Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
aris accessible data. Description: Vulnerability in the Oracle Solaris product of Oracle Systems (component: Filesystem). Supported versions that are affected are 10 and 11. Difficult to exploit vulnerability allows unauthenticated attacker with network access via rquota to compromise Oracle Solaris. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Oracle Solaris accessible data. CVSS 3.1 Base Score 3.1 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N). Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment:
SS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N). Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.oracle.com/security-alerts/cpuoct2023.html
CVE ID: CVE-2023-22129 State: PUBLISHED Published: 2023-10-17T21:03:14.842Z Last Updated: 2024-09-13T15:41:23.253Z Severity: MEDIUM (CVSS 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H) Vendors: Oracle Corporation Products: Solaris Operating System Problem Types: Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle Solaris executes to compromise Oracle Solaris. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of Oracle Solaris. Description: Vulnerability in the Oracle Solaris product of Oracle Systems (component: Kernel). The supported version th
Description: Vulnerability in the Oracle Solaris product of Oracle Systems (component: Kernel). The supported version that is affected is 11. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle Solaris executes to compromise Oracle Solaris. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of Oracle Solaris. Note: This vunlerability only affects SPARC Systems. CVSS 3.1 Base Score 5.5 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H). Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: Refere
AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H). Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.oracle.com/security-alerts/cpuoct2023.html
CVE ID: CVE-2023-22130 State: PUBLISHED Published: 2023-10-17T21:03:15.185Z Last Updated: 2024-09-13T15:41:01.620Z Severity: MEDIUM (CVSS 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H) Vendors: Oracle Corporation Products: Sun ZFS Storage Appliance Kit (AK) Software Problem Types: Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise Sun ZFS Storage Appliance. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of Sun ZFS Storage Appliance. Description: Vulnerability in the Sun ZFS Storage Appliance product of Oracle Systems (component: Core). The s
ppliance. Description: Vulnerability in the Sun ZFS Storage Appliance product of Oracle Systems (component: Core). The supported version that is affected is 8.8.60. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise Sun ZFS Storage Appliance. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of Sun ZFS Storage Appliance. CVSS 3.1 Base Score 5.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H). Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.oracle.com/security
dditional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.oracle.com/security-alerts/cpuoct2023.html
CVE ID: CVE-2023-22139 State: REJECTED Published: N/A Last Updated: 2025-01-16T22:20:04.280Z Description: No description available.
CVE ID: CVE-2023-22226 State: PUBLISHED Published: 2023-02-17T00:00:00.000Z Last Updated: 2025-03-05T19:26:50.320Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Adobe Products: Bridge Problem Types: CWE-121 Description: Adobe Bridge versions 12.0.3 (and earlier) and 13.0.1 (and earlier) are affected by a Stack-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://helpx.adobe.com/security/products/bridge
Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://helpx.adobe.com/security/products/bridge/apsb23-09.html
CVE ID: CVE-2023-22227 State: PUBLISHED Published: 2023-02-17T00:00:00.000Z Last Updated: 2025-03-05T19:26:43.642Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Adobe Products: Bridge Problem Types: CWE-787 Description: Adobe Bridge versions 12.0.3 (and earlier) and 13.0.1 (and earlier) are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://helpx.adobe.com/security/products/bridge/apsb23
- CVE Program Container: - CISA ADP Vulnrichment: References: - https://helpx.adobe.com/security/products/bridge/apsb23-09.html
CVE ID: CVE-2023-22228 State: PUBLISHED Published: 2023-02-17T00:00:00.000Z Last Updated: 2025-03-05T19:26:36.773Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Adobe Products: Bridge Problem Types: CWE-20 Description: Adobe Bridge versions 12.0.3 (and earlier) and 13.0.1 (and earlier) are affected by an Improper Input Validation vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://helpx.adobe.com/security/products/bridge/a
otes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://helpx.adobe.com/security/products/bridge/apsb23-09.html
CVE ID: CVE-2023-22229 State: PUBLISHED Published: 2023-02-17T00:00:00.000Z Last Updated: 2025-03-05T19:26:30.038Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Adobe Products: Bridge Problem Types: CWE-787 Description: Adobe Bridge versions 12.0.3 (and earlier) and 13.0.1 (and earlier) are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://helpx.adobe.com/security/products/bridge/apsb23
CVE ID: CVE-2023-22230 State: PUBLISHED Published: 2023-02-17T00:00:00.000Z Last Updated: 2025-03-05T19:26:23.410Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Adobe Products: Bridge Problem Types: CWE-787 Description: Adobe Bridge versions 12.0.3 (and earlier) and 13.0.1 (and earlier) are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://helpx.adobe.com/security/products/bridge/apsb23
CVE ID: CVE-2023-22231 State: PUBLISHED Published: 2023-02-17T00:00:00.000Z Last Updated: 2025-03-05T19:26:14.783Z Severity: MEDIUM (CVSS 5.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N) Vendors: Adobe Products: Bridge Problem Types: CWE-125 Description: Adobe Bridge versions 12.0.3 (and earlier) and 13.0.1 (and earlier) are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim must open a malicious file. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - htt
CVE ID: CVE-2023-22232 State: PUBLISHED Published: 2023-02-17T00:00:00.000Z Last Updated: 2025-03-05T19:26:07.178Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N) Vendors: Adobe Products: Connect Problem Types: CWE-284 Description: Adobe Connect versions 11.4.5 (and earlier), 12.1.5 (and earlier) are affected by an Improper Access Control vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to impact the integrity of a minor feature. Exploitation of this issue does not require user interaction. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://helpx.adobe.com/securi
Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://helpx.adobe.com/security/products/connect/apsb23-05.html - http://packetstormsecurity.com/files/171390/Adobe-Connect-11.4.5-12.1.5-Local-File-Disclosure.html
CVE ID: CVE-2023-22233 State: PUBLISHED Published: 2023-02-17T00:00:00 Last Updated: 2024-08-02T13:29:46.833Z Severity: MEDIUM (CVSS 5.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N) Vendors: Adobe Products: After Effects Problem Types: CWE-125 Description: After Affects versions 23.1 (and earlier), 22.6.3 (and earlier) are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim must open a malicious file. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https
t open a malicious file. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://helpx.adobe.com/security/products/after_effects/apsb23-02.html
CVE ID: CVE-2023-22234 State: PUBLISHED Published: 2023-02-17T00:00:00.000Z Last Updated: 2025-03-05T19:25:58.234Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Adobe Products: Premiere Rush Problem Types: CWE-121 Description: Adobe Premiere Rush version 2.6 (and earlier) is affected by a Stack-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://helpx.adobe.com/security/products/premiere_rush/apsb23-1
ogram Container: - CISA ADP Vulnrichment: References: - https://helpx.adobe.com/security/products/premiere_rush/apsb23-14.html
CVE ID: CVE-2023-22235 State: PUBLISHED Published: 2023-04-12T00:00:00 Last Updated: 2024-09-13T15:48:08.495Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Adobe Products: InCopy Problem Types: CWE-416 Description: InCopy versions 18.1 (and earlier), 17.4 (and earlier) are affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://helpx.adobe.com/security/products/incopy/apsb23-13.html
CVE ID: CVE-2023-22236 State: PUBLISHED Published: 2023-02-17T00:00:00.000Z Last Updated: 2025-03-05T19:25:51.621Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Adobe Products: Animate Problem Types: CWE-122 Description: Adobe Animate versions 22.0.8 (and earlier) and 23.0.0 (and earlier) are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://helpx.adobe.com/security/products/anima
t Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://helpx.adobe.com/security/products/animate/apsb23-15.html
CVE ID: CVE-2023-22237 State: PUBLISHED Published: 2023-02-17T00:00:00 Last Updated: 2024-08-02T13:29:38.101Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Adobe Products: After Effects Problem Types: CWE-787 Description: After Affects versions 23.1 (and earlier), 22.6.3 (and earlier) are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://helpx.adobe.com/security/products/after_effects/a
CVE Program Container: - CISA ADP Vulnrichment: References: - https://helpx.adobe.com/security/products/after_effects/apsb23-02.html
CVE ID: CVE-2023-22238 State: PUBLISHED Published: 2023-02-17T00:00:00 Last Updated: 2024-08-02T13:29:23.677Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Adobe Products: After Effects Problem Types: CWE-787 Description: After Affects versions 23.1 (and earlier), 22.6.3 (and earlier) are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://helpx.adobe.com/security/products/after_effects/a
CVE ID: CVE-2023-22239 State: PUBLISHED Published: 2023-02-17T00:00:00 Last Updated: 2024-08-02T13:29:31.317Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Adobe Products: After Effects Problem Types: CWE-20 Description: After Affects versions 23.1 (and earlier), 22.6.3 (and earlier) are affected by an Improper Input Validation vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://helpx.adobe.com/security/products/after_effe
es: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://helpx.adobe.com/security/products/after_effects/apsb23-02.html
CVE ID: CVE-2023-22240 State: PUBLISHED Published: 2023-01-27T00:00:00.000Z Last Updated: 2025-03-05T19:27:44.403Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Adobe Products: Acrobat Reader Problem Types: CWE-787 Description: Adobe Acrobat Reader versions 22.003.20282 (and earlier), 22.003.20281 (and earlier) and 20.005.30418 (and earlier) are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: -
CVE ID: CVE-2023-22241 State: PUBLISHED Published: 2023-01-27T00:00:00.000Z Last Updated: 2025-03-05T19:27:37.408Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Adobe Products: Acrobat Reader Problem Types: CWE-787 Description: Adobe Acrobat Reader versions 22.003.20282 (and earlier), 22.003.20281 (and earlier) and 20.005.30418 (and earlier) are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: -
CVE ID: CVE-2023-22242 State: PUBLISHED Published: 2023-01-27T00:00:00.000Z Last Updated: 2025-03-05T19:27:30.759Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Adobe Products: Acrobat Reader Problem Types: CWE-787 Description: Adobe Acrobat Reader versions 22.003.20282 (and earlier), 22.003.20281 (and earlier) and 20.005.30418 (and earlier) are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: -
CVE ID: CVE-2023-22243 State: PUBLISHED Published: 2023-02-17T00:00:00.000Z Last Updated: 2025-03-05T19:25:44.226Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Adobe Products: Animate Problem Types: CWE-121 Description: Adobe Animate versions 22.0.8 (and earlier) and 23.0.0 (and earlier) are affected by a Stack-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://helpx.adobe.com/security/products/anim
st Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://helpx.adobe.com/security/products/animate/apsb23-15.html
CVE ID: CVE-2023-22244 State: PUBLISHED Published: 2023-02-17T00:00:00.000Z Last Updated: 2025-03-05T19:25:37.172Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Adobe Products: Premiere Rush Problem Types: CWE-416 Description: Adobe Premiere Rush version 2.6 (and earlier) is affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://helpx.adobe.com/security/products/premiere_rush/apsb23-14.html
CVE ID: CVE-2023-22246 State: PUBLISHED Published: 2023-02-17T00:00:00.000Z Last Updated: 2025-03-05T19:25:29.308Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Adobe Products: Animate Problem Types: CWE-416 Description: Adobe Animate versions 22.0.8 (and earlier) and 23.0.0 (and earlier) are affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://helpx.adobe.com/security/products/animate/apsb23-15
VE Program Container: - CISA ADP Vulnrichment: References: - https://helpx.adobe.com/security/products/animate/apsb23-15.html
CVE ID: CVE-2023-22247 State: PUBLISHED Published: 2023-03-27T00:00:00.000Z Last Updated: 2025-03-05T19:22:13.312Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N) Vendors: Adobe Products: Magento Commerce Problem Types: CWE-91 Description: Adobe Commerce versions 2.4.4-p2 (and earlier) and 2.4.5-p1 (and earlier) are affected by an XML Injection vulnerability that could lead to arbitrary file system read. An unauthenticated attacker can force the application to make arbitrary requests via injection of arbitrary URLs. Exploitation of this issue does not require user interaction. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - htt
require user interaction. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://helpx.adobe.com/security/products/magento/apsb23-17.html
CVE ID: CVE-2023-22248 State: PUBLISHED Published: 2023-06-15T00:00:00.000Z Last Updated: 2025-03-05T18:57:27.062Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N) Vendors: Adobe Products: Magento Commerce Problem Types: CWE-863 Description: Adobe Commerce versions 2.4.6 (and earlier), 2.4.5-p2 (and earlier) and 2.4.4-p3 (and earlier) are affected by an Incorrect Authorization vulnerability that could result in a security feature bypass. An attacker could leverage this vulnerability to leak another user's data. Exploitation of this issue does not require user interaction. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://h
re user interaction. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://helpx.adobe.com/security/products/magento/apsb23-35.html
CVE ID: CVE-2023-22249 State: PUBLISHED Published: 2023-03-27T00:00:00.000Z Last Updated: 2025-03-05T19:22:05.107Z Severity: MEDIUM (CVSS 4.8 CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N) Vendors: Adobe Products: Magento Commerce Problem Types: CWE-79 Description: Adobe Commerce versions 2.4.4-p2 (and earlier) and 2.4.5-p1 (and earlier) are affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a high-privileged attacker to inject malicious scripts into vulnerable form fields. Malicious JavaScript may be executed in a victim’s browser when they browse to the page containing the vulnerable field. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vuln
y browse to the page containing the vulnerable field. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://helpx.adobe.com/security/products/magento/apsb23-17.html
CVE ID: CVE-2023-22250 State: PUBLISHED Published: 2023-03-27T00:00:00.000Z Last Updated: 2025-03-05T19:21:57.851Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L) Vendors: Adobe Products: Magento Commerce Problem Types: CWE-284 Description: Adobe Commerce versions 2.4.4-p2 (and earlier) and 2.4.5-p1 (and earlier) are affected by an Improper Access Control vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to impact the availability of a user's minor feature. Exploitation of this issue does not require user interaction. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - htt
CVE ID: CVE-2023-22251 State: PUBLISHED Published: 2023-03-27T00:00:00.000Z Last Updated: 2025-03-05T19:21:51.464Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N) Vendors: Adobe Products: Magento Commerce Problem Types: CWE-863 Description: Adobe Commerce versions 2.4.4-p2 (and earlier) and 2.4.5-p1 (and earlier) are affected by an Incorrect Authorization vulnerability. A low-privileged authenticated attacker could leverage this vulnerability to achieve minor information disclosure. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://helpx.adobe.com/security/products/magento/apsb23-17.html