48.704Z Last Updated: 2025-04-18T17:49:52.379Z Severity: HIGH (CVSS 8.4 CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:H/I:H/A:H) Vendors: Adobe Products: ColdFusion Problem Types: CWE-78 Description: ColdFusion versions 2023.12, 2021.18, 2025.0 and earlier are affected by an Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability that could lead in arbitrary code execution by an attacker. A high-privileged attacker could leverage this vulnerability to bypass security protections and execute code. Exploitation of this issue requires user interaction and scope is changed. Additional Analys
otections and execute code. Exploitation of this issue requires user interaction and scope is changed. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://helpx.adobe.com/security/products/coldfusion/apsb25-15.html
CVE ID: CVE-2025-30287 State: PUBLISHED Published: 2025-04-08T20:03:02.492Z Last Updated: 2025-04-18T17:52:35.491Z Severity: HIGH (CVSS 8.2 CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H) Vendors: Adobe Products: ColdFusion Problem Types: CWE-287 Description: ColdFusion versions 2023.12, 2021.18, 2025.0 and earlier are affected by an Improper Authentication vulnerability that could result in arbitrary code execution in the context of the current user. A low privileged attacker with local access could leverage this vulnerability to bypass security protections and execute code. Exploitation of this issue requires user interaction in that a victim must be coerced into performing actions within th
Exploitation of this issue requires user interaction in that a victim must be coerced into performing actions within the application and scope is changed. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://helpx.adobe.com/security/products/coldfusion/apsb25-15.html
CVE ID: CVE-2025-30288 State: PUBLISHED Published: 2025-04-08T20:02:55.419Z Last Updated: 2025-09-05T03:55:30.211Z Severity: HIGH (CVSS 8.2 CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H) Vendors: Adobe Products: ColdFusion Problem Types: CWE-284 Description: ColdFusion versions 2023.12, 2021.18, 2025.0 and earlier are affected by an Improper Access Control vulnerability that could result in a Security feature bypass. A low privileged attacker with local access could leverage this vulnerability to bypass security protections and execute code. Exploitation of this issue requires user interaction in that a victim must be coerced into performing actions within the application and scope is changed
es user interaction in that a victim must be coerced into performing actions within the application and scope is changed. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://helpx.adobe.com/security/products/coldfusion/apsb25-15.html
CVE ID: CVE-2025-30289 State: PUBLISHED Published: 2025-04-08T20:02:56.190Z Last Updated: 2025-09-05T03:55:29.319Z Severity: HIGH (CVSS 8.2 CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H) Vendors: Adobe Products: ColdFusion Problem Types: CWE-78 Description: ColdFusion versions 2023.12, 2021.18, 2025.0 and earlier are affected by an Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability that could lead in arbitrary code execution by an attacker. A low privileged attacker with local access could leverage this vulnerability to bypass security protections and execute code. Exploitation of this issue requires user interaction in that a victim must
ypass security protections and execute code. Exploitation of this issue requires user interaction in that a victim must be coerced into performing actions within the application. Scope is changed. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://helpx.adobe.com/security/products/coldfusion/apsb25-15.html
CVE ID: CVE-2025-30290 State: PUBLISHED Published: 2025-04-08T20:02:59.926Z Last Updated: 2025-05-09T16:26:11.696Z Severity: HIGH (CVSS 8.7 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:N/I:H/A:H) Vendors: Adobe Products: ColdFusion Problem Types: CWE-22 Description: ColdFusion versions 2023.12, 2021.18, 2025.0 and earlier are affected by an Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability that could lead to a security feature bypass. A high privileged attacker could exploit this vulnerability to bypass security protections and gain unauthorized write and delete access. Exploitation of this issue does not require user interaction and scope is changed. Additio
ized write and delete access. Exploitation of this issue does not require user interaction and scope is changed. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://helpx.adobe.com/security/products/coldfusion/apsb25-15.html
CVE ID: CVE-2025-30291 State: PUBLISHED Published: 2025-04-08T20:02:50.968Z Last Updated: 2025-04-18T18:00:49.009Z Severity: MEDIUM (CVSS 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N) Vendors: Adobe Products: ColdFusion Problem Types: CWE-200 Description: ColdFusion versions 2023.12, 2021.18, 2025.0 and earlier are affected by an Information Exposure vulnerability that could result in a security feature bypass. A low privileged attacker with local access could leverage this vulnerability to gain access to sensitive information which could be used to further compromise the system or bypass security mechanisms. Exploitation of this issue does not require user interaction. Additional Analys
he system or bypass security mechanisms. Exploitation of this issue does not require user interaction. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://helpx.adobe.com/security/products/coldfusion/apsb25-15.html
CVE ID: CVE-2025-30292 State: PUBLISHED Published: 2025-04-08T20:03:00.828Z Last Updated: 2025-04-08T20:41:31.996Z Severity: MEDIUM (CVSS 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N) Vendors: Adobe Products: ColdFusion Problem Types: CWE-79 Description: ColdFusion versions 2023.12, 2021.18, 2025.0 and earlier are affected by a reflected Cross-Site Scripting (XSS) vulnerability. If an attacker is able to convince a victim to visit a URL referencing a vulnerable page, malicious JavaScript content may be executed within the context of the victim's browser. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://helpx.adobe.com/security/products/coldfusion/apsb25-15.html
CVE ID: CVE-2025-30293 State: PUBLISHED Published: 2025-04-08T20:03:01.634Z Last Updated: 2025-04-18T18:10:30.172Z Severity: MEDIUM (CVSS 6.8 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:N/I:H/A:N) Vendors: Adobe Products: ColdFusion Problem Types: CWE-20 Description: ColdFusion versions 2023.12, 2021.18, 2025.0 and earlier are affected by an Improper Input Validation vulnerability that could result in a security feature bypass. A high-privileged attacker could leverage this vulnerability to bypass security protections and gain unauthorized write access. Exploitation of this issue does not require user interaction and scope is changed. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - h
es not require user interaction and scope is changed. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://helpx.adobe.com/security/products/coldfusion/apsb25-15.html
CVE ID: CVE-2025-30294 State: PUBLISHED Published: 2025-04-08T20:02:57.132Z Last Updated: 2025-09-04T15:23:53.202Z Severity: MEDIUM (CVSS 6.8 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:N) Vendors: Adobe Products: ColdFusion Problem Types: CWE-20 Description: ColdFusion versions 2023.12, 2021.18, 2025.0 and earlier are affected by an Improper Input Validation vulnerability that could result in a security feature bypass. A high-privileged attacker could leverage this vulnerability to bypass security protections and gain unauthorized read access. Exploitation of this issue does not require user interaction and scope is changed. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - ht
s not require user interaction and scope is changed. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://helpx.adobe.com/security/products/coldfusion/apsb25-15.html
CVE ID: CVE-2025-30295 State: PUBLISHED Published: 2025-04-08T18:15:11.016Z Last Updated: 2025-04-09T04:01:11.636Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Adobe Products: Adobe Framemaker Problem Types: CWE-122 Description: Adobe Framemaker versions 2020.8, 2022.6 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://helpx.adobe.com/security/products/framemaker/apsb25-33.html
CVE ID: CVE-2025-30296 State: PUBLISHED Published: 2025-04-08T18:15:05.462Z Last Updated: 2025-04-09T04:01:17.225Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Adobe Products: Adobe Framemaker Problem Types: CWE-191 Description: Adobe Framemaker versions 2020.8, 2022.6 and earlier are affected by an Integer Underflow (Wrap or Wraparound) vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://helpx.adobe.com/security/products/framemaker/apsb25-33.htm
Analyst Notes: - CISA ADP Vulnrichment: References: - https://helpx.adobe.com/security/products/framemaker/apsb25-33.html
CVE ID: CVE-2025-30297 State: PUBLISHED Published: 2025-04-08T18:15:10.237Z Last Updated: 2025-04-09T04:01:09.751Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Adobe Products: Adobe Framemaker Problem Types: CWE-787 Description: Adobe Framemaker versions 2020.8, 2022.6 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://helpx.adobe.com/security/products/framemaker/apsb25-33.html
CVE ID: CVE-2025-30298 State: PUBLISHED Published: 2025-04-08T18:15:04.462Z Last Updated: 2025-04-09T04:01:19.210Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Adobe Products: Adobe Framemaker Problem Types: CWE-121 Description: Adobe Framemaker versions 2020.8, 2022.6 and earlier are affected by a Stack-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://helpx.adobe.com/security/products/framemaker/apsb25-33.html
CVE ID: CVE-2025-30299 State: PUBLISHED Published: 2025-04-08T18:15:06.417Z Last Updated: 2025-04-09T04:01:13.534Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Adobe Products: Adobe Framemaker Problem Types: CWE-122 Description: Adobe Framemaker versions 2020.8, 2022.6 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://helpx.adobe.com/security/products/framemaker/apsb25-33.html
CVE ID: CVE-2025-30300 State: PUBLISHED Published: 2025-04-08T18:15:13.213Z Last Updated: 2025-04-08T18:36:16.741Z Severity: MEDIUM (CVSS 5.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H) Vendors: Adobe Products: Adobe Framemaker Problem Types: CWE-476 Description: Adobe Framemaker versions 2020.8, 2022.6 and earlier are affected by a NULL Pointer Dereference vulnerability that could result in an application denial-of-service. An attacker could exploit this vulnerability to crash the application, leading to a denial of service condition. Exploitation of this issue requires user interaction in that a victim must open a malicious file. Additional Analyst Notes: - CISA ADP Vulnrichment: Referen
user interaction in that a victim must open a malicious file. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://helpx.adobe.com/security/products/framemaker/apsb25-33.html
CVE ID: CVE-2025-30301 State: PUBLISHED Published: 2025-04-08T18:15:08.137Z Last Updated: 2025-04-08T19:14:46.054Z Severity: MEDIUM (CVSS 5.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H) Vendors: Adobe Products: Adobe Framemaker Problem Types: CWE-476 Description: Adobe Framemaker versions 2020.8, 2022.6 and earlier are affected by a NULL Pointer Dereference vulnerability that could result in an application denial-of-service. An attacker could exploit this vulnerability to crash the application, leading to a denial-of-service condition. Exploitation of this issue requires user interaction in that a victim must open a malicious file. Additional Analyst Notes: - CISA ADP Vulnrichment: Referen
CVE ID: CVE-2025-30302 State: PUBLISHED Published: 2025-04-08T18:15:07.273Z Last Updated: 2025-04-08T19:05:56.023Z Severity: MEDIUM (CVSS 5.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N) Vendors: Adobe Products: Adobe Framemaker Problem Types: CWE-125 Description: Adobe Framemaker versions 2020.8, 2022.6 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim must open a malicious file. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://helpx.adobe.com/security/
pen a malicious file. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://helpx.adobe.com/security/products/framemaker/apsb25-33.html
CVE ID: CVE-2025-30303 State: PUBLISHED Published: 2025-04-08T18:15:12.046Z Last Updated: 2025-04-08T18:38:36.638Z Severity: MEDIUM (CVSS 5.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N) Vendors: Adobe Products: Adobe Framemaker Problem Types: CWE-125 Description: Adobe Framemaker versions 2020.8, 2022.6 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim must open a malicious file. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://helpx.adobe.com/security/
CVE ID: CVE-2025-30304 State: PUBLISHED Published: 2025-04-08T18:15:09.045Z Last Updated: 2025-04-09T04:01:07.804Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Adobe Products: Adobe Framemaker Problem Types: CWE-787 Description: Adobe Framemaker versions 2020.8, 2022.6 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://helpx.adobe.com/security/products/framemaker/apsb25-33.html